Application Security News and Articles


Identity Security Best Practices & Compliance — What Smart Teams Should Be Doing Now

Introduction Let’s be real — no one wakes up thinking about identity security. It’s one of those things that quietly works in the background… until it doesn’t. And when it fails, it’s usually a total disaster. Think about it. Every ...

Passkeys 101: What They Are, Why They Matter, and How They Work

Introduction Let’s be honest — passwords are a pain. We’ve all been there, trying to remember which variation of our […] The post Passkeys 101: What They Are, Why They Matter, and How They Work appeared first on Security Boulevard.

FedRAMP Pen Test Scope vs. Rules of Engagement Explained

FedRAMP has strict requirements for the security of the companies looking to earn their certification. Among the many requirements you need to navigate are tests from your C3PAO, simulating malicious actors and common threat vectors. In order to ...

Best Application Security Testing Tools: Top 10 Tools in 2025

What Are Application Security Testing Tools?  Application security testing (AST) tools identify vulnerabilities and weaknesses in software applications. These tools assess code, application behavior, or its environment to detect potential ...

CVE-2025-5777, CVE-2025-6543: Frequently Asked Questions About CitrixBleed 2 and Citrix NetScaler Exploitation

Frequently asked questions about recent Citrix NetScaler ADC and Gateway vulnerabilities that have reportedly been exploited in the wild, including CVE-2025-5777 known as CitrixBleed 2. Background Tenable’s Research Special Operations (RSO) ...

Are You Satisfied with Your Current Secrets Security?

Are You Really Securing Your Non-Human Identities and Secrets? How confident are you in the security measures protecting your Non-Human Identities (NHIs) and Secrets? Do you often wonder if there are areas for improvement? These are critical ...

Fostering Independence with Effective Non-Human Identity Management

Why is Effective NHI Management Crucial? Is complete independence in cybersecurity attainable? When we increasingly rely on cloud technologies, the security of non-human identities (NHIs) has emerged as a crucial concern. Effective NHI management ...

Feel Relieved with State-of-the-Art Secrets Rotation

Are You Truly Prepared for Cybersecurity Threats? Security risks abound in increasingly dependent on complex digital interactions. From healthcare to finance, businesses across industries are looking for ways to safeguard their data. One crucial ...

Can Your NHI Management Handle Evolving Security Needs?

Is Your NHI Management Ready to Face Evolving Security Needs? Evolving security needs pose a continually shifting challenge for cybersecurity professionals across industries such as financial services, healthcare, and travel. Key to maintaining a ...

STRATEGIC REEL: APIs are the new perimeter — and business logic attacks are slipping through

APIs have become the digital glue of the enterprise — and attackers know it. Related: API security – the big picture In this debut edition of the Last Watchdog Strategic Reel (LWSR), A10 Networks’ Field CISO Jamison Utter cuts … (more…) ...

Troubleshooting SCIM Provisioning Issues: Your Complete Debug Guide

When SCIM provisioning problems occur in production, you're often working with enterprise customer IT teams to diagnose and resolve the issues. Having a good process for this collaboration can make the difference between a quick resolution and ...

From Packets to Protection: How Network Observability Powers Security and Forensics

In cybersecurity, the old maxim “you can’t secure what you can’t see” serves as one of the primary guiding principles. As enterprise networks grow increasingly distributed and complex across on-premises data centers, ...

RAG evaluation series: validating the RAG performance of OpenAI vs LlamaIndex

This is the second of a multi-part series evaluating RAG systems using Tonic Validate. Today, we compare the performance of OpenAI's Assistant to Llamaindex. And there is a clear winner...for now. The post RAG evaluation series: validating the ...

RAG evaluation series: validating the RAG performance of LangChain vs Haystack

This is the third of a multi-part series evaluating RAG systems using Tonic Validate. Today, we compare the performance of LangChain against that of Haystack. Will there be a straw that breaks the parrots back? The post RAG evaluation series: ...

RAG evaluation series: validating the RAG performance of OpenAI’s RAG Assistant vs Google’s Vertex Search and Conversation

This is the fourth installment in a multi-part series on evaluating various RAG systems using Tonic Validate, a RAG evaluation and benchmarking platform. In this installment, we pit OpenAI's RAG Assistant against Google's Vertex Search and ...

Windows’ Infamous ‘Blue Screen of Death’ Will Soon Turn Black

After more than 40 years of being set against a very recognizable blue, the updated error message will soon be displayed across a black background. The post Windows’ Infamous ‘Blue Screen of Death’ Will Soon Turn Black appeared first on ...

The Early Stage Growth Trap: How Smart Startups Escape the Marketing Catch-22

Early stage startups face a brutal dilemma: you need marketing expertise and budget to grow, but lack both. Discover how programmatic SEO breaks this cycle by automating top-of-funnel growth and building long-term SEO authority for B2B SaaS ...

In Other News: Norway Dam Hacked, $177M Data Breach Settlement, UNFI Attack Update

Noteworthy stories that might have slipped under the radar: Norwegian dam hacked, AT&T agrees to $177 million data breach settlement, Whole Foods distributor restores systems after attack.  The post In Other News: Norway Dam Hacked, $177M ...

When Infostealer Frontiers Meet Identity-Centric Defense: Lessons from BSides SATX 2025

From malware markets to IAM frameworks, BSides SATX 2025 showed why modern security must evolve from static protection to identity-centric, adaptive defense. The post When Infostealer Frontiers Meet Identity-Centric Defense: Lessons from BSides ...

Cybersecurity Snapshot: U.S. Gov’t Urges Adoption of Memory-Safe Languages and Warns About Iran Cyber Threat

Check out the U.S. government’s latest call for developers to use memory-safe programming languages, as well as its warning for cybersecurity teams regarding cyber risk from hackers tied to Iran. Plus, get the latest on ransomware trends, the ...