Application Security News and Articles


Harnessing the Power of the Kraken: A Deep Dive into the Kraken Model of Innovation

The Kraken Model of Innovation is not just a concept but a transformative strategy to thrive. This model draws its inspiration from the mythical kraken,...Read More The post Harnessing the Power of the Kraken: A Deep Dive into the Kraken Model of ...

Pondurance Announces Partnership With E&I Cooperative Services

The vast majority of cyberattacks are executed for financial gain, and that means that any organization, regardless of size, industry, or current in-house capabilities, can become a victim of cybercrime. Educational organizations are a ...

There’s a New Way To Do Least Privilege

Least privilege. It’s like a love-hate relationship. Everyone knows it’s a best practice, but no one is achieving it at scale.  Why? Because it’s hard to do. The market is constantly trying to sell you least privilege, but no solution is ...

CI/CD pipelines and the cloud: Are your development secrets at risk?

Continuous integration/continuous delivery (CI/CD) is widely embraced by developers because of its ability to deliver code changes more frequently and reliably. Unfortunately, it can deliver those code changes insecurely. When coupled with ...

Kubernetes RBAC Essentials: How to Enable and Manage Access

As the number of applications and participants grows within your cluster, it may be necessary to evaluate and limit the activities they can perform. For instance, you may consider restricting access to production to only a select few individuals. ...

Ghost Security Phantasm detects attackers targeting APIs

Ghost Security announced the early access availability of Phantasm, application-specific threat intelligence poised to fill a large gap that currently exists in both threat intelligence and application security. Developed by a team of industry ...

Photos: RSA Conference 2024

RSA Conference 2024 is taking place at the Moscone Center in San Francisco. Help Net Security is on-site, and this gallery takes you inside the event. The featured vendors are: Sophos, NetSPI, IT-Harvest, Cisco, GitGuardian, Delinea, Splunk, ...

Traceable launches Generative AI API Security to combat AI integration risks

Traceable AI has revealed an Early Access Program for its new Generative AI API Security capabilities. As enterprises increasingly integrate Generative AI such as Large Language Models (LLMs) into critical applications, they expose those ...

MITRE breach details reveal attackers’ successes and failures

MITRE has shared a timeline of the recent breach if fell victim to and has confirmed that it began earlier than previously thought: on December 31, 2023. On that day, the attackers deployed a web shell on an external-facing Ivanti Connect Secure ...

Cloudflare for Unified Risk Posture identifies cyber threats

Cloudflare announced Cloudflare for Unified Risk Posture, a new suite of risk management solutions designed to streamline the process of identifying, evaluating, and managing cyber threats that pose risk to an organization, across all ...

MITRE and NVIDIA build AI supercomputer for federal agency use

MITRE is building a new capability intended to give its AI researchers and developers access to a massive increase in computing power. The new capability, MITRE Federal AI Sandbox, will provide better experimentation of next generation AI-enabled ...

News alert: Hunters announces full adoption of OCSF, introduces OCSF-native search

SAN FRANCISCO, May 7, 2024, CyberNewsWire –– Hunters, the pioneer in modern SOC platforms, today announced its full adoption of the Open Cybersecurity Schema Framework (OCSF), coupled with the launch of groundbreaking OCSF-native Search ...

Forcepoint ONE Data Security simplifies data protection with zero-trust principles for all organizations

Forcepoint introduced Forcepoint ONE Data Security, an enterprise-grade unified cloud-managed solution designed to simplify data protection with zero-trust principles for all organizations. The new Forcepoint SaaS solution provides unified ...

nodeQ launches PQtunnel to simplify the migration to PQC for both SMEs and large enterprises

nodeQ has developed PQtunnel, a tool designed to assist businesses – ranging from SMEs to large enterprises – in transitioning their end-to-end (E2E) secure communication to PQC. This software application is available in two variants: ...

Inpher SecurAI protects the privacy of user inputs on large language models

Inpher released SecurAI, a solution that protects the privacy and security of user inputs on large language models. This release of SecurAI leverages the NVIDIA H100 Tensor Core GPU for maximum speed and performance. “Enterprises need to ...

Theori unveils Xint to automate security operations in cloud and hybrid environments

Theori unveiled its latest security management solution, Xint. Xint streamlines and automates security operations across cloud and hybrid environments, providing comprehensive visibility throughout the entire security ecosystem. Xint integrates ...

Red Hat launches RHEL AI for streamlined GenAI model testing and deployment

Red Hat has launched Red Hat Enterprise Linux AI (RHEL AI), a foundation model platform that enables users to more seamlessly develop, test and deploy generative AI (GenAI) models. RHEL AI brings together the open source-licensed Granite large ...

AppOmni introduces ZTPM for enhanced cisibility in SaaS security

AppOmni unveiled AppOmni Zero Trust Posture Management (ZTPM), a solution set that strengthens security in modern infrastructures by bridging a critical gap in network-centric zero trust (ZT) architectures. Specifically, the framework provides ...

Veeam fixes RCE flaw in backup management platform (CVE-2024-29212)

Veeam has patched a high-severity vulnerability (CVE-2024-29212) in Veeam Service Provider Console (VSPC) and is urging customers to implement the patch. About CVE-2024-29212 Veeam Service Provider Console is a cloud platform used by managed ...

Eclypsium offers protection for GenAI hardware infrastructure

Eclypsium announced new GenAI assessment capabilities for its Supply Chain Security Platform. The new capabilities help secure the fundamental layers of the GenAI tech stack through support for NVIDIA hardware and popular GenAI foundation models. ...