Application Security News and Articles


Week in review: New Black Basta’s social engineering campaign, passing the CISSP exam in 6 weeks

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Black Basta target orgs with new social engineering campaign Black Basta, one of the most prolific ransomware-as-a-service operators, is trying ...

Securing Mobile Apps — Part 1: App and Code Security

Application security focuses on protecting the app’s code and ensuring that it cannot be easily tampered with or reverse-engineered.Continue reading on Medium »

USENIX Security ’23 – Controlled Data Races In Enclaves: Attacks And Detection

Authors/Presenters:Sanchuan Chen, Zhiqiang Lin, Yinqian Zhang Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the ...

London Drugs cyber attack: What businesses can learn from its week-long shutdown

London Drugs cyber attack: What businesses can learn from its week-long shutdown The London Drugs cyber attack has been making headlines throughout the country. What makes this breach unique, is the impact it has had on operations and customer ...

What is Secure Code Review and How to Conduct it?

Secure code review is a combination of automated and manual processes assessing an application/software’s source code. The main motive of this technique is to detect vulnerabilities in the code. This security assurance technique looks for logic ...

Why Bot Management Should Be a Crucial Element of Your Marketing Strategy

Marketing teams need a comprehensive bot management solution to address the challenges posed by bot traffic and protect marketing analytics. Bot management is designed to protect marketing efforts from bot-generated invalid traffic by accurately ...

Cloud Monitor Identifies and Remediates Problematic VPN Use in K-12 Districts

Recently, we hosted Michael Tapia, Chief Technology Director at Clint ISD in Texas, and Kobe Brummet, Cybersecurity Technician at Hawkins School District in Tennessee, for a live webinar. Michael and Kobe volunteered to share with other K-12 tech ...

Brothers Indicted for Stealing $25 Million of Ethereum in 12 Seconds

It took two brothers who went to MIT months to plan how they were going to steal, launder, and hide millions of dollars in cryptocurrency and only 12 seconds to actually pull off the heist. The brothers, Anton Peraire-Bueno and James ...

Votiro Keeps Up the Momentum in 2024

The post Votiro Keeps Up the Momentum in 2024 appeared first on Votiro. The post Votiro Keeps Up the Momentum in 2024 appeared first on Security Boulevard.

Novel Threat Tactics, Notable Vulnerabilities, and Current Trends for April 2024

Every month, the Pondurance team hosts a webinar to keep clients current on the state of cybersecurity. In April, the team discussed threat intelligence, vulnerabilities and trends, security operations center (SOC) engineering insights, threat ...

USENIX Security ’23 – AEX-Notify: Thwarting Precise Single-Stepping Attacks Through Interrupt Awareness For Intel SGX Enclaves

Authors/Presenters:Scott Constable, Jo Van Bulck, Xiang Cheng, Yuan Xiao, Cedric Xing, Ilya Alexandrovich, Taesoo Kim, Frank Piessens, Mona Vij, Mark Silberstein Many thanks to USENIX for publishing their outstanding USENIX Security ’23 ...

North Korea IT Worker Scam Brings Malware and Funds Nukes

WTH? DPRK IT WFH: Justice Department says N. Korean hackers are getting remote IT jobs, posing as Americans. The post North Korea IT Worker Scam Brings Malware and Funds Nukes appeared first on Security Boulevard.

Response to CISA Advisory (AA24-131A): #StopRansomware: Black Basta

AttackIQ has released a new attack graph in response to the recently published CISA Advisory (AA24-131A) which disseminates known Tactics, Techniques, and Procedures (TTPs) and Indicators of Compromise (IOCs) associated to Black Basta ransomware, ...

An Analysis of AI usage in Federal Agencies

Existing Regulations As part of its guidance to agencies in the AI Risk Management (AI RMF), the National Institute of Standards and Technology (NIST) recommends that an organization must have an inventory of its AI systems and models. An ...

Enabling Continuous Zero Trust in Multi-Cloud Environments with Netography Fusion

The concept of a Zero Trust Architecture (ZTA) is pretty simple – trust no one, verify everyone. No user or device should be trusted automatically, even if they are connected to a permissioned environment or were previously verified. But modern ...

The Dell API Breach: It could have been prevented

As you may have seen in the news, a hacker stole 49 million customer records from Dell. The attack wasn’t novel or sophisticated. Instead, the attacker used a business logic flaw and an API to scrape 49 million records from Dell. How did they ...

Randall Munroe’s XKCD ‘Elementary Physics Paths’

via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Elementary Physics Paths’ appeared first on Security Boulevard.

How To Deploy HYAS Protect

HYAS Protect protective DNS includes a user-friendly interface and four core deployment methods. The decision engine works out of the box as an immediate first-line defense against a network breach. Organizations of any size can monitor traffic ...

USENIX Security ’23 – EnigMap: External-Memory Oblivious Map for Secure Enclaves

Authors/Presenters: Afonso Tinoco, Sixiang Gao, Elaine Shi Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the ...

New Survey Finds a Paradox of Confidence in Software Supply Chain Security

Get results of and analysis on ESG's new survey on supply chain security.  The post New Survey Finds a Paradox of Confidence in Software Supply Chain Security appeared first on Security Boulevard.