Application Security News and Articles


Cybereason Raises $100 Million, Appoints New CEO

Cybereason appoints new CEO as it receives $100 million in venture funding from SoftBank Corp. The post Cybereason Raises $100 Million, Appoints New CEO appeared first on SecurityWeek.

3CX Supply Chain Attack: North Korean Hackers Likely Targeted Cryptocurrency Firms

3CX supply chain attack appears to have been conducted by North Korean hackers with the goal of targeting cryptocurrency firms. The post 3CX Supply Chain Attack: North Korean Hackers Likely Targeted Cryptocurrency Firms appeared first on ...

DoJ cracks down on cryptocurrency fraud, seizes $112 million in linked funds

The Department of Justice (DoJ) declared the confiscation of digital currency valued at approximately $112 million connected to fraudulent cryptocurrency investments. Laundering money from cryptocurrency confidence scams According to court ...

New data extortion email campaign copying ransomware gang techniques

The Avast Threat Labs have identified a new data extortion scam targeting companies. The scam is designed to look like it's coming from a ransomware or data extortion cyber gang and is sent via email to employees of different companies, ...

Cyber spring cleaning: Decluttering your digital home

Spring cleaning provides the perfect opportunity to declutter both your physical and digital homes. Although digital clutter doesn’t leave a physical trace, it can undoubtedly take up significant mental space. A messy digital environment can ...

What is the National Cybersecurity Strategy?

The Biden-Harris administration has announced its National Cybersecurity Strategy, a blueprint for the federal government on how best to handle issues related to cybercrime, national cyber defense, and what role the private sector should play in ...

Obsidian’s SSPM solution enables organizations to increase their SaaS security

Obsidian Security released its latest suite of SaaS security solutions. This suite of solutions comprising Obsidian Compliance Posture Management, Obsidian Integration Risk Management, and Obsidian Extend will together enable security and GRC ...

Vulnerabilities impacting multiple QNAP operating systems (CVE-2022-27597, CVE-2022-27598)

Two vulnerabilities affecting various QNAP operating systems (CVE-2022-27597 and CVE-2022-27598) have been uncovered by Sternum. These vulnerabilities enable authenticated remote users to access secret values, requiring owners to take immediate ...

How can organizations bridge the gap between DR and cybersecurity?

Breaking down the silos between disaster recovery (DR) and cybersecurity has become increasingly important to ensure maximum business resiliency against outages, data breaches, and ransomware attacks. Yet, many organizations still operate these ...

Streamlining cybersecurity decision-making for analysts and CISOs

Using structured, machine-readable data in defensive systems can present a significant challenge. In this Help Net Security interview, Giorgos Georgopoulos, CEO at Elemendar, discusses these challenges and how Elemendar’s application can ...

5 Tips for Devnexus 2023

Here are four tips for making the most of Devnexus 2023, based on my first-hand experience and conversations with other attendees. The post 5 Tips for Devnexus 2023 appeared first on Azul | Better Java Performance, Superior Java Support. The ...

Shadow data slipping past security teams

The rapid pace of cloud transformation and democratization of data has created a new innovation attack surface, leading to 3 in 4 organizations experiencing a cloud data breach in 2022, according to Laminar. 68% of data security professionals ...

Lack of security employees makes SMBs sitting ducks for cyber attacks

For SMBs (and startups in particular), breaches can be devastating, according to DigitalOcean. To strengthen their cybersecurity posture, companies must spend valuable resources on maintaining or updating systems, hiring and training staff, and ...

Guardz launches dedicated cybersecurity platform for MSPs and IT professionals

Guardz has launched its dedicated cybersecurity platform for MSPs and IT professionals that empowers MSPs to protect their clients with automated remediation plans, to improve their reporting for existing clients and better obtain new ones, and ...

Jeff Otto joins Riskified as CMO

Riskified has announced that Jeff Otto has joined the company as Chief Marketing Officer, effective immediately. Otto will be responsible for a global integrated marketing strategy that will amplify Riskified’s brand, strengthen its category ...

Top Cover – Threat Hunting Management Workshop: From KPIs to Metrics

Join us for a unique interactive threat hunting management workshop where Cyborg Security’s Senior Threat Hunter, Scott Poley, will guide you through the critical aspect of managing a threat hunting program.  This workshop is designed for ...

OWASP Top 10: Security misconfiguration

Listed at #5 in the OWASP Top 10 list, security misconfiguration refers to vulnerabilities that result from an application’s configuration.  The post OWASP Top 10: Security misconfiguration appeared first on Security Boulevard.

Top Cover: The Threat Hunting Management Workshop

Join us for a unique interactive threat hunting management workshop where Cyborg Security’s Director of Threat Research, Brandon Denker, will guide you through the critical aspect of managing a threat hunting program.  This workshop is ...

TrustCloud™ Replaces Manual Risk Registers with Programmatic and Predictive Risk Tracking to Reduce Business Liability

New TrustRegister™ application introduces programmatic risk assessments, empowering companies to proactively surface risks and remediation plans, map to customer contracts, and understand potential business impact. Boston MA—APR. 4, ...

Meet The Team Behind Mayhem: Come See Us At These Upcoming April 2023 Events

The Mayhem team participated in the Miami Cybersecurity Summit, Automotive IQ, and Wright-Patterson AFB Training last month.Continue reading on Mayhem by ForAllSecure »