Application Security News and Articles


Menlo Security Illustrates Importance of Browser Security as 4 in 5 Ransomware Attacks Include Threats Beyond Data Encryption

CyberEdge Group’s 10th Annual Cyberthreat Defense Report Highlights Importance of Remote Browser Isolation Technology to Combat Evasive Adaptive Threats MOUNTAIN VIEW, Calif., April 11, 2023 – Menlo Security, a leader in browser security, ...

Fairwinds Insights Basics Tutorial: How to Resolve Liveness Probe Action Items

Liveness probes are an important type of health check in Kubernetes that determines whether a container is running and responsive. Kubernetes probes can help you identify whether a problem has already occurred or is currently occurring, which can ...

Beyond the Obvious: Overlooked technology considerations in cybersecurity

Nowhere does the theory that the “whole is greater than the sum of all its parts” ring truer than in the current security landscape. Despite unprecedented spending on security solutions—from Secure Web Gateways (SWGs) and multifactor ...

Syxsense platform updates simplify endpoint security and management

Syxsense has released new updates to the Syxsense product suite designed to extend automated workflow capabilities, improve usability, and enhance overall platform security. Key to this release is the introduction of Cortex Sequences, which uses ...

Armorblox Report Surfaces Spike in BEC Attacks

An analysis of customer data from email protection platform provider Armorblox found business email compromise (BEC) attacks have increased 72% year-over-year. More than half of those attacks (56%) bypassed legacy security filters that many ...

eSkimming Security: The Foundation of All Successful Website Redesigns

The increase in eSkimming attacks targeting customer data leave no room for neglecting security precautions during website redesign projects. Securing your customers’ data at the point of entry (as it is being entered into the forms on your ...

Mapping the Changes in the IT/OT Landscape

Nothing in cybersecurity stays still for long  2022 intensified the Digital Transformation in OT (technology that interfaces with the physical world) and Industrial Control Systems (ICS) environments even further. Partially driven by the ...

Socially Engineered Into Stealing $500,000 From a Casino

A cashier at a Colorado casino is accused of stealing half a million dollars in cash after allegedly being duped by phone calls and text messages from imposters posing as her bosses. She sits in a Colorado jail while the money is long gone. It ...

GitGuardian Honeytoken: your powerful ally to detect intrusions in the supply chain!

What if you could detect intrusion and code leakage early in your software supply chains? Introducing GitGuardian Honeytoken, the solution…Continue reading on GitGuardian »

Apple Rolls Out Zero-Day Patches to Older iOS, macOS Devices

Three days after announcing patches for new zero-days affecting iOS and macOS, Apple released fixes for devices running older operating system versions. The post Apple Rolls Out Zero-Day Patches to Older iOS, macOS Devices appeared first on ...

Everything You Need to Know About SOC 1 Requirements for Your Startup

In this article, We'll share everything you need to know about SOC 1 requirements so that you can ace your audit with confidence. The post Everything You Need to Know About SOC 1 Requirements for Your Startup appeared first on Scytale. The post ...

In the News | Avoid These Four Pitfalls When Implementing Online Education Software in K–12

This article was originally published in EdTech Magazine on 4/4/23  by Charlie Sander Schools are now using thousands of ed tech solutions. Here’s how they can protect their networks. Technology is no longer a complementary tool in the ...

Potential Outcomes of the US National Cybersecurity Strategy

The national strategy outlined by the Federal Government on March 1, 2023, is a monumental attempt to weave a consistent approach to cybersecurity for the whole nation. The post Potential Outcomes of the US National Cybersecurity Strategy ...

Businesses Need to Revisit Password Policies

Passwords are not going anywhere due to their simplicity and cost. Industries rely on passwords to provide clients and customers access. The post Businesses Need to Revisit Password Policies appeared first on Enzoic. The post Businesses Need to ...

Yum Brands Discloses Data Breach Following Ransomware Attack

KFC and Taco Bell parent company Yum Brands says personal information was compromised in a January 2023 ransomware attack. The post Yum Brands Discloses Data Breach Following Ransomware Attack appeared first on SecurityWeek.

Software Supply Chain Security Risks, Part 1 

It cannot be stated enough that software supply chain security risks are serious as organizations are so dependent on the software supply chain, an attack could cripple their business. The effects of the Log4j vulnerability continue to be felt as ...

Apple rushes fixes for exploited zero-days in iPhones and Macs (CVE-2023-28205, CVE-2023-28206)

Apple has pushed out security updates that fix two actively exploited zero-day vulnerabilities (CVE-2023-28205, CVE-2023-28206) in macOS, iOS and iPadOS. Reported by researchers Clément Lecigne of Google’s Threat Analysis Group (TAG) and ...

How to Increase Test Coverage (And Confidence!) With Mayhem in 4 Easy Steps

One critical aspect of quality assurance is test coverage, which refers to the percentage of the code covered by automated tests. The higher the test coverage, the more confidence we have in the software's functionality and reliability. In this ...

Microsoft Exchange Server 2013 Reaches End of Support

Microsoft Exchange Server 2013 has reached end of support on April 11, 2023, and will no longer receive security patches. The post Microsoft Exchange Server 2013 Reaches End of Support appeared first on SecurityWeek.

Cyber spring cleaning: Maintaining your digital home

Spring cleaning prompts many of us to refresh and reorganize our homes with an initial burst of enthusiasm. However, it’s the required maintenance that most of us falter on. So, much like for our physical homes, committing to a year-round cyber ...