Application Security News and Articles


USENIX Security ’22 – Shunfan Zhou, Zhemin Yang, Dan Qiao, Peng Liu, Min Yang, Zhe Wang, Chenggang Wu – ‘Ferry: State-Aware Symbolic Execution for Exploring State-Dependent Program Paths’

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Security ’22 Conference content on the organization’s’ YouTube channel. The post USENIX Security ’22 – Shunfan Zhou, Zhemin Yang, Dan Qiao, Peng Liu, Min ...

Meet Noname Security @ RSAC 2023!

T-1 week! We’re so excited to see you again in San Francisco. The post Meet Noname Security @ RSAC 2023! appeared first on Security Boulevard.

Top 15 Steps to a Successful AD Migration

Active Directory (AD) migration projects can be challenging and complex. Such projects involve the migration of users, groups, computers, and applications from one AD domain or forest to another. Careful planning and execution can help your ...

Fairwinds Insights Release Notes 11.12-12.2: Spotlight on Automated Fix PRs

This month’s Fairwinds Insights release notes offer a number of bug fixes and also details of our latest enhancements to Automated Fix Pull Requests (PRs) and our new NSA Hardening Compliance Report. Automated Fix PRs allows you to ...

Safeguarding Web Browsing: 5 Reasons to Prioritize Client-Side Security

Individuals continuously generate data, and much of it is about themselves and can be accessed by businesses and government entities. However, there is also the looming threat of unauthorized access to personal information by malicious actors ...

Where Network Atomization Meets Abstract Modernism: Netography at RSA Conference

Netography will be at RSA Conference at Booth #4116 in the Moscone South Corridor, where you can meet with the Netography team of experts who can show you our cloud-native Netography Fusion platform and how it can help address any challenges ...

Randall Munroe’s XKCD ‘Cosmological Nostalgia Content’

Permalink The post Randall Munroe’s XKCD ‘Cosmological Nostalgia Content’ appeared first on Security Boulevard.

Gartner® Top Trends in Cybersecurity 2023

Download the latest Gartner® report for insights into the top cybersecurity trends and opportunities security and risk-management leaders should prioritize in 2023. The post Gartner® Top Trends in Cybersecurity 2023 appeared first on ...

Takedown of GitHub Repositories Disrupts RedLine Malware Operations

Four GitHub repositories used by RedLine stealer control panels were suspended, disrupting the malware’s operations. The post Takedown of GitHub Repositories Disrupts RedLine Malware Operations appeared first on SecurityWeek.

The Importance of Patch Management in Cybersecurity

Applying a software update sounds like such a simple thing to do. And if you have just one computer with a few apps, it is indeed pretty straightforward to ensure that your software and operating system are kept up to date with the latest ...

New ‘Domino’ Malware Linked to FIN7 Group, Ex-Conti Members

New Domino backdoor brings together former members of the Conti group and the FIN7 threat actors. The post New ‘Domino’ Malware Linked to FIN7 Group, Ex-Conti Members appeared first on SecurityWeek.

How to use GPG as a security researcher

Discover how to use GNU Privacy Guard (GPG) to communicate with security triage teams as a security researcher. The post How to use GPG as a security researcher appeared first on Dana Epp's Blog. The post How to use GPG as a security researcher ...

Open letter to customers and partners from Contrast Security CEO Rick Fitz | Contrast Security

Helping software-driven companies take full advantage of the application economy by getting secure code swiftly flowing across their complete Software Development Life Cycle (SDLC) is at the heart of what Contrast Security is all about.  As ...

Zero-Trust Alone Proves Inadequate for Securing APIs

The disclosure of three significant API security incidents in the first two months of 2023 serves as a reminder that, as the use of APIs continue to rise, so too does the number of API related security breaches. The post Zero-Trust Alone Proves ...

SpecterOps Scores $25M Funding to Secure ID Attack Paths

Seattle startup SpecterOps secures $25 million in Series A funding to boost its BloodHound Enterprise platform. The post SpecterOps Scores $25M Funding to Secure ID Attack Paths appeared first on SecurityWeek.

KOTRA and KISIA will showcase 10 Korean cybersecurity companies at RSA Conference 2023

Korea Trade-Investment Promotion Agency (KOTRA) will host 10 Korean cybersecurity companies as Korea Pavilion with Korea Information Security Industry Association (KISIA) at RSA Conference 2023. KOTRA and KISIA will feature companies from across ...

USENIX Security ’22 – Yuchen Zhang, Chengbin Pang, Georgios Portokalidis, Nikos Triandopoulos, Jun Xu – ‘Debloating Address Sanitizer’

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Security ’22 Conference content on the organization’s’ YouTube channel. Permalink The post USENIX Security ’22 – Yuchen Zhang, Chengbin Pang, Georgios ...

NSO Group Used at Least 3 iOS Zero-Click Exploits in 2022: Citizen Lab

NSO Group used at least three iOS zero-click exploits in Pegasus attacks in 2022: FindMyPwn, PwnYourHome, and LatentImage. The post NSO Group Used at Least 3 iOS Zero-Click Exploits in 2022: Citizen Lab appeared first on SecurityWeek.

An IT team of one quickly takes control of 400 vulnerabilities

CASE STUDY Challenge: Organizations are inundated with hundreds of thousands of vulnerabilities every year. After years of experience, we know most organizations can only patch about 1 in 10 (10%) vulnerabilities discovered in their environment ...

Why Causal AI is Crucial to Cyber Defense Planning in 2023

Recently, there’s been tremendous hype around artificial intelligence. For cybersecurity practitioners, it’s becoming increasingly important in developing a cybersecurity strategy. AI’s ability to scan millions of events in seconds while ...