Application Security News and Articles


Lockbit Ransomware Dominant Even as Overall Attack Rates Fall

With victims from 23 countries, Lockbit continues to be the most prolific ransomware group in the early months of 2023, even as an 11% decrease in ransomware victims was reported in January. These were among the findings from GuidePoint ...

How to Provision Serverless Resources with Terraform by HashiCorp

As more and more companies migrate their complex applications to the cloud, the need to deploy cloud infrastructure at scale is also increasing. Enterprises can no longer scale their deployments if they are provisioning infrastructure manually ...

Chrome 111 Patches 40 Vulnerabilities

Google has released Chrome 111 in the stable channel with patches for 40 vulnerabilities, including eight high-severity bugs The post Chrome 111 Patches 40 Vulnerabilities appeared first on SecurityWeek.

Extend Access Governance for SAP

Strategic partnership to address SAP access governance challengesDallas, Texas, March 8, 2023, SafePaaS and Incresol launch strategic partnership to address the complex challenges of access governance and seamless integration deliverability for ...

BlackLotus Malware Hijacks Windows Secure Boot Process

Researchers have discovered malware that “can hijack a computer’s boot process even when Secure Boot and other advanced protections are enabled and running on fully updated versions of Windows.” Dubbed BlackLotus, the malware is what’s ...

TSA Requires Aviation Sector to Enhance Cybersecurity Resilience

TSA instructs airport and aircraft operators to improve their cybersecurity resilience and prevent infrastructure disruption and degradation. The post TSA Requires Aviation Sector to Enhance Cybersecurity Resilience appeared first on SecurityWeek.

SOX Compliance Audit: everything you need to know

SOX Compliance Audit: everything you need to know in 2023Some organizations are new to Sarbanes-Oxley (SOX) Act requirements, while others are seasoned professionals. No matter your GRC strategy or the maturity of your SOX program, it can likely ...

Empowering Women in Cybersecurity: Breaking Through Barriers and Securing the Future

The world of cybersecurity has traditionally been male-dominated, with women being vastly underrepresented. Women are making their mark in this exciting industry and breaking down barriers individually. According to the survey, women will hold 30 ...

Three crucial moments when founding a cybersecurity startup

With 10% of startups failing in the first year, making wise and future-proof decisions for your new cybersecurity venture is essential. Building the perfect cybersecurity startup As society adapts to an increasingly digital world, opportunities ...

How STEM education can solve talent shortages, improve cybersecurity

In this Help Net Security video, Avani Desai, CEO at Schellman, talks about how teaching STEM subjects like cybersecurity is essential for addressing the staffing crisis and ensuring that organizations have the talent to protect themselves from ...

Attackers exploit APIs faster than ever before

After combing through 350,000 reports to find 650 API-specific vulnerabilities from 337 different vendors and tracking 115 published exploits impacting these vulnerabilities, the results clearly illustrate that the API threat landscape is ...

AI is taking phishing attacks to a whole new level of sophistication

92% of organizations have fallen victim to successful phishing attacks in the last 12 months, while 91% of organizations have admitted to experiencing email data loss, according to Egress. Not surprisingly, 99% of cybersecurity leaders confess to ...

Persona Graph proactively surfaces and blocks hidden fraud rings

Persona has launched Graph to help businesses stop online identity fraud. Leveraging advanced link analysis technology and a configurable query, Graph detects risky connections between users, enabling organizations to uncover and proactively ...

Akamai unveils new service and tools to help users reduce attack surface

Akamai Technologies has introduced the Akamai Hunt security service that enables customers to capitalize on the infrastructure of Akamai Guardicore Segmentation, Akamai’s global attack visibility, and expert security researchers to hunt and ...

New Kensington privacy screens protect against visual hacking

Kensington has expanded its robust portfolio of data protection solutions with the launch of three new privacy screens. The SA270 Privacy Screen for Studio Display (K50740WW), SA240 Privacy Screen for iMac 24” (K55170WW), and MagPro Elite ...

SANS Institute and Google collaborate to launch Cloud Diversity Academy

SANS Institute has launched the SANS Cloud Diversity Academy (SCDA) in collaboration with Google. This academy provides training and certifications to Black, Indigenous, and People of Color (BIPOC), women, and other underrepresented groups who ...

Why Healthcare Cybercrime is the Perfect Storm

It’s Friday night. You, your husband, and your two children are settling in for a fun pizza and movie night together.  Unexpectedly, your elderly neighbor, Anne, calls in a panic. Her husband Steve is having severe chest pains. While Anne has ...

Sued by Meta, Freenom Halts Domain Registrations

The domain name registrar Freenom, whose free domain names have long been a draw for spammers and phishers, has stopped allowing new domain name registrations. The move comes just days after the Dutch registrar was sued by Meta, which alleges the ...

Want to Stretch Your Security Budget? Read Our Guide

In an uncertain economy, getting sufficient funding for security budget projects can be hard to come by. Organizations are being more cautious about spending, which means security leaders must adapt accordingly. They need to be more discerning in ...

Understanding Splunk ES and Its Role in Cybersecurity

With the ever-evolving threat environment, it’s more important than ever to understand how Splunk cyber security capabilities can help protect enterprise data. Having a deep understanding of how Splunk ES (Enterprise Security) can monitor and ...