Application Security News and Articles


3 Ways File Integrity Monitoring Identifies Zero-Day Attacks

A zero-day attack leaves your software vulnerable to being exploited by hackers. It is a serious security risk. Cybercriminals are becoming more and more adept at breaching IT security systems.  The post 3 Ways File Integrity Monitoring ...

Onyxia launches AI-powered predictive insights to optimize security management

Onyxia Cyber unveiled OnyxAI to deliver insights that enable security leaders to proactively optimize security performance, resource allocation, and risk management. “We are seeing a real need in the market for security solutions that can ...

Island raises $175 million at $3 billion valuation

Island announced its $175 million Series D financing. The new funding round brings Island’s valuation to $3 billion, doubling the last valuation from less than a year ago. The round was led by new investor Coatue and existing investor Sequoia ...

SSH vs. SSL/TLS: What’s The Difference?

SSH and SSL/TLS are two widely used cryptographic protocols for establishing secure connections and ensuring secure communication between two parties over an unsecured network. While both protocols offer the same benefits—authentication, ...

Insider Risk: Don’t Ignore the Community Context

When looking to mitigate insider risks, security leaders have to remember the potential causes. This article was originally featured in Security Magazine Just a few months ago, many security professionals confessed concern about a ...

Synopsys Polaris Assist automates repetitive, time-consuming tasks for security and development teams

Synopsys introduced Polaris Assist, an AI-powered application security assistant on the Synopsys Polaris Software Integrity Platform. Polaris Assist combines Large Language Model (LLM) technology with decades of Synopsys’ application security ...

What is API Security?

API Security: Securing the Building Blocks of Our Interconnected World Today’s world is software-driven and widely interconnected. From banking to social media, that software communicates through an intricate web of application programming ...

FCC fines major wireless carriers over illegal location data sharing

The Federal Communications Commission (FCC) fined the nation’s largest wireless carriers for illegally sharing access to customers’ location information without consent and without taking reasonable measures to protect that information ...

Palo Alto firewalls: CVE-2024-3400 exploitation and PoCs for persistence after resets/upgrades

There are proof-of-concept techniques allowing attackers to achieve persistence on Palo Alto Networks firewalls after CVE-2024-3400 has been exploited, the company has confirmed on Monday, but they are “not aware at this time of any ...

LockBit, RAGroup Drive Ransomware Attacks in March

Global ransomware attacks rose slightly in March compared to the previous month, as ransomware cabal RAGroup ramped up activity by more than 300%. However, overall activity declined 8% year-over-year, according to NCC Group’s latest ransomware ...

Cybersixgill Third-Party Intelligence module identifies potential supply chain risks

Cybersixgill, the global cyber threat intelligence data provider, broke new ground by introducing its Third-Party Intelligence module. The new module delivers vendor-specific cybersecurity and threat intelligence to organizations’ security ...

ESET launches two MDR subscription tiers for SMBs and enterprises

ESET launched two new Managed Detection and Response (MDR) subscription tiers: ESET PROTECT MDR for small and medium businesses (SMBs) and ESET PROTECT MDR Ultimate for enterprises. These offerings are built on the foundation of ESET PROTECT ...

Understanding SAP Authorization

Understanding SAP Authorization SAP systems are known for their robust security features, and at the core of this security is the concept of authorization. Authorization in SAP refers to the process of granting users the access they need to ...

Multiple Apache HTTP Server Vulnerabilities Fixed in Ubuntu

The Ubuntu security team recently addressed several Apache HTTP Server vulnerabilities in Ubuntu 23.10, Ubuntu 23.04, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 16.04, and Ubuntu 18.04. These vulnerabilities could potentially allow attackers to ...

ThreatX provides always-active API security from development to runtime

ThreatX has extended its Runtime API and Application Protection (RAAP) offering to provide always-active API security from development to runtime, spanning vulnerability detection at Dev phase to protection at SecOps phase of the software ...

Safeguard your SAP environment

Safeguarding Your SAP Environment:SafePaaS GRC IntegrationIn the intricate tapestry of enterprise operations, SAP solutions often form the backbone, weaving together processes, data, and insights. Yet, this complexity comes with a price: the ...

CyberQP unveils solutions to help MSPs proactively prevent security incidents

CyberQP announced QGuard Pro, a solution with enhanced capabilities designed to exponentially increase technician efficiency, and a new API for Deployment are now generally available. QGuard Pro comes with Passwordless MFA for Technicians, which ...

Preparing for Holiday Cyberattacks

How can security teams be ready for holiday cyberattacks and a seasonal peak in cybercrime? Holiday cyberattacks are on the rise. The vacation season, be it Christmas, Hanukkah, Easter, St. Patrick’s Day, the summer break, or Diwali, is ideally ...

Debian 12: Redefining Stability and Innovation in Open-Source Operating Systems

Debian holds a distinguished position. Recognized as one of the oldest and most trusted distributions within the Linux ecosystem, Debian continues to impress with its latest release, Debian 12. This iteration not only underscores Debian’s ...

KapeKa Backdoor: Russian Threat Actor Group’s Recent Attacks

In the realm of cybersecurity, vigilance is paramount. Recent discoveries have shed light on a previously undisclosed threat known as Kapeka, a versatile backdoor quietly making its presence felt in cyber attacks across Eastern Europe. Let’s ...