Application Security News and Articles


Beyond Traditional Vendor Management: Navigating AI Risks in the Supply Chain 

There are many ways in which AI is increasing risk, extending beyond third parties to affect all aspects of our security programs. The post Beyond Traditional Vendor Management: Navigating AI Risks in the Supply Chain  appeared first on Security ...

How CISOs can talk cybersecurity so it makes sense to executives

CISOs know cyber risk is business risk. Boards don’t always see it that way.​ For years, CISOs have struggled to get boards to understand security beyond buzzwords. Many feel they’re either ignored or misunderstood. But with threats ...

How OSINT supports financial crime investigations

In this Help Net Security interview, Stuart Clarke, CEO at Blackdot Solutions, discusses the strategic use of open-source intelligence (OSINT) in tackling financial crime. He outlines its application in areas such as fraud, sanctions evasion, and ...

Review: Effective Vulnerability Management

Effective Vulnerability Management offers a view of a key part of cybersecurity, showing how practices, tools, and processes can help organizations reduce risk. About the authors Chris Hughes is the President of Aquia, a cybersecurity leader with ...

Vuls: Open-source agentless vulnerability scanner

Vuls is an open-source tool that helps users find and manage security vulnerabilities. It was created to solve the daily problems admins face when trying to keep servers secure. Many administrators choose not to use automatic software updates ...

What Vibe Coding, MCP, and Slopsquatting Reveal About the Future of AI Development

Join us as we explore the transformative changes in software development and cybersecurity due to AI. We discuss new terminology like ‘vibe coding’ — a novel, behavior-focused development approach, and ‘MCP’ (Model Context Protocol) — ...

Ransomware spike exposes cracks in cloud security

90% of IT and security leaders said their organization experienced a cyberattack within the last year, according to a report by Rubrik. “Many organizations that move to the cloud assume their providers will handle security,” said Joe Hladik, ...

Flexibility in Choosing the Right NHIs Solutions

Why is there a Need for Flexibility in Choosing the Right NHI Solutions? The need for well-rounded security measures is paramount. Undeniably, one of the key elements in crafting an effective cyber strategy revolves around Non-Human Identities ...

Relax with Robust NHI Security Measures

Just how secure are your Non-Human Identities? Have you ever questioned the security level of your Non-Human Identities (NHIs)? NHIs are often the unsung heroes, silently working behind-the-scenes to protect your digital fortress. But are you ...

Stay Calm: Your NHIs Are Protecting You

Can Your Non-Human Identities Keep You Calm When It Comes to Data Security? Maintaining a sense of calm security might seem like a tall order. However, the management of Non-Human Identities (NHIs) and Secrets can be a game-changer in achieving ...

BSidesLV24 – Proving Ground – Taking D-Bus To Explore The Bluetooth Landscape

Author/Presenter: Paul Wortman Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and ...

How to get rid of deployment anxiety

No this is not therapy. We are talking about CI/CD here :)Continue reading on Level Up Coding »

How to get rid of deployment anxiety

No this is not therapy. We are talking about CI/CD here :)Continue reading on Medium »

Week in review: Critical SAP NetWeaver flaw exploited, RSAC 2025 Conference

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: RSAC 2025 Conference RSAC 2025 Conference took place at the Moscone Center in San Francisco. Check out our microsite for related news, photos, ...

Why Ransomware Isn’t Just a Technology Problem (It’s Worse)

Ransomware isn’t a tech failure - it’s a market failure. If you think the hardest part is getting hacked, wait until the lawyers, insurers, and PR firms show up. The post Why Ransomware Isn’t Just a Technology Problem (It’s Worse) ...

Why NHIs Leave Security Experts Satisfied

Why is Satisfaction with NHIs Paramount in Security Expertise? When it comes to managing security, Non-Human Identities (NHIs) have become a critical focus for many CISOs and security professionals. This growing importance prompts the question: ...

Are Your NHIs Capable of Handling New Threats?

Are Your Non-Human Identities Prepared for Emerging Cybersecurity Threats? Understanding the readiness and response efficiency of your Non-Human Identities (NHIs) to new cybersecurity threats is crucial. This post seeks to shed light on the ...

Bsideslv24 – Proving Ground – Unleashing The Future Of Development: The Secret World Of Nix & Flakes

Author/Presenter: Jason Odoom Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and ...

How to Handle CMMC Scoping for Remote Employees

CMMC mandates that companies working as part of the government supply line need to comply with a level of security determined by their handling of controlled information. Identifying the level of compliance necessary for your business is the ...

How NHIs Contribute to IT Stability

Why Are NHIs Crucial for IT Stability? How often do we consider Non-Human Identities (NHIs) and their role in IT stability? Many organizations are unaware of the strategic importance of NHI management. With more businesses adopt cloud-based ...