Application Security News and Articles


Key CTEM metrics: How to Measure the Effectiveness of Your Continuous Threat Exposure Management Program?

According to a new market research report published by Global Market Estimates, the global continuous threat exposure management (CTEM) market is projected to grow at a CAGR of 10.1% from... The post Key CTEM metrics: How to Measure the ...

CyberArk to acquire Venafi for $1.54 billion

CyberArk has signed a definitive agreement to acquire Venafi from Thoma Bravo. This acquisition will combine Venafi’s machine identity management capabilities with CyberArk’s identity security capabilities to establish a unified platform for ...

YouTube, The Backdrop Of A Scammer’s Play | Avast

You click on a cool-looking video on YouTube. It looks legit, with a well-known spokesperson and everything. It may be worth checking out. However, it just so happens it lists a linkto a malicious landing page.  The post YouTube, The Backdrop Of ...

CVE-2023-34992: Fortinet FortiSIEM Command Injection Deep-Dive

In early 2023, given some early success in auditing Fortinet appliances, I continued the effort and landed upon the Fortinet FortiSIEM. Several issues were discovered during this audit that ultimately lead to unauthenticated remote code execution ...

Critical Capabilities of Cyber Security Risk Assessment Tools

In today's digital landscape, robust cybersecurity risk assessment tools are crucial for effectively identifying and mitigating cyber threats. These tools serve as the first line of defense, helping organizations prioritize risks, allocate ...

PoC exploit for Ivanti EPMM privilege escalation flaw released (CVE 2024-22026)

Technical details about and a proof-of-concept (PoC) exploit for CVE-2024-22026, a privilege escalation bug affecting Ivanti EPMM, has been released by the vulnerability’s reporter. About CVE-2024-22026 Ivanti Endpoint Manager Mobile ...

How to Manage IAM Compliance and Audits

Did you know that 80% of breaches exploit legitimate identities and are difficult to detect? It’s hard to tell a hacker from a legitimate user’s behavior using regular security procedures and technologies. What is An IAM Assessment? An IAM ...

SEC requires financial institutions to notify customers of breaches within 30 days

The Securities and Exchange Commission (SEC) announced the adoption of amendments to Regulation S-P to modernize and enhance the rules that govern the treatment of consumers’ nonpublic personal information by certain financial institutions. The ...

AlmaLinux 9.4 Released: Security and Legacy Hardware Support

AlmaLinux 9.4, codenamed “Seafoam Ocelot,” arrived on May 6, 2024. This exciting new release from the AlmaLinux OS Foundation closely mirrors Red Hat Enterprise Linux (RHEL) 9.4, offering a free and open-source alternative with full ...

RSAC Fireside Chat: SquareX introduces security-infused browser extension to stop threats in real time

The open-source Chromium project seeded by Google more than a decade ago has triggered something of a web browser renaissance. Related: Browser attacks mount Browsers based on Chromium include Google Chrome and Microsoft Edge, which dominate in ...

Azure Penetration Testing – Cloud Security Audits | Microsoft

Did you know? As per Microsoft, more than 95 percent of Fortune 500 companies use Azure.  A staggering number, right? But does that make Azure impenetrable?  Hackers think otherwise!  In fact, Azure is an attractive target for them.  Azure ...

Scytale to Support ISO 42001, Ensuring Companies Sail Smoothly into AI Compliance

We're thrilled to announce that Scytale will support ISO 42001, the cornerstone framework for AI compliance standards. The post Scytale to Support ISO 42001, Ensuring Companies Sail Smoothly into AI Compliance appeared first on Scytale. The post ...

The challenges of GenAI in fintech

Due to the cybersecurity disclosure rules the Securities and Exchange Commission (SEC) has adopted in 2023, public entities in the US are required to disclose any material cybersecurity incidents. Moving forward, these organizations will need ...

Grafana: Open-source data visualization platform

Grafana is an open-source solution for querying, visualizing, alerting, and exploring metrics, logs, and traces regardless of where they are stored. Grafana provides tools to transform your time-series database (TSDB) data into meaningful graphs ...

New Tracker Warning Features on iPhones & Androids, 2024 Verizon Data Breach Investigations Report

In episode 330 Tom, Scott, and Kevin discuss the new features for iPhones and Android phones designed to warn users about secret trackers, possibly aiding in identifying stalkers. The hosts discuss Apple and Google’s collaboration on a ...

Cybercriminals shift tactics to pressure more victims into paying ransoms

Ransomware didn’t just grow in the US in 2023, it evolved, with the frequency of ransomware claims jumping 64% year-over-year, according to At-Bay. This was primarily driven by an explosion in “indirect” ransomware incidents which ...

Consumers continue to overestimate their ability to spot deepfakes

The Jumio 2024 Online Identity Study reveals significant consumer concerns about the risks posed by generative AI and deepfakes, including the potential for increased cybercrime and identity fraud. The study examined the views of more than 8,000 ...

Understanding cyber risks beyond data breaches

While some may associate cyber risks primarily with technology and data breaches, they can also lead to brand or reputational harm, reduced productivity, and financial losses. This Help Net Security round-up presents excerpts from previously ...

USENIX Security ’23 – Guarding Serverless Applications with Kalium

Authors/Presenters: Deepak Sirone Jegan, Liang Wang, Siddhant Bhagat, Michael Swift Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open ...

AI’s Energy Appetite: Challenges for Our Future Electricity Supply

The dramatic growth in GenAI and AI adoption is bringing increased demand for energy to power data centers. Where is this heading? How can we navigate a sustainable energy future with exploding technology usage? The post AI’s Energy ...