Application Security News and Articles


BEC Scammers Adventures on the Run

 Last week the case of Valentine FOMBE was finally brought to a close. FOMBE was sentenced to 144 months in Federal prison and ordered to pay $325,856 in restitution to victims of Business Email Compromise scams that he conducted from 2016 to ...

USENIX Security ’23 – Zechao Cai, Jiaxun Zhu, Wenbo Shen, Yutian Yang, Rui Chang, Yu Wang, Jinku Li, Kui Ren – Demystifying Pointer Authentication on Apple M1

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

Complex Supply Chain Attack Targets GitHub Developers

Unidentified threat actors used multiple tactics to launch a sophisticated software supply-chain campaign targeting developers on the GitHub platform, including members of the popular Top.gg community that includes more than 170,000 members. The ...

2024 IT Risk and Compliance Benchmark Report Findings: Why Unifying Risk and Compliance Work Is No Longer Optional

Each year, we ask over 1,000 IT and GRC professionals about their priorities for the coming year and operational aspects, like changes to budgets, staffing, challenges, and much more. What we found was this: in the rapidly evolving landscape of ...

Cloud-based DCIM Software Powers Modern Data Center Operations

In the age of digital transformation, data stands as the new oil, and the data center, its refinery. This vital infrastructure underpins nearly every aspect of modern business, from customer interactions to supply chain optimization and from ...

Telegram Privacy Nightmare: Don’t Opt In to P2PL

Scary SMS shenanigans: Avoid Telegram’s new “Peer-To-Peer Login” program if you value your privacy or your cellular service. The post Telegram Privacy Nightmare: Don’t Opt In to P2PL appeared first on Security Boulevard.

Daniel Stori’s ‘The Real Reason Not To Use sigkill (Revamp)’

via the inimitable Daniel Stori at Turnoff.US. Permalink The post Daniel Stori’s ‘The Real Reason Not To Use sigkill (Revamp)’ appeared first on Security Boulevard.

HIPAA Compliance: Why It Matters and How to Obtain It

What is HIPAA? The Health Insurance Portability and Accountability Act (HIPAA) of 1996 Security Rule established standards for protecting individuals’ electronic personal health information (PHI) (which includes any identifiable health ...

The Path to 90-Day Certificate Validity: Challenges Facing Organizations

Certificate lifespan is getting shorter Over the years the cybersecurity industry has undergone notable transformations... The post The Path to 90-Day Certificate Validity: Challenges Facing Organizations appeared first on Entrust Blog. The post ...

Datto Networking and VSA 10: Your Shortcut to Smarter Networks

In the constantly changing world of IT management, seamless integration between tools is the key to doing things better andRead More The post Datto Networking and VSA 10: Your Shortcut to Smarter Networks appeared first on Kaseya. The post Datto ...

Legit Security launches enterprise secrets scanning solution

Legit Security has unveiled its standalone enterprise secrets scanning product, which can detect, remediate, and prevent secrets exposure across the software development pipeline. An AI-powered solution that enables secrets discovery beyond ...

Spoutible Enhances Platform Security through Partnership with Wallarm

Spoutible, the rapidly growing social media platform known for its commitment to fostering a safe, inclusive, and respectful online community, has taken a significant step forward in its mission to ensure user safety, security and data integrity. ...

Cyber readiness and SBOMs

The Advanced Technology Academic Research Center (ATARC) recently hosted the webinar "Unlocking Cyber Readiness with SBOMs," focusing on the essential role of software bills of materials (SBOMs) in enhancing cybersecurity frameworks across ...

BackBox platform update enhances CVE mitigation and risk scoring

After releasing Network Vulnerability Manager (NVM) in Q4 2023, BackBox has announced a major platform feature update that gives customers the ability to mark irrelevant or already-mitigated Common Vulnerabilities and Exposures (CVEs) as ...

USENIX Security ’23 – XCheck: Verifying Integrity Of 3D Printed Patient-Specific Devices Via Computing Tomography

Authors/Presenters:Zhiyuan Yu, Yuanhaur Chang, Shixuan Zhai, Nicholas Deily, and Tao Ju, XiaoFeng Wang, Uday Jammalamadaka, Ning Zhang Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the ...

Vercara UltraAPI offers protection against malicious bots and fraudulent activity

Vercara has launched UltraAPI, a product suite that protects APIs and web applications from malicious bots and fraudulent activity while ensuring regulatory compliance. Powered by Cequence Security UltraAPI helps organizations protect ...

US, UK Accuse China of Years-Long Cyberespionage Campaign

The United States, the UK, and other countries this week accused a state-sponsored Chinese threat group of running a massive global hacking campaign for more than a decade that targeted political figures, journalists, businesses, political ...

ArmorCode Risk Prioritization provides visibility into security findings with business context

ArmorCode announced ArmorCode Risk Prioritization, providing a 3D scoring approach for managing application security risks. ArmorCode combines the three dimensions of technical severity ratings, unique business context, and insight on whether a ...

Embrace Generative AI for Security, But Use Caution

Generative AI will be a net positive for security, but with a large caveat: It could make security teams dangerously complacent. The post Embrace Generative AI for Security, But Use Caution appeared first on Security Boulevard.

Swimlane partners with Dragos to automate threat detection across both IT and OT environments

Swimlane announced a partnership with Dragos. Through the partnership, the companies are offering a new integration between Swimlane Turbine and the Dragos Platform that enables customers to automate threat detection and enrichment across both IT ...