Application Security News and Articles


5 Ways to Reduce the Attack Surface for Microservices

Microservices is a software development approach where an application is divided into small, independent and loosely coupled services that work together to provide the application’s overall functionality. Each microservice is designed to ...

Orca Security Traces Cloud Vulnerabilities Back to Code

Orca Security today announced it added an ability to trace cloud security risks in production environments back to both the original code that created the issue and the developer that wrote it. Avi Shua, chief innovation officer for Orca ...

Communication: Using Social Engineering Techniques in Everyday Life

When I first started in the social engineering field, I had no idea how much it would impact my everyday […] The post Communication: Using Social Engineering Techniques in Everyday Life appeared first on Security Boulevard.

CISA’ Cybersecurity Performance Goals update: Key changes and additions your team should know

After only five months on the books, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) is revamping its Cybersecurity Performance Goals, a set of recommendations designed to help identify and prioritize measures to address the most ...

KPMG Tackles AI Security With Cranium Spinout

Consulting giant KPMG spins out a startup building technology to secure AI (artificial intelligence) applications and deployments. The post KPMG Tackles AI Security With Cranium Spinout appeared first on SecurityWeek.

Chrome 112 Patches 16 Security Flaws

Chrome 112 was released to the stable channel this week with 16 security fixes, including 14 for vulnerabilities reported by external researchers. The post Chrome 112 Patches 16 Security Flaws appeared first on SecurityWeek.

Flood of malicious packages results in NPM registry DoS

Attackers are exploiting the good reputation and “openness” of the popular public JavaScript software registry NPM to deliver malware and scams, but are also simultaneously and inadvertently launching DoS attacks against the service. ...

Fortinet enhances Security Fabric with real-time response and automation capabilities

Fortinet has expanded the Fortinet Security Fabric with new and enhanced products and capabilities to enable advanced threat prevention and coordinated response for a self-defending ecosystem across networks, endpoints, and clouds. The majority ...

Android’s April 2023 Updates Patch Critical Remote Code Execution Vulnerabilities

Android’s April 2023 security updates were released this week with patches for two critical-severity vulnerabilities leading to remote code execution. The post Android’s April 2023 Updates Patch Critical Remote Code Execution ...

Cybercrime Website Genesis Market Seized by FBI

The FBI has seized Genesis Market, a major cybercrime website offering stolen device fingerprints. The post Cybercrime Website Genesis Market Seized by FBI appeared first on SecurityWeek.

Why is Static Application Security Testing (SAST) Important?

As the world becomes more and more digital, the importance of secure software becomes increasingly critical.Continue reading on Medium »

Nexx Ignores Vulnerabilities Allowing Hackers to Remotely Open Garage Doors

Nexx has ignored repeated attempts to report critical product vulnerabilities that can be exploited to remotely open garage doors, and take control of alarms and smart plugs. The post Nexx Ignores Vulnerabilities Allowing Hackers to Remotely ...

MixMode Welcomes John Phillips as VP Federal Sales

MixMode, the leader in AI-driven network security, announces hiring John Phillips as VP of Federal Sales. Phillips will oversee the continued growth of MixMode’s federal business and adoption of the MixMode platform by federal partners, and he ...

How AI is transforming cybersecurity for better and worse

Many sectors view AI and machine learning with mixed emotions, but for the cybersecurity industry, they present a double-edged sword. On the one hand, AI provides powerful tools for cybersecurity professionals, such as automated security ...

Stop online counterfeiters dead in their tracks

During this Help Net Security interview, Nicole Hofmann, CEO at Sentryc, delves into the critical issue of counterfeiting and the detrimental impact it has on industries and brands. Hofmann sheds light on the modus operandi of counterfeiters, who ...

The high cost of insecure authentication methods

Insecure authentication is a primary cause of cyber breaches, and that cumbersome login methods take an unacceptable toll on employees and business productivity, according to HYPR. Respondents indicate that a passwordless approach would increase ...

Re-evaluating immature and ineffective insider risk management programs

Managing insider risk is becoming increasingly difficult. In fact, insider risk is emerging as one of the most challenging threats to detect, mitigate and manage, according to Code42. Although more than 72% of companies indicate they have an ...

F5 protects digital services with AI-powered app and API security capabilities

F5 has unveiled new security capabilities to give customers comprehensive protection and control in managing apps and APIs across on-premises, cloud, and edge locations. Specifically, new machine learning enhancements provide F5’s cloud ...

Akamai introduces new premium offering and updated managed security service program

Akamai introduced an updated managed security service program and premium service offerings. The new capabilities are intended to help customers protect their businesses 24×7 from the most sophisticated attacks with proactive monitoring and ...

IBM unveils new options to help clients reach their sustainability goals

IBM has unveiled new single frame and rack mount configurations of IBM z16 and IBM LinuxONE 4, expanding their capabilities to a broader range of data center environments. Based on IBM’s Telum processor, the new options are designed with ...