Application Security News and Articles


Podcast Episode 14: University of Richmond’s Winning Strategies of an All-Female CTF Squad

Discover the thrill of victory and the fascinating challenges faced in the world of cybersecurity competitions with the Lovely Ladies, an all-female champion team from the University of Richmond. Maggie and Leah join us to share their journey ...

Cybersecurity Insights with Contrast CISO David Lindner | 4/12/24

Insight #1 I was at the Kernelcon conference last week and heard that Gen AI is going to wreck development because there will be more vulnerabilities than ever. In the same breath, I heard that Gen AI is going to fix more vulnerabilities faster. ...

Check Point boosts security in Harmony Email & Collaboration

Check Point announced new email security features that enhance its Check Point Harmony Email & Collaboration portfolio: Patented unified quarantine, DMARC monitoring, archiving, and Smart Banners. Since 2023, Check Point has released over 75 ...

Zscaler extends zero trust SASE and eliminates the need for firewall-based segmentation

Zscaler has signed an agreement to acquire Airgap Networks. Combining Zscaler’s zero trust SD-WAN and Airgap Networks’ agentless segmentation technology will transform how enterprises implement zero trust segmentation to IoT/OT devices, and ...

Case Study Segregation of Duties Oracle ERP Cloud

Case Study: Achieving Segregation of Duties Success in Oracle ERP Cloud Company type: PublicIndustry: Fast food restaurants Primary ERP system: Oracle ERP CloudThe organization is a well-known fast-food chain that operates worldwide. To ...

Cado Security teams up with Wiz to accelerate forensic investigations and minimize cloud threats

Cado Security has uveiled its partnership with Wiz and joins Wiz Integration (WIN) Platform. Cado Security enhances WIN by bringing the power of the Cado Security platform to the partner ecosystem so that Wiz customers can seamlessly integrate ...

Palo Alto Networks firewalls under attack, hotfixes incoming! (CVE-2024-3400)

Attackers are exploiting a command injection vulnerability (CVE-2024-3400) affecting Palo Alto Networks’ firewalls, the company has warned, and urged customers to implement temporary mitigations and get in touch to check whether their devices ...

Palo Alto Networks enhances Cortex XSIAM to help SecOps teams identify cloud threats

Palo Alto Networks announced a new milestone in how security operations centers (SOC) secure the cloud. The new innovations as part of Cortex XSIAM for Cloud bolster the Palo Alto Networks Cortex XSIAM platform to natively deliver Cloud Detection ...

TheMoon Botnet Facilitates Faceless To Exploit EoL Devices

In a digital landscape fraught with threats, vigilance is paramount. The cybercriminals are exploiting End-of-Life devices to perpetrate their malicious activities. Recently, Black Lotus Labs, the formidable threat intelligence arm of Lumen ...

What is ISO 27001 Compliance?

In 2024, information security is a major concern that will never go away totally. ISO 27001 is a globally recognized standard for information security management systems (ISMS). It offers organizations a framework for implementing a systematic ...

CISA: Russian Hackers Stole Emails Between U.S. Agencies and Microsoft

Russian state-sponsored hackers who broke into Microsoft’s corporate email accounts during the monthslong hack stole email messages between the enterprise software giant and a number of U.S. federal agencies, adding to an ongoing series of ...

Strategies to cultivate collaboration between NetOps and SecOps

In this Help Net Security interview, Debby Briggs, CISO at Netscout, discusses breaking down silos between NetOps and SecOps. Practical steps include scheduling strategy meetings, understanding communication preferences, and fostering team ...

The next wave of mobile threats

According to McAfee, apps, whether for communication, productivity, or gaming, are among the biggest threats to mobile security. Technavio expects the global mobile security software market to grow by $2.75 billion between 2020 and 2025, ...

Why women struggle in the cybersecurity industry

The workplace experiences of women in cybersecurity are dramatically worse than men across virtually every category, according to a WiCyS and Aleria survey. Previous studies have illustrated that the representation of women in cybersecurity is ...

New infosec products of the week: April 12, 2024

Here’s a look at the most interesting products from the past week, featuring releases from Akamai, Bitdefender, Siemens, Veriato, and Index Engines. SINEC Security Guard identifies vulnerable production assets The SINEC Security Guard offers ...

NIPS Troubleshooting Steps for No Log

NIPS aims to accurately monitor abnormal network traffic, automatically blocking various types of aggressive traffic in real-time, particularly application layer threats. It aims to take proactive measures instead of merely providing alerts at ...

Equivalency: The Latest FedRamp Memo From DoD

The Federal Risk and Authorization Management Program has been around for nearly 15 years. In that time, it changed and was updated periodically to keep up with the times. While changes are occasionally made to the underlying security frameworks ...

Securing B2B SaaS: How Identity Management Leads the Charge Against Top 5 Security Challenges

Security is paramount in the dynamic B2B SaaS landscape. Explore how Identity Management addresses the top 5 security challenges, from data breaches to compliance, offering insights to fortify digital defenses. Discover proactive measures to ...

Sisense Data Breach Notice for Hyperproof Customers

At Hyperproof, safeguarding our customers’ data is our utmost priority. We understand the importance of trust and transparency, especially in moments of uncertainty. On April 11, 2024, Hyperproof became aware of a breach of our former vendor, ...

Introducing the Aembit Kerberos Trust Provider

3 min read This attestation method is designed for on-premises setups without the availability of AWS or Azure metadata services. The post Introducing the Aembit Kerberos Trust Provider appeared first on Aembit. The post Introducing the Aembit ...