Application Security News and Articles


F5 fixes BIG-IP Next Central Manager flaws with public PoCs (CVE-2024-21793, CVE-2024-26026)

Eclypsium researchers have published details and PoC exploits for two remotely exploitable injection vulnerabilities (CVE-2024-21793, CVE-2024-26026) affecting F5’s BIG-IP Next Central Manager. About the vulnerabilities BIG-IP Next is “a ...

Zscaler swats claims of a significant breach

On Wednesday, a threat actor named “InteIBroker” put up for sale “access to one of the largest cyber security companies” and immediately ignited speculation about which company it might be. InteIBroker claims to have ...

Demystifying Attack Path Analysis in Application Security: Benefits, Implementation, and Considerations

The term “attack path” often brings to mind memories of my time as Chief Marketing Officer for a breach simulation firm, where I learned of adversaries’ tactics commonly seen in traditional security evaluations. However, the ongoing ...

Network Security for Schools: Tools, Tips, And Best Practices

Your school network is the most important piece of your entire IT infrastructure. But protecting it? That’s easier said than done. In this guide, we’ll explore the basics of network security and what your district can do to protect network ...

AuditBoard enhances InfoSec Solutions to reduce compliance fatigue across the organization

AuditBoard announced powerful enhancements for its InfoSec Solutions to help organizations meet their IT compliance, cyber risk, and vendor risk management needs in the face of rising risks and increased regulatory requirements. With these new ...

CISA starts CVE “vulnrichment” program

The US Cybersecurity and Infrastructure Agency (CISA) has announced the creation of “Vulnrichment,” a new project that aims to fill the CVE enrichment gap created by NIST National Vulnerability Database’s recent slowdown. NVD is ...

Secureworks Taegis NDR identifies malicious activity on the network

Secureworks released Secureworks Taegis NDR, to stop nefarious threat actors from traversing the network. The dominance of cloud applications and remote working has created an explosion in network traffic, up over 20% from 2023 to 20241. ...

BigID equips security teams with AI-guided data security and risk remediation recommendations

BigID announced the introduction of AI-guided data security and risk remediation recommendations. These new capabilities empower security teams to eliminate guesswork and more proactively address security risks to improve their overall security ...

Critical Start adds multiple frameworks to Risk Assessments

Critical Start announced the expansion of the frameworks available in its Risk Assessments offering. These additions to the tool expand upon the initial offering, providing additional framework-based assessments for customers to achieve ...

Skyhigh Security boosts data protection measures with AI innovations

Skyhigh Security announced strategic additions to its Security Service Edge (SSE) portfolio. In response to an evolving cyber threat landscape and new data security challenges, these new innovations will empower organizations to seamlessly adopt ...

Silverfort Announces New Integration with Microsoft Entra ID EAM 

Silverfort is excited to announce our integration with external authentication methods (EAM) in Microsoft Entra ID, which is now in public preview. This allows customers to use Silverfort seamlessly with any app or service that relies on Entra ID ...

Crypto Mixer Money Laundering: Samourai Founders Arrested

The recent crackdown on the crypto mixer money laundering, Samourai, has unveiled a sophisticated operation allegedly involved in facilitating illegal transactions and laundering criminal proceeds. The cryptocurrency community was shocked by the ...

AI Regulation in Finance: Steering the Future with Consumer Protection at the Helm

The financial industry is experiencing a gold rush of sorts with the integration of Artificial Intelligence (AI) technologies. With huge data volumes processed by the financial services sector, AI holds much promise for the industry. But much ...

How Git Guardian Helps With PCI DSS 4.0’s Password Requirements

If you need to reach PCI DSS 4.0 compliance, GitGuardian has solutions that can help. The post How Git Guardian Helps With PCI DSS 4.0’s Password Requirements appeared first on Security Boulevard.

Regulators are coming for IoT device security

Cybersecurity is a relatively new challenge for many IoT device makers who have traditionally produced non-connected devices. These devices were less vulnerable to exploitation and, as a result, manufacturers often lack the expertise and ...

Global ransomware crisis worsens

Ransomware and extortion incidents surged by 67% in 2023, according to NTT Security Holdings’ 2024 Global Threat Intelligence Report. Global ransomware crisis After a down year in 2022, ransomware and extortion incidents increased in 2023. ...

Ransomware attacks impact 20% of sensitive data in healthcare orgs

Recent cyber incidents demonstrate the healthcare industry continues to be a prime target for ransomware hackers, according to Rubrik. New research by Rubrik Zero Labs reveals that ransomware attacks produce larger impacts against these ...

Why SMBs are facing significant security, business risks

In this Help Net Security video, Alex Cox, Director of Threat Intelligence at LastPass, discusses how human factors are getting in the way while SMB leaders report investing more time, attention, and budget in cybersecurity. According to ...

3 CIS resources to help you drive your cloud cybersecurity

In the process of moving to the cloud, you need a security-first cloud migration strategy that considers both your security and compliance requirements upfront. In this article, we’ll discuss how you can use resources from the Center for ...

How Nudge Security is useful in a merger or acquisition

Five ways Nudge Security can help you gain the visibility you need, secure your newly expanded SaaS estate, and plan for the future. The post How Nudge Security is useful in a merger or acquisition appeared first on Security Boulevard.