Application Security News and Articles


Using Generative AI to Understand How an Obfuscated Script Works

Tackling Code Obfuscation When facing a new technical challenge, I’m someone who often feels "in over my head," I tackle these feelings through research and preparation. Today, I'm delving into code obfuscation, a frequent challenge in malware ...

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

Jerusalem, Israel, March 28th, 2024, Cyberwire  In 2023 alone, more than 10 customers and partners signed commercial agreements with C2A Security, including a global, long term enterprise agreement with an European Commercial Vehicle ...

How a Security Data Fabric Approach Can Transform the GRC Function

Creating a security data fabric protects an organization’s investment in its security and other IT controls by identifying performance issues so they can be fixed. The post How a Security Data Fabric Approach Can Transform the GRC Function ...

NHS Scotland confirms ransomware attackers leaked patients’ data

NHS Dumfries and Galloway (part of NHS Scotland) has confirmed that a “recognised ransomware group” was able to “access a significant amount of data including patient and staff-identifiable information,” and has published ...

Building a cyber security risk assessment template

Defending your school district’s IT infrastructure is hard enough as it is. It’s a lot tougher if you don’t know what to defend against. That’s why you need a cyber security risk assessment template. Not familiar? No worries. Let’s ...

Patch actively exploited Microsoft SharePoint bug, CISA orders federal agencies (CVE-2023-24955)

The Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2023-24955 – a code injection vulnerability that allows authenticated attackers to execute code remotely on a vulnerable Microsoft SharePoint Server – to its ...

Who You Gonna Call? For Incident Response

Gary Perkins, Chief Information Security Officer  Globally, no organization is immune to attack. Cybersecurity threats are a reality and every organization, anywhere in the world, is a potential target, regardless of location or size. It’s not ...

Zero Trust Meets Insider Risk Management

What do Jack Teixeira, Joshua Schulte, and Korbein Schultz have in common? All three worked for the federal government in some capacity, and all three used their insider access for nefarious purposes, got caught and were arrested. Teixeira, while ...

X.Org X Server Vulnerabilities Fixed in Ubuntu

The X.Org X Server, a fundamental component of graphical user interfaces in Linux systems, recently encountered a series of vulnerabilities. These vulnerabilities, if exploited, could potentially allow attackers to crash the X Server, steal ...

Debunking compliance myths in the digital era

Despite recent economic fluctuations, the software-as-a-service (SaaS) market isn’t letting up. The industry is set to grow annually by over 18% and be valued at $908.21 billion by 2030. It’s evident the industry is fueled by an increasing ...

Enterprises increasingly block AI transactions over security concerns

Enterprises must secure a transformation driven by generative AI (GenAI) bidirectionally: by securely adopting GenAI tools in the enterprise with zero trust while leveraging it to defend against the new AI-driven threat landscape, according to ...

How CISOs tackle business payment fraud

In this Help Net Security video, Shai Gabay, CEO of Trustmi, discusses why payments are a source of cyber worry for CISOs. CISOs are worried about Business Email Compromise (BEC), cyber attackers’ use of AI, and securing the supply chain. ...

AI weaponization becomes a hot topic on underground forums

The majority of cyberattacks against organizations are perpetrated via social engineering of employees, and criminals are using new methods including AI to supercharge their techniques, according to ReliaQuest. Some 71% of all attacks trick ...

Cybercriminals use cheap and simple infostealers to exfiltrate data

The rise in identity-based attacks can be attributed to a rapid increase in malware, according to SpyCloud. Researchers found that 61% of data breaches in 2023, involving over 343 million stolen credentials, were infostealer malware-related. Of ...

Unleashing the Power of AI in Data Security and Compliance Through Advanced Data Discovery

Data protection is the bedrock of good cybersecurity posture. But the foundation of data protection is discovery and classification. As the old adage goes: You can’t protect what you can’t see. Only with true visibility comes the knowledge ...

Longtime Security Industry Leader Art Coviello Joins Netography Board of Director

Netography®, the security company for the Atomized Network, today announced that Art Coviello joined the company as its newest Board Member. Coviello brings over 25 years of cybersecurity operational experience to the Netography Board and will ...

7 Reasons Why Vendor Platform Security Is Not Enough

Securing IT assets demands continuous effort from both technology vendors and purchasing organizations. Vendors must deliver secure offerings with timely updates and defenses against known threats, and it’s up to end-users to apply those ...

What Are Conversation Overflow Cyberattacks and How Do They Work?

AI has been instrumental in the fight against cybercrime. Machine learning algorithms are far more... The post What Are Conversation Overflow Cyberattacks and How Do They Work? appeared first on Security Boulevard.

How to Migrate AWS PostgreSQL RDS to Aurora Using Terraform

6 min read This summary covers key migration steps, Terraform integration, and strategies for handling costs and backups. The post How to Migrate AWS PostgreSQL RDS to Aurora Using Terraform appeared first on Aembit. The post How to Migrate AWS ...

SANS 2024 Threat Hunting Survey: Hunting for Normal Within Chaos

Discover the Cutting-Edge of Cybersecurity in the “SANS 2024 Threat Hunting Survey: Hunting for Normal Within Chaos” Are you navigating the complexities of threat hunting in today’s chaotic cyber landscape? SANS’s ninth annual Threat ...