Application Security News and Articles


How MSPs and Resellers Should Approach Cybersecurity

What are the threats facing credential security? How partners can take steps to prevent their clients from falling victim to them? The post How MSPs and Resellers Should Approach Cybersecurity appeared first on Enzoic. The post How MSPs and ...

Cheating Automatic Toll Booths by Obscuring License Plates

The Wall Street Journal is reporting on a variety of techniques drivers are using to obscure their license plates so that automatic readers can’t identify them and charge tolls properly. Some drivers have power-washed paint off their plates or ...

Growing AceCryptor attacks in Europe

ESET Research has recorded a considerable increase in AceCryptor attacks, with detections tripling between the first and second halves of 2023. In recent months, researchers registered a significant change in how AceCryptor is used, namely that ...

Empowering Cyber Risk Modeling with Risk Remediation

The practice of cyber risk management is cyclical. You start by assessing your cyber risk environment. That step includes identifying risks and classifying them in buckets. Then, you take the identified risks and measure the potential impact. ...

The most prevalent malware behaviors and techniques

An analysis of 100,000+ Windows malware samples has revealed the most prevalent techniques used by malware developers to successfully evade defenses, escalate privileges, execute the malware, and assure its persistence. Malware tactics and ...

What Is the Dark Web? Myths and Facts About the Hidden Internet

Explore the dark web, the anonymous underbelly of the internet. Uncover myths vs facts, how it works, and accessing this hidden realm safely The post What Is the Dark Web? Myths and Facts About the Hidden Internet appeared first on SternX ...

Venafi Firefly with SPIFFE capability enables security teams to ensure governance and reduce risk

Venafi introduced SPIFFE (Secure Production Identity Framework For Everyone) support for Venafi Firefly, Venafi’s lightweight workload identity issuer designed to support modern, highly distributed cloud native workloads. As workload identity ...

Nirmata Policy Manager combats cloud security threats

Nirmata announced new features for its flagship product, Nirmata Policy Manager. With today’s increasing cloud security threats, detecting intrusions is no longer enough – the damage may already be done. That’s why Nirmata has ...

How businesses should prepare for shorter SSL/TLS certificate validity periods

SSL/TLS certificates play a crucial role in securing web communications for organizations. It's imperative for businesses to adhere to industry standards and requirements, especially regarding certificate renewals. Recent trends indicate a shift ...

CARFAX Puts an End to Scrapers and API Abuse With DataDome

CARFAX is a commercial web-based service that aggregates data from various sources to provide vehicle history reports to individuals and businesses. When the company launched its new product, a multitude of malicious bots scraped its data, ...

DataDome Account Protect Stops Fraud Before It Happens, Delivering Instant Savings to Enterprises Worldwide

DataDome Account Protect prevents unnecessary financial loss and costs, brand damage, & wasted team resources. The post DataDome Account Protect Stops Fraud Before It Happens, Delivering Instant Savings to Enterprises Worldwide appeared ...

LW ROUNDTABLE: Will the U.S. Senate keep citizens safe, vote to force China to divest TikTok?

Congressional bi-partisanship these day seems nigh impossible. Related: Rising tensions spell need for tighter cybersecurity Yet by a resounding vote of 352-65, the U.S. House of Representatives recently passed a bill that would ban TikTok unless ...

Preparing for Third-Party Audits: Best Practices for Success

In this blog, we'll walk through best practices for getting audit-ready, from getting your documentation together to prepping your team. The post Preparing for Third-Party Audits: Best Practices for Success appeared first on Scytale. The post ...

Red teaming in the AI era

As AI gets baked into enterprise tech stacks, AI applications are becoming prime targets for cyber attacks. In response, many cybersecurity teams are adapting existing cybersecurity practices to mitigate these new threats. One such practice ...

1% of users are responsible for 88% of data loss events

Data loss is a problem stemming from the interaction between humans and machines, and ‘careless users’ are much more likely to cause those incidents than compromised or misconfigured systems, according to Proofpoint. While ...

Security best practices for GRC teams

Even with the best-of-the-best tools and tech stack monitoring vulnerabilities, every security executive and GRC leader should still have some layer of paranoia. If they don’t, that’s a huge issue. In this Help Net Security video, Shrav ...

API environments becoming hotspots for exploitation

A total of 29% of web attacks targeted APIs over 12 months (January through December 2023), indicating that APIs are a focus area for cybercriminals, according to Akamai. API integration amplifies risk exposure for enterprises APIs are at the ...

Regulatory measures boost cybersecurity industry

According to the UAE Cybersecurity Council, in 2023, the UAE repelled over 50,000 cyberattacks daily. These findings, highlighted in a report from Frost & Sullivan (F&S), show the exponential growth of the region’s cybersecurity ...

Understanding Your Attack Surface: AI or bust

Creating an accurate inventory of an organization’s assets and applications while ensuring no duplicates or omissions is essential for any IT and security program. Security teams must understand vulnerabilities associated with their assets, ...

Efficiency is All You Need

A chance encounter with Texas’s beloved company’s Chief Human resources officers tempted me to ask a candid question. The question was a question that lots of sales engineers will be asking when they attempt to sell a technology product to an ...