Application Security News and Articles


Securing your organization’s supply chain: Reducing the risks of third parties

When Stephen Hawking said that “we are all now connected by the internet, like neurons in a giant brain”, very few people understood the gravity of his statement. But ten years on from his famous interview with USA Today, it’s safe to say ...

IAM and Passkeys: 4 Steps Towards a Passwordless Future

IAM and Passkeys: 4 Steps Towards a Passwordless Future madhav Thu, 05/02/2024 - 05:07 In the ever-evolving landscape of cybersecurity, Identity and Access Management (IAM) remains a vital link in the cybersecurity chain. However, with World ...

Understanding emerging AI and data privacy regulations

In this Help Net Security interview, Sophie Stalla-Bourdillon, Senior Privacy Counsel & Legal Engineer at Immuta, discusses the AI Act, the Data Act, and the Health Data Space Regulation. Learn how these regulations interact, their ...

reNgine: Open-source automated reconnaissance framework for web applications

reNgine is an open-source automated reconnaissance framework for web applications that focuses on a highly configurable and streamlined recon process. Developing reNgine reNgine was developed to overcome the constraints of conventional ...

Women rising in cybersecurity roles, but roadblocks remain

The ISC2 study on women in cybersecurity, a comprehensive research effort that collected responses from 2,400 women, has revealed several significant findings. These include promising trends in women’s entry into the profession, their roles ...

AI-driven phishing attacks deceive even the most aware users

Vishing and deepfake phishing attacks are on the rise as attackers leverage GenAI to amplify social engineering tactics, according to Zscaler. AI automates and personalizes various aspects of the attack process AI-driven phishing attacks leverage ...

Post DBIR 2024: 7 Ways to Reduce Your Cyber Risk

The Verizon DBIR is the most anticipated annual report on data breaches with many incredible insights, and this year is no exception. The most surprising finding is the rapid explosion in vulnerability exploitation, which now constitutes one of ...

NSFOCUS Recognized by Independent Research Firm for Its Bot Management Capabilities

NSFOCUS was included in Forrester’s The Bot Management Software Landscape, Q1 2024. SANTA CLARA, Calif., May 2, 2024 – NSFOCUS, a global leader in cybersecurity solutions, has been recognized by Forrester, a leading market research company, ...

RSAC 2024 Innovation Sandbox | P0 Security’s Cloud Access Governance Platform

The RSA Conference 2024 will kick off on May 6. Known as the “Oscars of Cybersecurity,” the RSAC Innovation Sandbox has become a benchmark for innovation in the cybersecurity industry. Today, let’s get to know the company P0 Security. ...

Security in the AI Sector: Understanding Infostealer Exposures and Corporate Risks

As Constella analyzed in the first part of this blog series, which focused on exhibitions in the emerging AI sector, we’ll delve deeper into the risks and vulnerabilities in this field, along with the threat of Infostealer exposures. Constella ...

Reading the Mandiant M-Trends 2024

This is my informal, unofficial, unapproved etc blog based on my reading of the just-released Mandiant M-Trends 2024 report (Happy 15th Birthday, M-Trends! May you live for many googley years…) Vaguely relevant AI visual with … cybernetic ...

Kaseya 365 Ushers in the Dawn of a New Era in IT & Security Management

he opening keynote of Kaseya Connect Global 2024, Kaseya CEO Fred Voccola introduced the world to a solution that changesRead More The post Kaseya 365 Ushers in the Dawn of a New Era in IT & Security Management appeared first on Kaseya. The ...

Lawsuits After Ransomware on the Rise, Comparitech Says

Ransomware attacks are an expensive proposition for any company. For example, a report this week by cybersecurity firm Sophos found that while the percentage of companies that were victims of ransomware this year has dropped slightly, the ...

How Do I Protect My AI Model?

AI models are valuable assets. How do you keep them safe? The post How Do I Protect My AI Model? appeared first on Mend. The post How Do I Protect My AI Model? appeared first on Security Boulevard.

USENIX Security ’23 – Investigating Verification Behavior and Perceptions of Visual Digital Certificates

Authors/Presenters: Dañiel Gerhardt, Alexander Ponticello, Adrian Dabrowski, Katharina Krombholz Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to ...

Product Release: PreVeil 5.0

To see the complete list of changes and video clips, visit our Support page. The post Product Release: PreVeil 5.0 appeared first on PreVeil. The post Product Release: PreVeil 5.0 appeared first on Security Boulevard.

Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #288 – How to Torture an Agile Coach

via the respected Software Engineering expertise of Mikkel Noe-Nygaard and the lauded Software Engineering / Enterprise Agile Coaching work of Luxshan Ratnaravi at Comic Agilé! Permalink The post Comic Agilé – Mikkel Noe-Nygaard, ...

Automation and Innovation on the First Day of #KaseyaConnect24

The first day was phenomenal here at #KaseyaConnect24! With thousands of people gathered from across the MSP, MSSP, The post Automation and Innovation on the First Day of #KaseyaConnect24 appeared first on Seceon. The post Automation and ...

What’s hot at RSAC 2024: 8 SSCS talks you don’t want to miss

In the span of just a few years, software supply chain security has evolved from being a niche security topic to a top priority for development organizations, security practitioners and CISOs alike. That shift is evident when you take a peek at ...

ADCS Attack Paths in BloodHound — Part 2

ADCS Attack Paths in BloodHound — Part 2 In Part 1 of this series, we explained how we incorporated Active Directory Certificate Services (ADCS) objects into BloodHound and demonstrated how to effectively use BloodHound to identify attack ...