Application Security News and Articles


Unveiling ‘poutine’: An Open Source Build Pipelines security scanner

TL;DR BoostSecurity.io is thrilled to announce ‘poutine’ — an Open Source security scanner CLI you can use to detect misconfigurations and…Continue reading on boostsecurity »

A critical vulnerability in Delinea Secret Server allows auth bypass, admin access

Organizations with on-prem installations of Delinea Secret Server are urged to update them immediately, to plug a critical vulnerability that may allow attackers to bypass authentication, gain admin access and extract secrets. Fixing the Delinea ...

Vulnerable Villain: When Hackers Get Hacked 

Explore how Veriti Research uncovers rising Androxgh0st attacks, showing that even hackers face threats, underscoring proactive security and remediation needs. The post Vulnerable Villain: When Hackers Get Hacked  appeared first on VERITI. The ...

Enhancing Security and Reducing Costs with Advanced Zero Trust Implementation

Traditional methods no longer suffice to protect sensitive data from modern threats. Conventional strategies relied on fortress-like defenses, a concept where the network perimeter acted as a barrier, assumed to be impenetrable by external ...

eBook: Why CISSP?

As new cyber threats emerge daily in our connected world, there’s never been a greater urgency for cybersecurity professionals than now. What can CISSP certification do for you? In the eBook, hear from cybersecurity experts on how ...

April Webinar: The Evolution of Authorization

Join us for our next free industry webinar in April: The Evolution of Authorization: How To Achieve Zero Standing Privileges. Organisations are struggling to deliver applications and services on time, often due to hard coded permissions and ...

DinodasRAT Malware: A Multi-Platform Backdoor Targeting Linux

DinodasRAT, a C++-based malware, has emerged as a serious threat to Linux users. Initially discovered targeting Windows systems, researchers have recently reported a Linux variant of this multi-platform backdoor actively deployed in cyberattacks. ...

SonarQube & OWASP Dependency Check for Java

Static Code Analysis and Security for a Java ProjectContinue reading on Medium »

10 Best Linux Server Security Practices for Sysadmin in 2024

Protecting the web server with sensitive information is crucial to secure your website. Linux servers are one of the most popular choices among developers and businesses. According to a report, 96.3% of the top 1 million web servers run on Linux. ...

ShadowDragon Horizon enhancements help users conduct investigations from any device

ShadowDragon announced significant enhancements to its Open-Source Intelligence Investigative platform Horizon. These updates represent a milestone in the evolution of investigative technology, offering capabilities to streamline investigative ...

How Boats Group Sailed Toward Enhanced Bot Protection with DataDome

Learn why Boats Group partnered with DataDome to protect user data and strengthen their online security infrastructure. The post How Boats Group Sailed Toward Enhanced Bot Protection with DataDome appeared first on Security Boulevard.

LayerSlider Plugin Flaw Exposes 1M Sites To SQL Injections

Recent media reports have revealed a crucial LayerSlider plugin flaw. According to these reports, this flaw has exposed numerous WordPress sites to SQL attacks and infections. If exploited, the flaw allows users to add SQL queries, which, in ...

Scale Your Security with vCISO as a Service

Businesses of all sizes, from startups to established organizations, need robust cybersecurity measures to protect their data and infrastructure. However, building a best-in-class security program can be a challenge, especially for companies with ...

How to protect IP surveillance cameras from Wi-Fi jamming

Gone are the days of criminals cutting camera wires to evade detection: with the proliferation of affordable internet-connected cameras, burglars must resort to Wi-Fi jamming. Blocking the signal blinds the device and stalls home and business ...

Geopolitical tensions escalate OT cyber attacks

In this Help Net Security interview, Andrew Ginter, VP of Industrial Security at Waterfall Security, discusses operational technology (OT) cyber attacks and their 2024 Threat Report. He examines how global geopolitical tensions and evolving ...

Exposing the top cloud security threats

Many companies consider AI-powered threats to be the top cloud security threat to their business. Concerningly, less than half are confident in their ability to tackle those threats, according to a recent Aqua Security survey. In this Help Net ...

Linux Backdoor Infection Scare, Massive Social Security Number Heist

In episode 325, Tom and Kevin discuss a significant backdoor threat that nearly compromised Linux systems globally, stemming from an infiltration into an open-source project called XZ Utils by attackers who gained commit access and inserted a ...

Zarf: Open-source continuous software delivery on disconnected networks

Zarf is a free, open-source tool that enables continuous software delivery on disconnected networks. It currently offers fully automated support for K3s, K3d, and Kind and is also compatible with EKS, AKS, GKE, RKE2, and many other distro ...

Expand your library with these cybersecurity books

In this Help Net Security video round-up, authors discuss their cybersecurity books and provide an inside look at each title. Complete videos George Finney, CSO at Southern Methodist University, talks about his book – “Project Zero Trust: A ...

USENIX Security ’23 – How to Bind Anonymous Credentials to Humans

Authors/Presenters: *Julia Hesse, Nitin Singh, Alessandro Sorniotti* Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the ...