Application Security News and Articles


The Importance Of Secure DNS In Enterprise Security Strategy

In today’s hyper-connected world, with the proliferation of applications and devices, has transformed the way we interact with the internet. From the rise in applications across cloud and containers, connected IoT devices to cloud services and ...

USENIX Security ’23 – DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local Smoothing

Authors/Presenters:Jiawei Zhang, Zhongzhu Chen, Huan Zhang, Chaowei Xiao, Bo Li Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open ...

The Road to CTEM, Part 2: The Role of Continuous Validation

Dig deeper into the validation phase of continuous threat exposure management (CTEM) and see how BAS enables continuous validation. The post The Road to CTEM, Part 2: The Role of Continuous Validation appeared first on SafeBreach. The post The ...

Top 4 use cases of non-human identity security: Live event recap

Last week we held an insightful live event featuring our solutions engineer, Michael Silva, and our CISO in Residence, Tim Youngblood. The event focused on the top four non-human identity (NHI) use cases that are crucial for security teams. ...

SailPoint introduces AI-powered application onboarding capability

SailPoint launches innovative AI-powered application onboarding capability. This new capability will be seamlessly integrated into SailPoint Identity Security Cloud and will simplify the process of integrating critical business applications. By ...

Connecticut Has Highest Rate of Health Care Data Breaches: Study

It’s no secret that hospitals and other health care organizations are among the top targets for cybercriminals. The ransomware attacks this year on UnitedHealth Group’s Change Healthcare subsidiary, nonprofit organization Ascension, and most ...

GRIT Ransomware Report: May 2024

Additional contributors to this report: Grayson North, Jason Baker May 2024 closed with an increase in overall victim volume, though […] The post GRIT Ransomware Report: May 2024 appeared first on Security Boulevard.

Eclypsium Joins the Joint Cyber Defense Collaborative

Eclypsium becomes a member of CISA’s public-private partnership for cyber defense strategy Portland, OR – June 13, 2024 – Eclypsium, the digital supply chain security company protecting critical hardware, firmware, and software, today ...

NetSPI acquires Hubble to address asset and exposure management challenges

NetSPI announced its acquisition of Hubble, a Northern Virginia-based cyber asset attack surface management (CAASM) and cybersecurity posture management solution. The integration of Hubble’s Asset Intelligence and CAASM product, Aurora, ...

PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577)

An OS command injection vulnerability in Windows-based PHP (CVE-2024-4577) in CGI mode is being exploited by the TellYouThePass ransomware gang. Imperva says the attacks started on June 8, two days after the PHP development team pushed out fixes, ...

Strength in Unity: The Power of Cybersecurity Partnerships

In a recent conversation with Iren Reznikov, we discussed into the intricacies of aligning investment decisions with broader business goals and the pivotal role cybersecurity partnerships play in driving industry-wide innovation. I recently had ...

Choosing An Information Security Framework: 8 Examples For K-12

Information technology has done wonders for K-12, but it’s also ramped up cyber risk exponentially. According to Microsoft, cyber threats impact education more than any other industry, totaling 80% of all malware encounters in the past 30 days. ...

8 Steps to Get Value from Azure Identity Protection

Today’s digital landscape is full of ever-evolving cyber threats. Securing your organization’s identities has become very important. Azure Identity Protection is a strong ally. It empowers you to strengthen your defenses and protect your most ...

Elevating SaaS App Security in an AI-Driven Era

In the rapidly evolving landscape of software as a service (SaaS), the security of applications has never been more critical. The post Elevating SaaS App Security in an AI-Driven Era appeared first on Security Boulevard.

Urgently needed: AI governance in cyber warfare

Artificial intelligence is quickly becoming central to societal growth. AI has great power to improve daily life, from education to healthcare, from sustainability to defense. AI also brings to the forefront a number of risks that cut across the ...

Netskope extends security and data protection for Google Workspace users

Netskope has joined the Google Workspace Security Alliance to extend security and data protection for Workspace users. The Netskope One Platform provides a number of advanced security capabilities that protect data, defend against threats, and ...

Understanding the Recent FFmpeg Vulnerabilities

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, a popular tool for processing audio and video files. These vulnerabilities could lead to severe consequences such as denial of service or arbitrary code execution on ...

The Team Sport of Cloud Security: Breaking Down the Rules of the Game

The best-case scenario for mitigating cloud security risks is when CSPs and customers are transparent and aligned on their responsibilities from the beginning. The post The Team Sport of Cloud Security: Breaking Down the Rules of the Game ...

Prosimo and Palo Alto Networks join forces to improve cloud infrastructure security

Prosimo announced an integration with Palo Alto Networks for a powerful new approach to security that protects applications and workloads in multi cloud environments. With Prosimo’s Full Stack Cloud Transit platform, customers can seamlessly ...

5 Ways to Thwart Ransomware With an Identity-First Zero Trust Model

If your organization hasn’t taken these steps to prevent a ransomware attack, it’s time to act now to protect your company, its data, employees and most importantly, customers. The post 5 Ways to Thwart Ransomware With an Identity-First Zero ...