Application Security News and Articles


API Security and The Silent Menace of Unknown APIs

The digital application landscape is evolving rapidly, with APIs as the backbone of modern software development. However, amidst all this innovation lies a silent menace:  the prevalence of unknown APIs. These APIs, often lurking beyond ...

Build Strong Information Security Policy: Template & Examples

Every organization needs to have security measures and policies in place to safeguard its data. One of the best and most important measures you can take to protect your data (and that of your customers) is simply to have a robust information ...

Ransomware Attacks are Up, but Profits are Down: Chainalysis

In the ever-evolving world of ransomware, it’s getting easier for threat groups to launch attacks – as evidence by the growing number of incidents – but more difficult to make a profit. Organizations’ cyber-defenses are getting more ...

USENIX Security ’23 – “Security Is Not My Field, I’m A Stats Guy”: A Qualitative Root Cause Analysis of Barriers to Adversarial Machine Learning Defenses in Industry

Authors/Presenters: Jaron Mink, Harjot Kaur, Juliane Schmüser, Sascha Fahl, Yasemin Acar Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open ...

RSAC 2024 Day 2: IoT Security Questions (and Answers)

RSA Conference delivers in terms of interesting dialogues with other cybersecurity professionals, and this year while there is not much on the conference agenda related to IoT security there is a lot of discussion about it.  Whether it’s the ...

Harnessing Cyber Risk Quantification to Safeguard Healthcare Providers

Welcome to Axio’s series on cybersecurity for healthcare providers, where we share expert insights and practical advice tailored to the unique security needs of the medical sector. Our aim is Read More The post Harnessing Cyber Risk ...

10 Ways K12 School Districts Can Boost Cybersecurity for the 2024-2025 School Year

When the school year is winding down, vacations are very front of mind. And yet,... The post 10 Ways K12 School Districts Can Boost Cybersecurity for the 2024-2025 School Year appeared first on Security Boulevard.

Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #289 – The Engineering Manager Skillset

via the respected Software Engineering expertise of Mikkel Noe-Nygaard and the lauded Software Engineering / Enterprise Agile Coaching work of Luxshan Ratnaravi at Comic Agilé! Permalink The post Comic Agilé – Mikkel Noe-Nygaard, ...

Implementing Zero Trust: Beyond Internal Network Models

With 2024 being the year that people and organizations are realizing that they will never be able to prevent every breach, and they need to ensure the implementation and deployment of appropriate proactive cyber resiliency solutions, zero-trust ...

Aembit Launches Terraform Provider to Enable Infrastructure as Code

3 min read This will enable DevOps teams to better streamline workload access controls, ensuring consistent, secure deployments across environments. The post Aembit Launches Terraform Provider to Enable Infrastructure as Code appeared first on ...

Big Vulnerabilities in Next-Gen BIG-IP

Our ongoing research has identified remotely exploitable vulnerabilities in F5’s Next Central Manager that can give attackers full administrative control of the device, and subsequently allow attackers to create accounts on any F5 assets ...

Kasada Named 2024 Fraud Prevention Winner

Company recognized for its KasadaIQ fraud prevention service. The post Kasada Named 2024 Fraud Prevention Winner appeared first on Security Boulevard.

USENIX Security ’23 – “Security Is Not My Field, I’m A Stats Guy”: A Qualitative Root Cause Analysis of Barriers to Adversarial Machine Learning Defenses in Industry

Authors/Presenters: Jaron Mink, Harjot Kaur, Juliane Schmüser, Sascha Fahl, Yasemin Acar Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open ...

Press Release: OX Security and HCLSoftware Announce Strategic Partnership to Launch AppScan Supply Chain Security

New OEM Capabilities, Empower Organizations to Deliver a Modern Approach to Application Security   New York, NY, and Tel Aviv, Israel – May 7, 2024 – Today, OX Security, the largest Active Application Security Posture Management (Active ...

Free Workshop from Security Risk Advisors Empowers Organizations to Select Optimal OT Security Tools

Philadelphia, Pennsylvania, May 8th, 2024, CyberNewsWire Security Risk Advisors (SRA) announces the launch of their OT/XIoT Detection Selection Workshop, a complimentary offering designed to assist organizations in selecting the most suitable ...

SentinelOne Singularity Cloud Native Security simulates harmless attacks on cloud infrastructure

Attackers are targeting the scope and scale of the cloud to run rapid and coordinated threat campaigns. A new approach is needed to defend against them, and SentinelOne is delivering it with the launch of Singularity Cloud Native Security. A ...

TikTok Ban — ByteDance Sues US to Kill Bill

PAFACA SueTok: U.S. Courts “likely” to rule whether new law is constitutional—or even practical. The post TikTok Ban — ByteDance Sues US to Kill Bill appeared first on Security Boulevard.

Attackers may be using TunnelVision to snoop on users’ VPN traffic (CVE-2024-3661)

Researchers have brought to light a new attack method – dubbed TunnelVision and uniquely identified as CVE-2024-3661 – that can be used to intercept and snoop on VPN users’ traffic by attackers who are on the same local network. ...

Cado Security launches solution for forensic investigations in distroless container environments

Cado Security has introduced a solution for conducting forensic investigations in distroless container environments. With Cado Security’s new offering, security teams can investigate the root cause, scope, and impact of malicious activity ...

CyberSaint releases NIST CSF Benchmarking Feature

CyberSaint released the NIST Cybersecurity Framework (CSF) Benchmarking Feature, which allows CISOs and security teams to measure their NIST posture against industry peers through a historical maturity graph on the CyberStrong Executive ...