Application Security News and Articles


Strategies for combating AI-enhanced BEC attacks

In this Help Net Security interview, Robert Haist, CISO at TeamViewer, discusses how AI is being leveraged by cybercriminals to enhance the effectiveness of BEC scams. How is AI being leveraged by cybercriminals to enhance the effectiveness of ...

Phishing statistics that will make you think twice before clicking

This article includes excerpts from various reports that offer statistics and insights into the current phishing landscape. AI-driven phishing attacks deceive even the most aware users Zscaler | Zscaler ThreatLabz 2024 Phishing Report | ...

YouTube has become a significant channel for cybercrime

Social engineering threats – those which rely on human manipulation – account for most cyberthreats faced by individuals in 2024, according to Avast. According to the latest quarterly Avast Threat Report, which looks at the threat landscape ...

Fighting identity fraud? Here’s why we need better tech

In this Help Net Security video, Patrick Harding, Chief Architect at Ping Identity, discusses the state of identity fraud prevention. Businesses must adopt more advanced technologies to combat the advancing tactics of identity fraud. ...

eBook: 10 reasons why demand for cloud security is sky-high

Current demand for cloud security specialists far exceeds available talent. Especially for companies seeking protection in multicloud environments, professionals with vendor-neutral knowledge and skills to their hiring wish lists. Find out how ...

Challenging Times Remain Among the Ever-Evolving Email Landscape

Criminals are successfully using email to scam, infiltrate networks, and unleash malicious payloads. We’re continuing to witness bad actors relentlessly exploit human vulnerabilities and software flaws, circumventing email gateways and security ...

Shifting the Security Mindset: From Network to Application Defense

Web application development and usage are at an all-time high, but businesses aren’t sure which APIs to monitor or how to protect them. The post Shifting the Security Mindset: From Network to Application Defense appeared first on Security ...

On-Prem Misconfigurations Lead to Entra Tenant Compromise 

As enterprises continue to transition on-premises infrastructure and information systems to the cloud, hybrid cloud systems have emerged as a vital solution, balancing the benefits of both environments to optimize performance, scalability, and ...

USENIX Security ’23 – You’ve Got Report: Measurement and Security Implications of DMARC Reporting

Md. Ishtiaq Ashiq, Weitong Li, Tobias Fiebig, Taejoong Chung Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the ...

An Open Letter to API Vendors: Embrace Secure Authentication Methods, Abandon API Keys

3 min read As the demand for API access continues to grow, so does the urgency of adopting more secure authentication methods. The post An Open Letter to API Vendors: Embrace Secure Authentication Methods, Abandon API Keys appeared first on ...

Randall Munroe’s XKCD ‘Bloom Filter’

via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Bloom Filter’ appeared first on Security Boulevard.

HYAS Threat Intel Report May 20 2024

Weekly Threat Intelligence Report Date: May 20, 2024 Prepared by: David Brunsdon, Threat Intelligence - Security Engineer, HYAS Cyber Threat Intelligence Analysis This week in the HYAS Insight threat intelligence platform, we found a concerning ...

Understanding B2B and B2C AI: A Simple Guide

Confused about B2B vs. B2C AI? This simple guide breaks down the key differences, use cases, and benefits for businesses and consumers. The post Understanding B2B and B2C AI: A Simple Guide appeared first on Security Boulevard.

Customer Story | Gaining Peace of Mind Through Google Workspace Security at Cleveland County Schools

Cloud Monitor Helps Cleveland County Schools Technology Team Secure Data, Protect Students, and Gain Some Peace of Mind Cleveland County Schools is one of North Carolina’s largest public school systems. Since merging with another district in ...

USENIX Security ’23 – “To Do This Properly, You Need More Resources”: The Hidden Costs Of Introducing Simulated Phishing Campaigns

Authors/Presenters:Lina Brunken, Annalina Buckmann, Jonas Hielscher, M. Angela Sasse Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open ...

Dell Data Breach: Personal Information of 49 Million Customers Compromised due to latest API Abuse

Dell recently issued a notice regarding a data breach that occurred on May 9, which has reportedly affected over 49 million customers across the globe. According to a report by BleepingComputer, Dell initiated the distribution of notifications ...

LiteSpeed Cache Bug Exploit For Control Of WordPress Sites

In recent developments concerning WordPress security, a significant vulnerability has come to light in the widely used LiteSpeed Cache plugin. This LiteSpeed cache bug, labeled CVE-2023-40000, poses a substantial risk to WordPress site owners, as ...

SMTP Error Codes Explained

Reading Time: 7 min SMTP error codes are messages from email servers that explain why your email couldn't be delivered. Learn what these codes mean and troubleshoot email delivery issues. The post SMTP Error Codes Explained appeared first on ...

Strata Maverics Identity Continuity provides real-time IDP failover capabilities

Strata Identity announced Maverics Identity Continuity, a new add-on product to its Maverics Identity Orchestration platform that provides always-on identity continuity in multi-cloud environments. Unlike regional redundancy offerings from cloud ...

Strata’s Maverics Platform Provides Zero Downtime for Cloud-based Identity

Multi-cloud Identity Orchestration platform ensures continuous access to applications even when a primary identity provider (IDP) is unavailable  BOULDER, Colo., May 20, 2024 – Strata Identity, the Identity Orchestration company, today ...