Application Security News and Articles


Babuk Locker 2.0 vs Seceon Platform: MITRE ATT&CK Mapping and Early-Stage Detection & Remediation

Overview of Babuk Locker 2.0 Babuk Locker 2.0 is a ransomware strain that employs double extortion, where attackers encrypt victim files and exfiltrate sensitive data for ransom. It targets organizations by exploiting RDP vulnerabilities, ...

News alert: SquareX discloses nasty browser-native ransomware that’s undetectable by antivirus

Palo Alto, Calif., Mar 28, 2025, CyberNewswire — From WannaCry to the MGM Resorts Hack, ransomware remains one of the most damaging cyberthreats to plague enterprises. Chainalysis estimates that corporations spend nearly $1 billion dollars on ...

Executive Perspectives: Pierre Noel on Cybersecurity Leadership, Risk, and Resilience

In this edition of Axio’s Executive Insight Series, Scott Kannry, CEO of Axio, sits down with Pierre Noel, former CISO of Microsoft Asia and Huawei, to discuss the evolution of Read More The post Executive Perspectives: Pierre Noel on ...

PCI DSS 4.0: Achieve Compliance with Feroot Before March 31

The post PCI DSS 4.0: Achieve Compliance with Feroot Before March 31 appeared first on Feroot Security. The post PCI DSS 4.0: Achieve Compliance with Feroot Before March 31 appeared first on Security Boulevard.

Building Smarter, Safer Businesses: How SecureFLO is Bridging AI Innovation with Cybersecurity

Building Smarter, Safer Businesses: How SecureFLO is Bridging AI Innovation with Cybersecurity Building Smarter, Safer Businesses: How SecureFLO is Bridging AI Innovation with Cybersecurity In today’s fast-evolving digital landscape, businesses ...

Cybersecurity & Infrastructure Security Agency (CISA) Pledge

When the Cybersecurity and Infrastructure Security Agency (CISA) introduced the Secure by Design pledge in May of last year, it immediately resonated with our engineering philosophy;   it was a natural fit, not a shift. Thanks to our highly ...

How do I update policies to incorporate NHIs effectively?

Why Give Importance to Updating Policies for Non-Human Identities? Have you contemplated how securing your organization’s digital goes beyond protecting human identities alone? Consider this: a significant part of digital ecosystem consists of ...

What are the common pitfalls in managing NHI compliance?

What Really Goes Into Managing Non-Human Identities Compliance? When it comes to securing cloud environments, have we been overlooking a crucial aspect? What if our focus needs to shift beyond just human identities and encompass machine ...

How can automated tools improve NHI compliance monitoring?

How Significant is Automated Non-Human Identities Compliance Monitoring? What if we told you that automated Non-Human Identities (NHIs) compliance monitoring could be the game-changer in staving off security breaches in your organization? The ...

Oracle Hack PR Drama: Deny, Deny, Deny — Despite Damning Data

OCI dokey then: Larry Ellison’s PR pukes desperately follow the script. The post Oracle Hack PR Drama: Deny, Deny, Deny — Despite Damning Data appeared first on Security Boulevard.

Static Application Security Testing SAST Series: Part 1

Path ManipulationContinue reading on Medium »

BSidesLV24 – IATC – Cybersec And Ai Risk Management Challenges For The Next Generation Of Public Safety Systems

Authors/Presenters: Raymond Sheh Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; ...

Why SAST is a Must-Have Skill for AppSec Professionals!

👋 Hello, Fellow AppSec Engineers! I’m Sahil Dari, an AppSec Engineer with 4 years of experience in Web App Security, API Security, Secure…Continue reading on Medium »

Why Cause Chaos? The Benefits of Having a “Chaos Day”

“The best-laid plans of mice and men often go awry.” - Robert Burns, Scottish poet The post Why Cause Chaos? The Benefits of Having a “Chaos Day” appeared first on Security Boulevard.

Modern Security Testing  – Leveling up the Crash Test Dummy

One thing not often thought of is the lowly crash test dummy. Traditionally, crash test dummies were modeled after male bodies leading to vehicle safety standards and designs being disproportionately geared towards protecting male passengers. As ...

Guide to Network Device Configuration Review

Network infrastructure serves as the backbone of every organization’s IT ecosystem. Ensuring the security, efficiency, and reliability of network devices such as routers, switches, and firewalls is essential to maintaining... The post Guide to ...

Seceon Shines at Channel Partners Conference & Expo and MSP Summit 2025

The Channel Partners Conference & Expo, co-located with the MSP Summit, took place from March 24-27, 2025, at The Venetian Resort & Expo in Las Vegas. Recognized as the world’s largest channel event, it brought together over 7,800 ...

BSidesLV24 – IATC – Wars And Rumors of Wars – What Are The Implications For Domestic Critical Infrastructure?

Authors/Presenters: Karl Holmqvist, Beau Woods Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites ...

aiSIEM-Cguard: Revolutionizing Cybersecurity with AI-Powered Threat Detection

In today’s evolving digital landscape, cyber threats are becoming increasingly sophisticated, targeting organizations of all sizes. Traditional security measures struggle to keep up with the sheer volume and complexity of modern cyberattacks. ...

How SBOMs drive a smarter SCA strategy

Modern software is largely assembled from open source components, constituting up to 90% of today's codebases. Managing the security and compliance risks associated with this external code is no longer optional — it's a core part of software ...