Application Security News and Articles


Unlocking the Power of True AI: MixMode’s Cutting-Edge Cybersecurity Solution

We have now reached the Third wave of AI: Contextual Reasoning. This revolutionary approach, pioneered by MixMode in cybersecurity, utilizes self-supervised and explainable AI to independently learn and adapt without reliance on rules or training ...

Safeguard Data with Access Governance and Monitoring

Safeguarding Data: Could Access Governance and Monitoring Have Controlled the AT&T Data Leak?In today's interconnected digital world, safeguarding sensitive customer data is critical. However, recent reports reveal the vulnerability of data, ...

Ransomware group maturity should influence ransom payment decision

Your organization has been hit by ransomware and a decision has to be made on whether or not to make the ransom payment to get your data decrypted, deleted from attackers’ servers, and/or not leaked online. The decision will depend on a ...

Simbian raises $10 million to automate security operations with GenAI

Simbian emerged from stealth mode with oversubscribed $10 million seed funding to deliver on fully autonomous security. As a first step towards that goal, the company is introducing a GenAI-powered security co-pilot that integrates secure and ...

Awkward Adolescence: Increased Risks Among Immature Ransomware Operators

Summary. In recent years, cybercrime has become an increasingly familiar issue amongst cybersecurity professionals, with ransomware in particular commanding news […] The post Awkward Adolescence: Increased Risks Among Immature Ransomware ...

XZ Trojan highlights software supply chain risk posed by ‘sock puppets’

The high-profile compromise of the XZ Utils open-source compression library, disclosed last week, highlights an under-reported threat: social engineering attacks that target open-source package maintainers and other developers to stage software ...

Backdoor in XZ Utils That Almost Happened

Last week, the internet dodged a major nation-state attack that would have had catastrophic cybersecurity repercussions worldwide. It’s a catastrophe that didn’t happen, so it won’t get much attention—but it should. There’s an important ...

Securing APIs through penetration testing

APIs (Application Programming Interfaces) have become the backbone of many modern applications, and indeed the foundation of some businesses services. APIs enable seamless communication between applications, services and systems, allowing... The ...

Cyber Insurance: Sexy? No. Important? Critically yes.

Season 3, Episode 5: Cyber Insurance may not be the sexiest topic, but it’s an important piece of any mature cyber program. We chatted with a lawyer and a VC who share their perspective. The post Cyber Insurance: Sexy? No. Important? Critically ...

AppViewX CERT+ helps organizations identify and renew certificates before they expire

AppViewX announced new functionality in the AppViewX CERT+ certificate lifecycle management automation product that helps organizations prepare for Google’s proposed 90-day TLS certificate validity policy. AppViewX CERT+ provides visibility, ...

Digimarc and DataTrails join forces to provide proof of digital content authenticity

Digimarc and DataTrails have partnered to deliver a fully integrated content protection solution to fortify digital content using advanced digital watermarks in tandem with cryptographic proofs, or fingerprints. Combined with provenance metadata, ...

Your Guide to Threat Detection and Response

Reading Time: 6 min Discover the latest strategies and technologies for effective Threat Detection and Response (TDR) in 2024. Stay ahead in the cybersecurity game. The post Your Guide to Threat Detection and Response appeared first on Security ...

PVML raises $8 million to offer protection for enterprise data

PVML unveils its platform for secure AI-powered data access and $8 million in Seed funding led by NFX with participation from FJ Labs and Gefen Capital. While the complexity, variety and scale may vary from organization to organization, all ...

Navigating Legal Challenges of Generative AI for the Board: A Strategic Guide

In today’s fast-paced business landscape, integrating Artificial Intelligence (AI), particularly Generative AI, encompassing technologies like ChatGPT, Bard, and DALL-E 2, presents unprecedented opportunities and multifaceted risks. As the ...

NIST CSF: A “Fellowship” for Your Cybersecurity Journey to 2.0 

By Samuel Lewis, Senior Security Consultant   The National Institute of Standards and Technology (NIST) released version 2.0 of the Cybersecurity Framework (CSF) on February 26, 2024. The original version was released in 2014, one year after ...

PCI DSS 4.0: The Compliance Countdown – A Roadmap Through Phases 1 & 2

PCI DSS 4.0: The Compliance Countdown – A Roadmap Through Phases 1 & 2 madhav Thu, 04/11/2024 - 05:17 While compliance mandates can sometimes feel burdensome, PCI DSS 4.0 presents an opportunity to future-proof your payment card security. ...

How Google’s 90-day TLS certificate validity proposal will affect enterprises

Announced last year, Google’s proposal to reduce the lifespan of TLS (transport layer security) certificates from 13 months to 90 days could be implemented in the near future. It will certainly improve security and shrink the window of ...

Leveraging AI for enhanced compliance and governance

In this Help Net Security interview, Dr. Joseph Sweeney, Advisor at IBRS, discusses the risks of integrating AI into information management systems. He talks about emerging trends such as content cognition. He predicts advancements in AI-driven ...

Graylog: Open-source log management

Graylog is an open-source solution with centralized log management capabilities. It enables teams to collect, store, and analyze data to get answers to security, application, and IT infrastructure questions. Graylog key features It is easy to ...

37% of publicly shared files expose personal information

Many sensitive documents stored on platforms such as Google Drive, Slack, and other collaborative work applications have been left unattended for several months or even years. This has led to data sprawl challenges for companies and significant ...