Application Security News and Articles


Biometrics: A Flash Point in AI Regulation

According to proprietary verification data from Onfido (now a part of Entrust), deepfakes rose 3100%... The post Biometrics: A Flash Point in AI Regulation appeared first on Entrust Blog. The post Biometrics: A Flash Point in AI Regulation ...

apexanalytix Passkeys protects data with biometric authentication

apexanalytix launched Passkeys, a feature that enables suppliers to securely log into their accounts using biometrics like a fingerprint or face scan, or a screen lock PIN. The latest FBI Internet Crime Report reveals that business email ...

Dependency Confusion Vulnerability Found in an Archived Apache Project 

Get details on the Legit research team's discovery of a dependency confusion vulnerability in an archived Apache project.  The post Dependency Confusion Vulnerability Found in an Archived Apache Project  appeared first on Security Boulevard.

Binary Defense enhances BDVision to improve security for SMBs

Binary Defense announced several important updates to BDVision, the company’s real-time detection and containment Managed Endpoint Detection & Response (mEDR) solution. These critical updates – which include new deception technology, ...

The 10 Women in Cybersecurity You Need to Follow

These women are innovating in the cybersecurity field. How many of them do you know? The post The 10 Women in Cybersecurity You Need to Follow appeared first on Security Boulevard.

Trend Micro launches AI-driven cyber risk management capabilities

Trend Micro unveiled AI-driven cyber risk management capabilities across its entire flagship platform, Trend Vision One. This seamlessly integrates more than 10 industry technology categories into one offering, empowering security, cloud and IT ...

MITRE breached by nation-state threat actor via Ivanti zero-days

MITRE has been breached by attackers via two zero-day vulnerabilities (CVE-2023-46805, CVE-2024-21887) in Ivanti’s Connect Secure VPN devices. The attackers have also managed to move laterally and compromise the company network’s ...

Cloud Security Stories: From Risky Permissions to Ransomware Execution

In the sprawling cloud infrastructure of GlobalTech Inc., a meticulously planned ransomware attack was set in motion by a sophisticated adversary, codenamed Vector. Vector’s objective wasn’t just to encrypt data for a ransom but to navigate ...

Story 1: Removing super-admin tokens across 33 GitHub tenants in 2 hours

Join Astrix customers as they lead the non-human identity security frontier in this series “The Astrix stories: Real customer wins”. From building an automated process around NHI offboarding, to a collaboration between security and ...

Understanding Spectre V2: A New Threat to Linux Systems

Recently, researchers uncovered a significant threat dubbed Spectre v2, a variant of the notorious Spectre attack, targeting Linux systems running on modern Intel processors. Let’s delve into the intricacies of this exploit, its implications, ...

The Essential KVM Cheat Sheet for System Administrators

The virsh command is used for managing guest virtual machines.  You can start, stop, reboot, and get information about VMs effortlessly with commands. Automating security patching on KVM virtualization systems is possible with the QEMUCare live ...

Click Fraud: What it is & How it Works

Click fraud happens with the intention of influencing traffic statistics, votes, or rankings—usually at a large scale. Here's how DataDome stops it. The post Click Fraud: What it is & How it Works appeared first on Security Boulevard.

GUEST ESSAY: Here’s why securing smart cities’ critical infrastructure has become a top priority

Critical infrastructure like electrical, emergency, water, transportation and security systems are vital for public safety but can be taken out with a single cyberattack. How can cybersecurity professionals protect their cities? In 2021, a lone ...

The first steps of establishing your cloud security strategy

In this article, we’ll identify some first steps you can take to establish your cloud security strategy. We’ll do so by discussing the cloud security impact of individual, concrete actions featured within the CIS Critical Security Controls ...

TA547 Phishing Attack: German Companies Hit With Infostealer

Researchers at Proofpoint have found out that the TA547 phishing attack campaigns have been targeting different German companies. Identified as TA547, the threat actor has been using an information stealer called Rhadamanthys to get its hand on ...

Scytale’s Multi-Framework Cross-Mapping: Your Shortcut to a Complete Compliance Program

With Scytale's Multi-Framework Cross-Mapping, companies can implement and manage multiple security frameworks without the headaches. The post Scytale’s Multi-Framework Cross-Mapping: Your Shortcut to a Complete Compliance Program appeared first ...

How to optimize your bug bounty programs

In this Help Net Security interview, Roy Davis, Manager – Vulnerability Management & Bug Bounty at Zoom, discusses the role bug bounty programs play in identifying security vulnerabilities and facilitating collaboration with ...

Cloud Console Cartographer: Open-source tool helps security teams transcribe log activity

Cloud Console Cartographer is an open-source tool that maps noisy log activity into highly consolidated, succinct events to help security practitioners cut through the noise and understand console behavior in their environment. ...

Fuxnet malware: Growing threat to industrial sensors

In this Help Net Security video, Sonu Shankar, Chief Strategy Officer at Phosphorus, discusses how Blackjack’s Fuxnet malware should be a wakeup call to industrial operators about the vulnerability of sensor networks and the outsized impact ...

Uncertainty is the most common driver of noncompliance

Most compliance leaders tend to focus on building an ethical culture in their organizations to improve employee behavior, but it has a limited impact on addressing uncertainty about how to be compliant, according to a survey by Gartner. Three ...