Application Security News and Articles


What is certificate discovery and why is it important?

Digital certificates ensure cybersecurity, but visibility into inventory is crucial. Explore certificate discovery's role in effective CLM. The post What is certificate discovery and why is it important? appeared first on Security Boulevard.

SAS unveils products and services to help customers embrace AI

SAS is launching new AI products and services to improve AI governance and support model trust and transparency. Model cards and new AI Governance Advisory services will help organizations navigate the turbulent AI landscape, mitigating risk and ...

Authorities take down LabHost, phishing-as-a-service platform

Law enforcement from 19 countries severely disrupted one of the world’s largest phishing-as-a-service platform, known as LabHost. This year-long operation, coordinated at the international level by Europol, resulted in the compromise of ...

WebLogic T3/IIOP Information Disclosure Vulnerability (CVE-2024-21006/CVE-2024-21007)

Overview Recently, NSFOCUS CERT detected that Oracle has released a security announcement and fixed two information disclosure vulnerabilities (CVE-2024-21006/CVE-2024-21007) in Oracle WebLogic Server. Due to the defects of T3/IIOP protocol, ...

Cisco Taps AI and eBPF to Automate Security Operations

Cisco today launched a framework that leverages artificial intelligence (AI) to test a software patch in a digital twin running on an endpoint to make sure an application doesn’t break before actually deploying it. Jeetu Patel, executive vice ...

Rethinking Identity Threat Detection: Don’t Rely on IP Geolocation

SOC teams frequently look to the IP geolocation to determine whether an alert or activity poses a genuine threat.  However, with the changing threat landscape, relying solely on this information is no longer sufficient. In this blog post, we ...

A Pandora’s Box: Unpacking 5 Risks in Generative AI

A Pandora's Box: Unpacking 5 Risks in Generative AI madhav Thu, 04/18/2024 - 05:07 Generative AI (GAI) is becoming increasingly crucial for business leaders due to its ability to fuel innovation, enhance personalization, automate content ...

Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate

Since June 2023, Sophos X-Ops has discovered 19 junk gun ransomware variants — cheap, independently produced, and crudely constructed — on the dark web. The developers of these junk gun variants are attempting to disrupt the traditional ...

Who owns customer identity?

When I’m talking with prospective clients, I like to ask: which department owns customer identity? Everyone immediately looks towards a different team. While every team touches customer identity at some point, the teams that own it differ from ...

92% of enterprises unprepared for AI security challenges

Most industries continue to run almost two or more months behind in patching software vulnerabilities, endpoints remain vulnerable to threats, and most enterprise PCs must be replaced to support AI-based technologies, according to the Absolute ...

Enterprises face significant losses from mobile fraud

A recent Enea survey highlights a worrying trend in enterprise security: Following ChatGPT’s launch, 76% of businesses are inadequately protected against rising AI-driven vishing and smishing threats. In this Help Net Security video, John ...

Bots dominate internet activity, account for nearly half of all traffic

49.6% of all internet traffic came from bots in 2023, a 2% increase over the previous year, and the highest level Imperva has reported since it began monitoring automated traffic in 2013. For the fifth consecutive year, the proportion of web ...

Palo Alto Networks PAN-OS Command Injection Vulnerability (CVE-2024-3400)

Overview Recently, NSFOCUS CERT detected that Palo Alto Networks issued a security announcement and fixed the command injection vulnerability (CVE-2024-3400) in PAN-OS. Since GlobalProtect gateway or portal configured in PAN-OS does not strictly ...

Q&A With Axiad’s New Chief Product Officer: Alex Au Yeung

Earlier this week we made an important announcement highlighting the appointment of two new executives... The post Q&A With Axiad’s New Chief Product Officer: Alex Au Yeung appeared first on Axiad. The post Q&A With Axiad’s New Chief ...

CSOs and CFOs; The World’s Next Greatest Dynamic Duo

One could argue that the World’s greatest conquests, competitions, and challenges are better off when in the hands of a dynamic duo. Dynamic Duos are pervasive in sports. Growing up Read More The post CSOs and CFOs; The World’s Next Greatest ...

XZ Utils-Like Takeover Attempt Targets the OpenJS Foundation

The OpenJS Foundation, which oversees multiple JavaScript projects, thwarted a takeover attempt of at least one project that has echoes of the dangerous backdoor found in versions of the XZ Utils data compression library that failed only because ...

USENIX Security ’23 – The Maginot Line: Attacking The Boundary Of DNS Caching Protection

Authors/Presenters: *Xiang Li, Chaoyi Lu, Baojun Liu, Qifan Zhang, Zhou Li, Haixin Duan, Qi Li* Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open ...

What it takes to do Cloud Detection & Response

A guest post by James Berthoty the founder of Latio Tech. The shift to cloud has meant an The post What it takes to do Cloud Detection & Response appeared first on ARMO. The post What it takes to do Cloud Detection & Response appeared ...

Understanding AWS End of Service Life Is a Key FinOps Responsibility

Amazon Web Services (AWS) announced extended support prices for Amazon Elastic Kubernetes Service (EKS), prompting some businesses to reevaluate how they manage their cloud infrastructure and financial operations. For those that missed it, the ...

Glitter and… Firewalls? How to stay safe this festival season

The air is electric, the skies are clear, and the lineups are out – festival season is upon us! From the euphoric beats under starlit skies to the communal spirit of like-minded souls, festivals offer a world apart, a temporary escape into a ...