Application Security News and Articles


Imperva Protects Against Critical PHP Vulnerability CVE-2024-4577

In the ever-evolving landscape of cybersecurity, staying ahead of vulnerabilities is crucial for safeguarding sensitive information and maintaining the integrity of digital assets. Recently, a critical vulnerability– identified as CVE-2024-4577 ...

CDW Survey Surfaces Cybersecurity Tool Sprawl Challenges

Stress? What stress? 43% of IT professionals report that their organization had experienced a security breach that caused downtime and cost $1-10 million. The post CDW Survey Surfaces Cybersecurity Tool Sprawl Challenges appeared first on ...

A Salt Security Perspective on the 2024 Gartner® Market Guide for API Protection

APIs are crucial for modern digital businesses because they allow different software systems to communicate and exchange data seamlessly and they are foundational to how modern applications are built. However, they are also vulnerable to ...

USENIX Security ’23 – Othered, Silenced and Scapegoated: Understanding the Situated Security of Marginalised Populations in Lebanon

Authors/Presenters:Jessica McClearn and Rikke Bjerg Jensen, Royal Holloway, Reem Talhouk Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open ...

It’s Not the Customer’s Job to Know What They Want

The phrase “It’s not the customer’s job to know what they want” is often attributed to Steve Jobs. This highlights the role of innovation and...Read More The post It’s Not the Customer’s Job to Know What They Want appeared first on ...

Securing your machine identities means better secrets management

Machine identities make up the majority of the over 12.7 million secrets GitGuardian discovered in public in 2024. Let's look at how we got here and how we fix this. The post Securing your machine identities means better secrets management ...

Announcing AI/ML safety and security trainings

By Michael D. Brown We are offering AI/ML safety and security training in summer and fall of this year! Recent advances in AI/ML technologies opened up a new world of possibilities for businesses to run more efficiently and offer better services ...

Cybersecurity for Schools: Challenges, Threats, and Solutions

Cybersecurity for schools takes K-12’s unique cybersecurity & safety challenges and threats into account to create a safety learning environment From higher education to elementary, schools have a lot of responsibilities. Not only must they ...

Complete Guide to OT Cybersecurity in the Aviation Industry

Cybersecurity in the aviation industry is not just about protecting data; it’s about safeguarding lives. A single cyberattack can have catastrophic consequences, disrupting air travel, compromising safety, and causing significant economic ...

Should Organizations Use the Gartner CARTA Framework in 2024?

Organizations should shift from a traditional, static approach to cybersecurity to a more dynamic and risk-based approach. CARTA emphasizes the need for a dynamic security posture that adapts to evolving threats and a changing environment. ...

GitHub Server Flaw Causes Critical Authentication Bypass

Recent developments have highlighted a critical security flaw in GitHub Enterprise Server, underscoring the importance of proactive measures to ensure the integrity of code hosting platforms. Let’s have a look at the specifics of this GitHub ...

Top Computer Security Risks and How to Stay Safe

Reading Time: 4 min Discover the top Computer security risks in 2024 and learn how to stay protected. Explore threats like phishing, and AI attacks, and find effective safety strategies. The post Top Computer Security Risks and How to Stay Safe ...

NSFOCUS: Pioneering Technology and Industry Leadership

We are excited to share that NSFOCUS has been recognized in Forrester’s The Insider Risk Solutions Landscape, Q2 2024 report. This accolade underscores our unwavering commitment to being a leader and innovator in the cybersecurity industry. ...

June 2024 Patch Tuesday forecast: Multiple announcements from Microsoft

May 2024 Patch Tuesday was unusual because we had security updates from Adobe, Apple, Google, Mozilla, and Microsoft on the same day. While individually from each vendor, the updates weren’t that large, managing them together was more ...

Best Cyber Security Companies in Hyderabad

Hyderabad, the fourth most populous city in India, is well-known for a variety of things, including its innovations, top colleges, and IT firms. Almost 3,500 cybersecurity businesses are based in the city, and many of them are brand-new startups. ...

Cyber insurance isn’t the answer for ransom payments

Ransomware remains an ongoing threat for organizations and is the largest single cause of IT outages and downtime as 41% of data is compromised during a cyberattack, according to Veeam. “Ransomware is endemic, impacting 3 out of 4 organizations ...

Unpacking CISA’s AI guidelines

CISA’s late April AI and infrastructure guidelines address 16 sectors along with their cybersecurity needs and operations concerning the growth of AI as a tool to build both federal and vendor cybersecurity infrastructure in the federal ...

26% of organizations lack any form of IT security training

26% of organizations don’t provide IT security training to end-users, according to Hornetsecurity. The Hornetsecurity survey, which compiled feedback from industry professionals worldwide, also reveals that 8% of organizations offer ...

New infosec products of the week: June 7, 2024

Here’s a look at the most interesting products from the past week, featuring releases from Appdome, SailPoint, Tines, Trend Micro, Verimatrix, and Zyxel Networks. Zyxel Networks USG LITE 60AX improves network security Zyxel Networks launched ...

NVD Update: Help Has Arrived

There's hope yet for the world's most beleaguered vulnerability database. The post NVD Update: Help Has Arrived appeared first on Security Boulevard.