Application Security News and Articles


TrustCloud Product Updates: April 2024

See what’s new in TrustCloud You know us: Every month we’re cooking up something new! Here are the updates that hit TrustCloud this month. TrustShare GraphAI will answer questionnaires for you with accurate, high-quality responses. TrustShare ...

News alert: Cybersixgill unveils ‘Third-Party Intelligence’ to deliver vendor-specific threat intel

Tel Aviv, Israel – April 30, 2024 – Cybersixgill, the global cyber threat intelligence data provider, broke new ground today by introducing its Third-Party Intelligence module. The new module delivers vendor-specific cybersecurity and ...

April Recap: New AWS Services and Sensitive Permissions

Amazon Web Services (AWS) has over 200 cloud services available to help organizations innovate, build business, and secure their data. New services are released every year with new permissions to accompany (there are over 19k permissions in AWS ...

USENIX Security ’23 – Sherlock on Specs: Building LTE Conformance Tests through Automated Reasoning

Authors/Presenters: Yi Chen, Di Tang, Yepeng Yao, Mingming Zha, Xiaofeng Wang, Xiaozhong Liu, Haixu Tang, Baoxu Liu Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong ...

FCC Fines Verizon, AT&T, and T-Mobile for Sharing User Location Data

The Federal Communications Commission (FCC) is fining the country’s largest wireless carriers a combined $196 million for illegally selling the location data of customers to third-parties in a case that dates back to 2020. In announcing the ...

Why Hackers May Already Have Your Private Health Care Information

There’s probably no place on earth where we’re more vulnerable than a doctor’s office or... The post Why Hackers May Already Have Your Private Health Care Information appeared first on Security Boulevard.

Brits Ban Default Passwords — and More IoT Stupidity

Nice Cup of IoTea? The UK’s Product Security and Tele­comm­uni­cations Infra­struc­ture Act aims to improve the security of net-connected consumer gear. The post Brits Ban Default Passwords — and More IoT Stupidity appeared first on ...

Unlocking the Prioritization Secrets of Top CISOs

In the chaotic and ever-changing world of cybersecurity, the line between a good Chief Information Security Officer (CISO) and a top-tier one often boils down to one crucial skill: ruthless prioritization. But how do these elite CISOs navigate ...

Randall Munroe’s XKCD ‘Doppler Effect’

via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Doppler Effect’ appeared first on Security Boulevard.

GUEST ESSAY: Recalibrating critical infrastructure security in the wake of evolving threats

For all the discussion around the sophisticated technology, strategies, and tactics hackers use to infiltrate networks, sometimes the simplest attack method can do the most damage. The recent Unitronics hack, in which attackers took control over ...

Finding Attack Vectors using API Linting

Learn how to weaponize developer tools used for API linting to find attack vectors in the APIs you are hacking. The post Finding Attack Vectors using API Linting appeared first on Dana Epp's Blog. The post Finding Attack Vectors using API ...

Is API Security Just a Better WAF? | Impart Security

The perceptions of the API security market have really shifted since we started Impart Security three years ago. When we first started Impart, API security was a new market; there were many different opinions about what API security was, how to ...

Using CTI to Help Predict Vulnerability Exploitability

In a world of increasingly powerful data analytics, security researchers continue to develop new uses for artificial intelligence (AI) and machine learning (ML). In security, predictive analytics offer insight into how a company should prioritize ...

95% of Organizations Revamped Their Cybersecurity Strategies in the Last Year

Security strategies are evolving; driven by regulatory requirements, customer expectations around data privacy and AI-driven threats and solutions  BROOMFIELD, Colo.–April 30, 2024—As the digital landscape continues to evolve at an ...

An Introduction to FinOps Governance: How to Get Started

FinOps, a portmanteau of Finance and DevOps, is a strategic framework created to help companies understand and manage their cloud costs, enabling greater efficiency in cloud service usage. Created by the FinOps Foundation, this financial ...

USENIX Security ’23 – Eavesdropping Mobile App Activity via Radio-Frequency Energy Harvesting

Authors/Presenters: Tao Ni, Guohao Lan, Jia Wang, Qingchuan Zhao, Weitao Xu Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating ...

Introducing the Unified RL Spectra Suite

One thing you quickly realize in cybersecurity is that change is a constant. Cyber criminals, nation-state hacking crews, and ideologically motivated hackers are always on the lookout for new technologies, tools, and tactics that give them an ...

Announcing the General Availability of Spectra Detect v5.0: Enhancing File Analysis for Advanced Threat Detection

ReversingLabs Spectra Detect delivers high-volume, high-speed file analysis that seamlessly integrates into existing infrastructure and effectively scales with business needs. Powered by RL’s proprietary, AI-driven, complex binary analysis, ...

Adaptive Shield unveils SaaS security for AI

Adaptive Shield announced SaaS Security Posture Management (SSPM) detection and response capabilities for AI-driven applications to enable enterprises to mitigate the risks introduced by the growing use of generative AI. The workforce is rapidly ...

Sysdig Extends CNAPP Reach to AI Workloads

The goal is to enable cybersecurity and data science teams to work together and share their expertise. The post Sysdig Extends CNAPP Reach to AI Workloads appeared first on Security Boulevard.