Application Security News and Articles


Splunk SOAR Cyber Security: A Comprehensive Overview

Are the myriad of cyber security threats overwhelming your Splunk Security SOC team? Are you looking for a way to automate your response processes and streamlining your cyber security operations? Consider investigating SOAR – Security ...

How to Configure Safari for Privacy on iOS Devices (UPDATED FOR iOS 16.2)

This post was originally published on 2 OCT 2020; it has since been updated and revised. Though Safari is a closed-source browser, some users may wish to use with their Apple devices. This how-to guide will show you how to increase your data ...

4 Ways MSSPs Can Help Clients Manage GRC with Much-Need Executive Buy-in

Business risk and cybersecurity risk. For too long, many executives viewed the two as separate pieces of the operational resilience puzzle. In fact, most overlooked the possibility they could snap together at all, quite simply because those risks ...

Adobe Warns of ‘Very Limited Attacks’ Exploiting ColdFusion Zero-Day

Adobe issues urgent warning for “very limited attacks” exploiting a zero-day vulnerability in its ColdFusion web app development platform. The post Adobe Warns of ‘Very Limited Attacks’ Exploiting ColdFusion Zero-Day appeared first on ...

Randall Munroe’s XKCD ‘Radians Are Cursed’

via the comic artistry and dry wit of Randall Munroe, resident at XKCD! Permalink The post Randall Munroe’s XKCD ‘Radians Are Cursed’ appeared first on Security Boulevard.

How AI Could Write Our Laws

By Nathan E. Sanders & Bruce Schneier Nearly 90% of the multibillion-dollar federal lobbying apparatus in the United States serves corporate interests. In some cases, the objective of that money is obvious. Google pours millions into lobbying ...

Is Offensive AI Going to be a Problem for API Hackers?

Learn the ins and outs of offensive AI and how API hackers can benefit from it. The post Is Offensive AI Going to be a Problem for API Hackers? appeared first on Dana Epp's Blog. The post Is Offensive AI Going to be a Problem for API Hackers? ...

What to Expect During a SOX Compliance Audit

In 2002, the Public Company Accounting Oversight Board (PCAOB) created the Sarbanes-Oxley Act (SOX) due to major corporate scandals at the time involving companies such as Enron and WorldCom (neither of which exist any longer as a result of said ...

Fairwinds Insights Basics Tutorial: Avoid Containers Running with Dangerous Capabilities

Containers are standard units of software that package code and its related dependencies to enable applications to run reliably in different computing environments. Container images are lightweight executable packages of software that include all ...

Cybersecurity Learning Across Sectors – How ICCWS Brings Academics, Government, And Private Companies Together

The 18th International Conference on Cyber Warfare and Security gave researchers, policymakers, and security professionals a chance to share findings and ideas. Read the highlights. The post Cybersecurity Learning Across Sectors – How ICCWS ...

Ransomware Group Claims Theft of Valuable SpaceX Data From Contractor

The LockBit ransomware group claims to have stolen valuable SpaceX data after breaching the systems of Maximum Industries. The post Ransomware Group Claims Theft of Valuable SpaceX Data From Contractor appeared first on SecurityWeek.

USENIX Security ’22 – Jinsheng Ba, Marcel Böhme, Zahra Mirzamomen, Abhik Roychoudhury – ‘Stateful Greybox Fuzzing’

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Security ’22 Conference content on the organization’s’ YouTube channel. Permalink The post USENIX Security ’22 – Jinsheng Ba, Marcel Böhme, Zahra ...

The Top 5 Brand Protection Software Solutions in 2023

Which service providers offer the best brand protection solutions for your business? We have composed a list of the top five online brand protection providers in 2023. The post The Top 5 Brand Protection Software Solutions in 2023 appeared first ...

Revolutionizing DNS Security: Cost-Effective Deployment of DoH for ISPs

DNS over HTTPS (DoH) is a protocol that allows for DNS resolution to occur through an encrypted HTTPS connection. Unlike traditional DNS resolution, which employs unencrypted UDP or TCP connections, DoH provides a heightened level of privacy and ...

Wicked Good Development Episode 29: White House Unveils New National Cybersecurity Strategy

  The post Wicked Good Development Episode 29: White House Unveils New National Cybersecurity Strategy appeared first on Security Boulevard.

Netography Detection Model Release – March 13, 2023

The Netography Threat Research Team has released its latest detection model updates, including several optimizations of existing detections to reduce noise and provide more accurate alerts, and new detection models to detect DNS amplification ...

How the Best CISOs Drive Operational Resilience

Cyberattacks have exposed a myriad of vulnerabilities in our healthcare infrastructure, and will continue to do so as new and innovative medical technologies are developed. The post How the Best CISOs Drive Operational Resilience appeared first ...

CISA Program Warns Critical Infrastructure Organizations Vulnerable to Ransomware Attacks

A new CISA pilot program to warn critical infrastructure organizations if their systems are unpatched against vulnerabilities exploited in ransomware attacks. The post CISA Program Warns Critical Infrastructure Organizations Vulnerable to ...

ChatGPT and the Growing Threat of Bring Your Own AI to the SOC

Two new surveys stress the need for automation and AI – but one survey raises the additional specter of the growing use of bring your own AI (BYO-AI). The post ChatGPT and the Growing Threat of Bring Your Own AI to the SOC appeared first on ...

Cloud Forensics Startup Mitiga Completes $45M Series A

Israeli cloud security startup Mitiga adds Samsung Next as an investor in a completed $45 million Series A financing round. The post Cloud Forensics Startup Mitiga Completes $45M Series A appeared first on SecurityWeek.