Application Security News and Articles


Vishal Rao joins Skyhigh Security as CEO

Skyhigh Security announced that it has appointed Vishal Rao as the organization’s next CEO. Rao will succeed former Skyhigh Security CEO Gee Rittenhouse, effective immediately. Rao brings an extensive background in the enterprise software ...

The art and science of product security: A deep dive with Jacob Salassi

Discover the main takeaways from our conversation on product security with Jacob Salassi, Director of Product Security at Snowflake. The post The art and science of product security: A deep dive with Jacob Salassi appeared first on Security ...

New Strata Cookbook and Identity Orchestration Recipes Automate Microsoft Active Directory Modernization and Coexistence with Microsoft Entra ID

Maverics platform enables organizations to move applications from AD to cloud-based Entra ID and extend Entra ID to on-prem apps without any code changes or browser plug-in agents BOULDER, Colo., March 21, 2024 – Strata Identity, the Identity ...

Authoring Automated Attacks with ChatGPT (or any Generative AI)

Basic API Interrogation During my time here at Cequence, I have been impressed with the attackers we face. Often, they have almost nothing to go on and must figure out how each piece of their attack is going to work. Sometimes it is finding an ...

IoT Consumer Labeling Goes Global – What This Means for Vendors and Consumers

IoT producers must comprehend the relevant rules, consult legal and technological experts and evaluate cybersecurity procedures. The post IoT Consumer Labeling Goes Global – What This Means for Vendors and Consumers appeared first on Security ...

Apricorn releases 24TB hardware encrypted USB drive

Apricorn released a 24TB version of its Aegis Padlock DT and Padlock DT FIPS Desktop Drives. Apricorn brings a 24TB encrypted drive to market, delivering high performance and mass capacity to industries such as healthcare, financial services, ...

Safeguarding Patient Data with HITRUST Compliance: A Comprehensive Guide for Healthcare Technology Companies

Healthcare organizations increasingly rely on technology to store, manage, and transmit sensitive patient information. As a result, safeguarding patient data against cyber threats and ensuring compliance with regulatory standards is critical, and ...

Veritas Backup Exec enhancements protect SMBs’ critical data

Veritas Technologies announced enhancements to Veritas Backup Exec, the unified backup and recovery solution. The latest updates include malware detection capabilities, role-based access control and additional optimizations for fast backup and ...

LogicGate introduces cyber and operational risk suite offerings

LogicGate announces the new Cyber Risk Suite and Operational Risk Suite offerings, providing enterprises with purpose-built integrated solutions to efficiently and effectively optimize their Enterprise Risk Management (ERM) and cyber risk ...

Memory-safe languages and security by design: Key insights, lessons learned

For more than 50 years, software engineers have struggled with memory vulnerabilities, but it has only been in recent times that serious efforts have been undertaken to get a handle on the problem. One of the leaders in memory safety, Google, has ...

Ordr Taps AI to Augment Attack Surface Management

Ordr this week added an attack surface management (ASM) tool infused with artificial intelligence (AI) to its existing asset management portfolio. The post Ordr Taps AI to Augment Attack Surface Management appeared first on Security Boulevard.

What’s The Best Content Filter For Schools?

Content filtering is an essential part of the K-12 cybersecurity and safety landscape. But which content filter is best for your school district? Read on to learn all you need to know about web filtering and choosing the right solution. ...

Public AI as an Alternative to Corporate AI

This mini-essay was my contribution to a round table on Power and Governance in the Age of AI.  It’s nothing I haven’t said here before, but for anyone who hasn’t read my longer essays on the topic, it’s a shorter introduction.   The ...

Kyndryl partners with Cloudflare to help enterprises migrate to next-generation networks

Kyndryl and Cloudflare announced a Global Strategic Alliance, an expansion of their partnership, to enable enterprises to migrate and manage networks for multi-cloud connectivity and comprehensive network security. The partnership combines ...

March Product Update

The CyberSaint team is dedicated to advancing the CyberStrong platform to meet your cyber risk management needs. These latest updates will empower you to benchmark your organization against NIST CSF 2.0 and assess and analyze your risk posture ...

CVE-2023-48788: Fortinet FortiClientEMS SQL Injection Deep Dive

Introduction In a recent PSIRT, Fortinet acknowledged CVE-2023-48788 – a SQL injection in FortiClient EMS that can lead to remote code execution. FortiClient EMS is an endpoint management solution for enterprises that provides a central ...

EPA and White House Send Water Industry Cybersecurity Warning

The Biden administration issues a cybersecurity call to action for the US water industry amid flood of cyber threats targeting essential systems This directive (see the official guidance) comes in the wake of revelations that utilities are facing ...

Evolving Cyber Threats: Insights and Strategies from the 2023 FBI IC3 Report

Latest FBI IC3 Report shows a record year for cybercrime: record-setting $12.5 billion in losses The 2023 FBI IC3 report reveals not just numbers but narratives that underscore the adaptability and cunning of today’s cyber adversaries. With a ...

The Weakest Link: Securing The Human Element From Cyberattack 

By: Chris Clements, VP of Solutions Architecture The Problem  As humans, we tend to trust the people around us in most situations simply by default. We usually don’t assume that the cook in a restaurant will poison our food or that the ...

Attackers are exploiting JetBrains TeamCity flaw to deliver a variety of malware

Attackers are exploiting the recently patched JetBrains TeamCity auth bypass vulnerability (CVE-2024-27198) to deliver ransomware, cryptominers and remote access trojans (RATs), according to Trend Micro researchers. The CVE-2024-27198 timeline ...