Application Security News and Articles


How PKI strengthens Zero Trust network security

Cybersecurity complexities rise with expanding infrastructures. Discover how Zero Trust and PKI combine for enhanced security and strengthen organizational defenses The post How PKI strengthens Zero Trust network security appeared first on ...

How to Get CMMC Certified

This quick guide breaks down the steps of achieving CMMC so your business can protect sensitive government data. The post How to Get CMMC Certified appeared first on Scytale. The post How to Get CMMC Certified appeared first on Security Boulevard.

April 2024 Patch Tuesday forecast: New and old from Microsoft

This month, we have a new product preview from Microsoft, and some older products are being prepared for end-of-support. But before we go there, March 2024 Patch Tuesday was pretty mild, with 60 unique vulnerabilities addressed. We saw updates to ...

How can the energy sector bolster its resilience to ransomware attacks?

Since it plays a vital role in every functioning society, the energy sector has always been a prime target for state-backed cybercriminals. The cyber threats targeting this industry have grown significantly in recent years, as geopolitical ...

WiCyS: A champion for a more diverse cybersecurity workforce

In this Help Net Security interview, Lynn Dohm, Executive Director at Women in CyberSecurity (WiCyS), talks about how the organization supports its members across different stages of their cybersecurity journey. WiCyS (pronounced Wee-Sis) is an ...

Massive AT&T Data Leak, The Danger of Thread Hijacking

Episode 324 features discussions on a significant AT&T data breach affecting 73 million customers and a sophisticated thread jacking attack targeting a journalist. Co-host Scott Wright joins the discussion, highlighting how millions of ...

How malicious email campaigns continue to slip through the cracks

In this Help Net Security video, Josh Bartolomie, VP of Global Threat Services at Cofense, discusses how email will remain a target as long as it remains the predominant form of communication within a business. Cofense researchers have found that ...

Industrial sectors embrace zero trust for enhanced security

Organizations are leveraging zero trust to enhance the safety, security, and reliability of their enterprise across IT and OT environments, according to Xage Security. Zero trust security implementation in industrial sectors The report analyzes ...

Threat actors are raising the bar for cyber attacks

From sophisticated nation-state-sponsored intrusions to opportunistic malware campaigns, cyber attacks manifest in various forms, targeting vulnerabilities in networks, applications, and user behavior. The consequences of successful cyber attacks ...

Conn. CISO Raises Security Concerns Over BadGPT, FraudGPT

Almost everyone has heard of ChatGPT. But Jeff Brown, CISO for the state of Connecticut, shares his concerns on some of the other “dark side” apps that have emerged with generative AI.   The post Conn. CISO Raises Security Concerns Over ...

9 Best Practices for Using AWS Access Analyzer

Maintaining a strong security posture is crucial in today’s digital landscape, and it begins with users. Trusting users with access to sensitive data and company assets is a web of complexity, and one bad apple or security gap can knock all the ...

XZ-Utils Supply Chain Backdoor Vulnerability Updated Advisory (CVE-2024-3094)

Vulnerability Overview Recently, NSFOCUS CERT detected that the security community disclosed a supply chain backdoor vulnerability in XZ-Utils (CVE-2024-3094), with a CVSS score of 10. Since the underlying layer of SSH relies on liblzma, when ...

Week in review: 73M customers affected by AT&T data leak, errors led to US govt inboxes compromise

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Cyber attacks on critical infrastructure show advanced tactics and new capabilities In this Help Net Security interview, Marty Edwards, Deputy ...

New NPSA 2024 Guidelines for Mitigating Insider Risk

UK NPSA provides a comprehensive guide to communication and preparedness for mitigating insider risk The UK government’s National Protective Security Authority (NPSA) has recently issued new guidance emphasizing the role of effective ...

Salt Security Applies Generative AI to API Security

Salt Security claims Pepper can decrease the time it takes to surface actionable security-related information by as much as 91% . The post Salt Security Applies Generative AI to API Security appeared first on Security Boulevard.

Small business cyber security guide: What you should prioritize & where you should spend your budget

The post Small business cyber security guide: What you should prioritize & where you should spend your budget appeared first on Click Armor. The post Small business cyber security guide: What you should prioritize & where you should spend ...

Data Privacy in Email Communication: Compliance, Risks, and Best Practices

Reading Time: 5 min Data privacy in email communication refers to the protection and confidentiality of personal data. Learn about data privacy regulations, particularly GDPR. The post Data Privacy in Email Communication: Compliance, Risks, and ...

Ghostwriter v4.1: The Custom Fields Update

Let’s dive into what makes this so exciting! There’s so much to cover that we won’t be offended if you want to look at the CHANGELOG for a quick synopsis. Introducing Customizable Fields Over the years, we’ve had many requests for ...

FCC: Phone Network Bugs Must Be Fixed — But are SS7/Diameter Beyond Repair?

Fast enough for government work: The Federal Communications Commission is finally minded to do something about decades-old vulnerabilities. The post FCC: Phone Network Bugs Must Be Fixed — But are SS7/Diameter Beyond Repair? appeared first on ...

Ivanti CEO Promises Stronger Security After a Year of Flaws

The chief executive of vulnerability-plagued Ivanti said the management software maker is revamping its security practices after months of reports of China-linked and other attackers exploiting the flaws. In an open letter to customers and ...