Application Security News and Articles


Understanding password behavior key to developing stronger cybersecurity protocols

Passwords are still the weakest link in an organization’s network, as proven by the analysis of over 800 million breached passwords, according to Specops Software. The study found 88% of passwords used in successful attacks consisted of 12 ...

Biden’s National Cybersecurity Strategy, BetterHelp’s FTC Fine, Chick-fil-A Data Breach

What you need to know about Biden’s new National Cybersecurity Strategy, which aims to provide a framework of what the current administration wants the US federal government, critical infrastructure organizations, and private companies to do to ...

New algorithm may change the future of secure communication

Researchers have made a significant breakthrough in secure communication by developing an algorithm that conceals sensitive information so effectively that it is impossible to detect anything hidden. The team, led by the University of Oxford in ...

Office Documents Are Being Weaponized. How May It Affect You?

How can Microsoft Office documents be used as cyber threats and what can users do to protect themselves? The post Office Documents Are Being Weaponized. How May It Affect You? appeared first on Security Boulevard.

Top Changes in the OWASP API Security Top 10 2023RC

The OWASP API project has recently decided to refresh the popular API Security Top 10 threat map. The team at Salt Security has always been actively involved in this project, having been a key contributor to the initial creation of the list. And ...

Unveiling the Shadow AI: The Rise of AI Reliance in Cybersecurity

Artificial Intelligence (AI) has been touted as the future of cybersecurity, and rightly so. With the growing volume and sophistication of cyber threats, cyber analysts are finding it challenging to keep up. As a result, AI has become an integral ...

Hyperview Appoints Digital Infrastructure Leader Bill Kleyman to Advisory Board

Award-winning data center, cloud, and digital infrastructure leader, Bill Kleyman is announced to Hyperview advisory board Vancouver, British Columbia – Mar. 14, 2023 – Hyperview, a leading cloud-based data center infrastructure ...

USENIX Security ’22 – Xiaochen Zou, Guoren Li, Weiteng Chen, Hang Zhang, Zhiyun Qian – ‘SyzScope: Revealing High-Risk Security Impacts Of Fuzzer-Exposed Bugs In Linux Kernel’

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Security ’22 Conference content on the organization’s’ YouTube channel. Permalink The post USENIX Security ’22 – Xiaochen Zou, Guoren Li, Weiteng Chen, ...

Almost Bare Bones WebR Starter App

Let’s walk through how to set up a ~minimal HTML/JS/CS + WebR-powered “app” on a server you own. This will be vanilla JS (i.e. no React/Vue/npm/bundler) you can hack on at-will. TL;DR: You can find the source to the app and track changes to ...

Procurement Guide Offers Best Practices for Moving to Cloud

The Center for Digital Government just released a new guide to help governments in their cloud journeys. Here’s why cybersecurity pros should pay close attention. The post Procurement Guide Offers Best Practices for Moving to Cloud appeared ...

Week in review: Public MS Word RCE PoC, API exploitation, Patch Tuesday forecast

Microsoft to boost protection against malicious OneNote documents Microsoft has announced that, starting in April 2023, they will be adding enhanced protection when users open or download a file embedded in a OneNote document – a known ...

A security use case for ChatGPT: Email Scam Robo Judge

I have been noodling around with ChatGPT recently and have found a nice little use case that I hope someone with more coding skills and... The post A security use case for ChatGPT: Email Scam Robo Judge appeared first on Security Boulevard.

ThreatBlockr and Engaged Security Partners help users prioritize breach prevention

ThreatBlockr and Engaged Security Partners announced a partnership focusing on “left of boom” protection to bring enhanced breach prevention to customers. Engaged Security Partners uses ThreatBlockr’s platform for threat intelligence ...

USENIX Security ’22 – Shujiang Wu, Jianjia Yu, Min Yang, Yinzhi Cao – ‘Rendering Contention Channel Made Practical In Web Browsers’

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Security ’22 Conference content on the organization’s’ YouTube channel. Permalink The post USENIX Security ’22 – Shujiang Wu, Jianjia Yu, Min Yang, ...

Hunting Emotet: How Behavioural Hunting Trumps IOC Detection Every Time

As a threat hunter, I have seen the evolution of cyber threats firsthand and the challenges that organizations face when trying to protect themselves. One threat that has been particularly persistent is the malware Emotet. Over the years, I have ...

Avast One Platinum protects users against new and evolving threats

Avast launched Avast One Platinum, the new premium tier of the Cyber Safety service, Avast One. The new Platinum offering combines the full feature set from Avast One Family with identity monitoring and protection, identity theft resolution and ...

Atera and ESET join forces to arm customers against zero-day threats

Atera announced a new strategic partnership and integration with ESET, enabling Atera’s community of IT professionals to deploy anti-malware solutions to protect their customers. “As cyberattacks increase in sophistication and ...

Aura partners with Robert Downey Jr. to increase awareness about the significance of online safety

Aura announced a multi-year partnership with Robert Downey Jr. Through the partnership, Downey Jr. joins Aura’s Board of Directors, invests in the company and commits to working with Aura as a strategist and brand advocate, supporting ...

QuSecure launches live end-to-end satellite quantum resilient link through space

QuSecure has accomplished the first known live, end-to-end quantum-resilient cryptographic communications satellite link through space, marking the first time U.S. satellite data transmissions have been protected from classical and quantum ...

Fighting Bots and Saving Costs in a Time of Shrinking Resources

Being a Chief Information Security Officer (CISO) is a challenging job, especially in today’s world where cyberattacks are on the rise and new data breaches seem to occur daily. Cybercriminals have become more advanced, and they can easily ...