Application Security News and Articles


Smart Secret Scanning Techniques: Are You Updated?

Smart Secret Scanning: Decoding the Intelligence Behind Cybersecurity Have you ever wondered how some organizations manage to preserve their digital data integrity amidst in technology? It may seem like a mountainous task, but the secrets lie in ...

Is Your Secrets Rotation Getting Better?

Can Your Secrets Rotation Stand the Test of Time? Ask yourself: is your organization’s secrets rotation process as secure and efficient as it can be? Where the average cost of a data breach is $3.86 million according to a study by IBM, having ...

Securing the CI/CD Pipeline: Integrating SAST, DAST, and Container Scanning

In today’s fast-paced development environments, ensuring that your CI/CD pipeline is secure is essential.Continue reading on Medium »

DEF CON 32 – Efficient Bug Bounty Automation Techniques

Author/Presenter: Gunnar Andrews Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the ...

11 Application Security Testing Types

As organizations accelerate their release cycles and rely on complex software ecosystems, security vulnerabilities become harder to track—and easier for attackers to exploit. From open-source dependencies to misconfigurations in production, ...

Penting ga sih Code Analysis itu?

Pernah nggak sih lagi ngoding, terus tiba-tiba aplikasi crash tanpa alasan yang jelas? Atau lebih parahnya, aplikasi udah rilis tapi…Continue reading on Medium »

Week in review: Botnet hits M365 accounts, PoC for Ivanti Endpoint Manager vulnerabilities released

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Massive botnet hits Microsoft 365 accounts A recently discovered botnet of over 130,000 compromised devices is launching coordinated ...

SAST & DAST in GitLab CI/CD: Secure Your App with Automation

Hi everyone! I’m going to share a quick and practical way to set up SAST (Static Application Security Testing) and DAST (Dynamic…Continue reading on DataDrivenInvestor »

Freedom to Choose the Best Secrets Vault?

Are You Making Informed Decisions About Your Secrets Vault? It’s a question that resonates deeply among cybersecurity professionals today. A seasoned data management experts and security enthusiasts understand the importance of flexibility when ...

How Supported is Your NHIs Policy Enforcement?

Does Your Approach to NHI Policy Enforcement Make the Grade? One question that often arises is: “how effectively are we managing Non-Human Identities (NHIs) policy enforcement in our supported systems?” For numerous enterprises, maintaining a ...

Justified Spending on Cybersecurity Technology?

Is Your Cybersecurity Spending Justified? With digital becoming more complex, organizations are continually urged to increase their cybersecurity spending. But the crucial question that arises is – “Is your investment in cybersecurity ...

When Your SaaS Vendor Goes Dark: A Guide to Protecting Your Business

When a SaaS vendor unexpectedly shuts down, your business faces significant risks. This comprehensive guide provides actionable strategies to recover your data, find alternative solutions, and implement preventative measures to ensure business ...

DEF CON 32 – No Symbols When Reversing: No Problem Bring Your Own

Author/Presenter: Max 'Libra' Kersten Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via ...

Independent Audit for Your Secrets Management?

Why Should Organizations Focus on Independent Audit for Secrets Management? Are you overlooking an essential aspect of your organization’s cybersecurity strategy? This aspect is the management of Non-Human Identities (NHIs) and their secrets, ...

Certain About Your Data Privacy Measures?

Are You Confident in Your Data Privacy Measures? Professionals in financial services in healthcare, travel, DevOps, and SOC teams that managing securitization processes in the cloud; do you feel confident about your data privacy measures? Where ...

How Stable is Your Cloud Infrastructure Security?

Are Your Machine Identities Protected Within Your Cloud Infrastructure? Let’s delve into a thought-provoking question: Within your seemingly secure systems, how comprehensively are your Non-Human Identities (NHIs) and their secrets protected? ...

Amnesty Reveals Cellebrite Zero-Day Android Exploit on Serbian Student Activist

Amnesty International publishes technical details on zero-day vulnerabilities exploited by Cellebrite’s mobile forensic tools to spy on a Serbian student activist. The post Amnesty Reveals Cellebrite Zero-Day Android Exploit on Serbian Student ...

DEF CON 32 – Inside Dash Cam Custom Protocols And Discovered 0days

Authors/Presenters: Hyo Jin Lee & Hanryeol Park Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention ...