Application Security News and Articles


10 Must-Have Elements for an Air-Tight IT Security Policy

In 2023, data security faced an uphill battle against cyberattacks, and the risks of becoming a victim grew stronger.  There was a shocking 600% surge in cybercrime, with the average breach costing $4.37 million to recover from. The figures are ...

How to Conduct an Internal Audit: A Comprehensive Guide

In today’s digital age, external compliance audits and third-party attestations (e.g., SOC 2) have become increasingly crucial in B2B purchase decisions. Not only do they provide an objective third-party verification of a vendor’s ...

SBOM, VDR, and Maven: Transforming the Apache Logging experience to a common pattern

In late 2023, a few members of the Apache Logging Services project – known for providing the famous Log4j logging framework – received funding from the Sovereign Tech Fund (STF) to enhance security aspects of their work. The post SBOM, VDR, ...

CRM Backup Trends to Watch on World Backup Day

With World Backup Day approaching, many organizations are increasing their attention to potential security threats and blindspots in their backup processes. The post CRM Backup Trends to Watch on World Backup Day appeared first on Security Boulevard.

Exclusive: Waffle House Risk Index 1.0 Open For Public Comment Period

In collaboration with the WF Command Center, AZT has developed a new risk index designed to simplify communication associated with cyber risks and threats. The post Exclusive: Waffle House Risk Index 1.0 Open For Public Comment Period appeared ...

Industrial Enterprise Operational Technology Under Threat From Cyberattacks

One in four industrial enterprises had to temporarily cease operations due to cyberattacks within the past year, suggesting operational technology must improve. The post Industrial Enterprise Operational Technology Under Threat From Cyberattacks ...

Stream.Security unveils threat investigation and AI-powered remediation capabilities

Stream.Security announced new threat investigation and AI-powered remediation capabilities. The new real-time attack path detection and generative AI-powered remediation tools are part of the real-time exposure management features that the cloud ...

Is your roadmap prioritizing memory safe programming languages?

Cybersecurity agencies from five different national governments put out a plea in December for developers to use memory-safe programming languages. Are you ready? The post Is your roadmap prioritizing memory safe programming languages? appeared ...

Prioritizing Vulnerabilities: A Growing Imperative

Did a security breach just become your biggest nightmare? It’s a harsh reality for many companies. A whopping 76% of enterprise IT security executives reported business disruptions due to vulnerabilities... The post Prioritizing ...

Linux Kernel Privilege Escalation Vulnerability (CVE-2024-1086) Alert

NSFOCUS CERT has detected that details and a proof-of-concept (PoC) tool for a Linux kernel privilege escalation vulnerability CVE-2024-1086, have been publicly disclosed recently. Due to a use-after-free vulnerability in the netfilter: nf_tables ...

LockBit Hacker Sentenced To 4 Years Jail Plus Fined $860K

Recent reports about legal proceedings, a 34-year-old Russian-Canadian national, Mikhail Vasiliev, has been handed a sentence of almost four years in Canadian prison. Vasiliev’s involvement in the global ransomware scheme known as LockBit led ...

MSP Case Study: Infinite IT Elevates Customer’s Email Defense Capabilities with PowerDMARC MSP Program

Reading Time: 2 min Discover how Infinite IT transforms its email defense capabilities through the PowerDMARC MSP Program in this compelling case study. The post MSP Case Study: Infinite IT Elevates Customer’s Email Defense Capabilities with ...

How much does cloud-based identity expand your attack surface?

We all know using a cloud-based identity provider (IdP) expands your attack surface, but just how big does that attack surface get? And can we even know for sure? As Michael Jordan once said, “Get the fundamentals down, and the level of ...

AI abuse and misinformation campaigns threaten financial institutions

Though generative AI offers financial firms remarkable business and cybersecurity utility, cyberthreats relating to GenAI in financial services are a consistent concern, according to FS-ISAC. Cybercriminals exploit AI for data exfiltration The ...

Advanced cybersecurity strategies boost shareholder returns

Companies demonstrating advanced cybersecurity performance generate a shareholder return that is 372% higher than their peers with basic cybersecurity performance, according to a new report from Diligent and Bitsight. Boards under pressure to ...

Finding software flaws early in the development process provides ROI

Enterprises spend enormous effort fixing software vulnerabilities that make their way into their publicly-facing applications. The Consortium for Information and Software Quality estimates that the cost of poor software quality in the United ...

New infosec products of the week: March 29, 2024

Here’s a look at the most interesting products from the past week, featuring releases from Bedrock Security, CyberArk, GitGuardian, Legit Security, and Malwarebytes. GitGuardian SCA automates vulnerability detection and prioritization for ...

Symmetry Systems Ramps Up Hybrid-Cloud Data Security with $15 Million Series A Funding

ForgePoint Capital and Prefix Capital Double-Down on Data Store and Object Security as Lead Investors Symmetry Systems, provider of cutting-edge Data Store and Object Security (DSOS), today announced a $15 million Series A funding round led by ...

What is Threat Management?

Threat management is a process that is used by cybersecurity analysts, incident responders and threat hunters to prevent cyberattacks, detect cyberthreats and respond to security incidents. The post What is Threat Management? appeared first on ...

Building Strong Defences: The Intricacies of Effective Bot Mitigation – Part 1

Learn how you can assess a bot mitigation provider's ability to detect and stop bots in our new technical blog series. The post Building Strong Defences: The Intricacies of Effective Bot Mitigation – Part 1 appeared first on Security Boulevard.