Application Security News and Articles


How an Intrusion Detection System Can Ensure End-User Security

It’s never been more important for businesses to invest in the best security measures available to them. Hackers and cybercriminals are constantly attempting to attack organizations and access their data. What’s more, cyber attacks are ...

From Awareness to Resilience: Allegro’s Journey With DataDome Against Bots

Learn why Allegro chose DataDome to safeguard their e-commerce platform against scraping, credential stuffing, vulnerability scanning, and more. The post From Awareness to Resilience: Allegro’s Journey With DataDome Against Bots appeared first ...

CISA Alert: GitLab Password Exploit – Act Now For Protection

In the realm of cybersecurity, vigilance is paramount. Recently, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) flagged a critical vulnerability in GitLab, a popular platform for collaborative software development. This GitLab ...

Calix strengthens SmartBiz security with automated alerts and anti-spam compliance tools

Calix unveiled updates to SmartBiz, a purpose-built small business solution for broadband service providers (BSPs), that expand an existing set of robust security capabilities. These enhancements help BSPs ensure the safety, security, and ...

Raiders of the Lost Datastore: A Tabletop Exercise | Eureka Security

No better way to learn than from other's mistakes. Read about a real-world data breach, and the ways to investigate, fix, and prevent future breaches. | Eureka Security The post Raiders of the Lost Datastore: A Tabletop Exercise | Eureka ...

The Rise of AI and Blended Attacks: Key Takeaways from RSAC 2024

The 2024 RSA Conference can be summed up in two letters: AI. AI was everywhere. It was the main topic of more than 130 sessions. Almost every company with a booth in the Expo Hall advertised AI as a component in their solution. Even casual ...

A Guide to Cybersecurity Compliance in the Oil and Gas Industry

When talking about industries, few are as critical to global infrastructure and economic stability as the oil and gas sector. In an interconnected digital age where technology fuels every aspect of the global economy, the oil and gas industry ...

Core security measures to strengthen privacy and data protection programs

As privacy laws evolve globally, organizations face increasing complexity in adapting their data protection strategies to stay compliant. In this Help Net Security interview, Kabir Barday, CEO at OneTrust, emphasizes that embracing privacy by ...

Cybersecurity jobs available right now: May 15, 2024

Associate / Pentester (Red Team) – Cybersecurity Audit Siemens | Germany | Hybrid – View job details As an Associate / Pentester (Red Team) – Cybersecurity Audit, you will be responsible for conducting cybersecurity ...

Ransomware statistics that reveal alarming rate of cyber extortion

In this article, you will find excerpts from various reports that offer statistics and insights about the current ransomware landscape. Global ransomware crisis worsens NTT Security Holdings | 2024 Global Threat Intelligence Report | ...

Key questions to ask when tailoring defensive stacks

In this Help Net Security video, Scott Small, Director of Cyber Threat Intelligence at Tidal Cyber, outlines the questions you need to ask your security team when tailoring a defense stack against your current threat landscape. Small talks about ...

Cybersecurity analysis exposes high-risk assets in power and healthcare sectors

Traditional approaches to vulnerability management result in a narrow focus of the enterprise attack surface area that overlooks a considerable amount of risk, according to Claroty. Organizations must take a holistic approach to exposure ...

Unlock Your Cybersecurity Career: Exclusive Discounts on Top Training Courses!

  There are tremendous opportunities in cybersecurity and the industry needs many more qualified workers.  Training plays an important part.  That is why I am partnering with Infosec4TC, an online training provider that offers free courses ...

RSA (“RSAI”) Conference 2024 Powered by AI with AI on Top — AI Edition (Hey AI, Is This Enough AI?)

RSA (“RSAI”) Conference 2024 Powered by AI with AI on Top — AI Edition (Hey AI, Is This Enough AI?) Where do we have “41,000 attendees, 650 speakers, 600 exhibitors and 400 members of the media” who all care about cyber security? ...

Patch Tuesday Update – May 2024

The post Patch Tuesday Update - May 2024 appeared first on Digital Defense. The post Patch Tuesday Update – May 2024 appeared first on Security Boulevard.

What is a POAM

If you’re a defense contractor and need to comply with NIST 800-171, then you need to know about System Security Plans (SSPs) and Plans of Actions & Milestones (POAMs). SSPs document how your organization meets NIST 800-171’s 110 ...

UnitedHealth, Ascension Attacks Feed Debate Over Health Care Security

The Biden Administration is moving to cybersecurity standards for hospitals, but the AHA is pushing back, saying voluntary models are enough. The post UnitedHealth, Ascension Attacks Feed Debate Over Health Care Security appeared first on ...

Data Center Capacity Planning with DCIM Software

Data center capacity planning is crucial for modern enterprises aiming to optimize their digital infrastructure. It involves strategic forecasting to ensure computing resources, power, cooling, and physical space meet current and future workload ...

Easily Guessed Passwords for New Accounts Include “User”, “Temp”, “Welcome”

New account passwords, often used during onboarding, are vulnerable to sophisticated attacks from malicious actors. Good idea to check: What’s your company using? The post Easily Guessed Passwords for New Accounts Include “User”, ...

How Workload IAM Can Help Protect Against Auth Secrets Breaches Like Dropbox

3 min read A string of recent compromises involving non-human identity credentials are putting organizations on high alert. Here's what you can do about it. The post How Workload IAM Can Help Protect Against Auth Secrets Breaches Like Dropbox ...