Application Security News and Articles


Polymorphic phishing attacks flood inboxes

AI is transforming the phishing threat landscape at a pace many security teams are struggling to match, according to Cofense. In 2024, researchers tracked one malicious email every 42 seconds. Many of the 42-second attacks were part of ...

Cybersecurity Skills Framework connects the dots between IT job roles and the practical skills needed

The Linux Foundation, in collaboration with OpenSSF and Linux Foundation Education, has released the Cybersecurity Skills Framework, a global reference guide that helps organizations identify and address critical cybersecurity competencies across ...

How working in a stressful environment affects cybersecurity

Stressful work environments don’t just erode morale, they can quietly undermine cybersecurity. When employees feel overworked, unsupported, or mistreated, their judgment and decision-making suffer. “From an organizational perspective, a ...

New infosec products of the week: May 16, 2025

Here’s a look at the most interesting products from the past week, featuring releases from Hunted Labs, McAfee, Obsidian Security, PentestPad, Resecurity, and SecuX. Resecurity One simplifies cybersecurity operations Resecurity One provides ...

Ivanti Endpoint Manager Mobile Authentication Bypass and Remote Code Execution Vulnerability (CVE-2025-4427/CVE-2025-4428)

Recently, NSFOCUS CERT detected that Ivanti issued a security advisory to fix the authentication bypass and remote code execution vulnerabilities (CVE-2025-4427/CVE-2025-4428) in Ivanti Endpoint Manager Mobile (EPMM). At present, both 2 ...

Are You Using the Right SSPM Software? | Grip Security

Not all SSPM tools and SSPM software technology are created equal. Learn what an SSPM should do, and how to choose a solution that keeps up with your SaaS use. The post Are You Using the Right SSPM Software? | Grip Security appeared first on ...

Andrei Tarasov: Inside the Journey of a Russian Hacker on the FBI’s Most Wanted List

Once a key figure in the Angler exploit kit underworld, Tarasov’s life has unraveled into detention, paranoia, and an unwanted return to the Russia he publicly despised. The post Andrei Tarasov: Inside the Journey of a Russian Hacker on the ...

Nyatanya, “Amerta” Hanyalah Sebuah Ilusi

(03/24)Continue reading on Medium »

Securing ICAM in spacecraft-based missions

Whether your operations are orbiting Earth or heading for the Moon, there’s risk if you’re waiting for a login to time out. In space, where communication can be delayed by minutes or even hours, identity becomes just as critical as propulsion ...

O que é um ataque cibernético? Tipos e prevenção

A segurança digital se tornou uma prioridade inegociável. Com o avanço da tecnologia, surgem também novas ameaças digitais e uma das mais perigosas é o ataque cibernético. Empresas, governos e até mesmo usuários comuns estão ...

RSA 2025: AI’s Promise vs. Security’s Past — A Reality Check”

RSA 2025: AI’s Promise vs. Security’s Past — A Reality Check Ah, RSA. That yearly theater (Carnival? Circus? Orgy? Got any better synonyms, Gemini?) of 44,000 people vaguely (hi salespeople!) related to cybersecurity … where the air ...

Is Your Cloud Truly Safe from Invisible Threats?

Why Do Cloud Security Gaps Exist? Can we confidently claim to have sealed all potential breaches? The truth is, despite significant investments in cybersecurity measures, gaps continue to exist. Many professionals overlook the importance of ...

How Protected Are Your Automated Systems?

Are Your Machine Identities Safe? Non-Human Identities (NHIs) and Secrets Security Management present a groundbreaking approach to data security. But what is the reality of your automated systems’ protection? We will explore this question, ...

Fostering Innovation with Secure Access Management

How Does Secure Access Management Fuel Innovation? Have you ever pondered the correlation between innovation security and business success? With businesses heavily rely on technology to innovate and drive growth, secure access management has ...

Building Confidence in Your Cybersecurity Strategy

Why is a Comprehensive Cybersecurity Strategy Essential? A robust cybersecurity strategy is no longer a luxury but a necessity. Whether it is financial services, healthcare, or travel, organizations are making significant shifts to the digital ...

How mental health affects students

Student mental well-being is continuing to worsen. 40% of school-aged students report persistent depressive symptoms, while 20% consider serious self-harm. As school communities debate the cause of increasing mental health issues among students, ...

BSidesLV24 – GroundFloor – Tactics of a Trash Panda

Author/Presenter: Angel Gamboa Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and ...

Security, Compliance, and Visibility in Kubernetes Infrastructure

The shift to cloud-native infrastructure has introduced a difficult dilemma for many security and compliance teams: do compliance requirements and the desire for visibility impede the ability to use more secure systems in cloud-native ...

Closing the Loop: Continuous API Security Testing – FireTail Blog

May 15, 2025 - Lina Romero - APIs power the modern internet as we know it. AI is grabbing the headlines, but less time is spent reporting on the APIs that connect these AI models behind the scenes to users, apps and data. As a result, API ...

When the Perimeter Fails: Microsegmentation as the Last Line of Defense

Perimeter defenses can fail. Learn how microsegmentation halts lateral movement, securing your network from internal threats. The post When the Perimeter Fails: Microsegmentation as the Last Line of Defense appeared first on ColorTokens. The post ...