Application Security News and Articles


What are non-human identities?

Non-human identities (NHI) are digital, automated and programmable access credentials that play a crucial role in securing systems, managing access, and ensuring the integrity of digital environments. NHIs come in the form of API keys, OAuth ...

GlobalSign PKIaaS Connector enhances ServiceNow certificate lifecycle management

GlobalSign has unveiled the availability of the latest iteration of its PKIaaS Connector for ServiceNow. The updates to the GlobalSign PKIaaS Connector enables ServiceNow customers to better manage their digital certificates, with more timely ...

Cloud Repatriation Impacts on Resources and Cybersecurity

The cloud repatriation surge and the impact on SOS resources and business cybersecurity  In recent years, the cloud computing landscape has witnessed a significant yet somewhat surprising trend: cloud repatriation.   This movement involves ...

BigID raises $60 million to accelerate AI data security innovation

BigID announced that it closed a $60 million growth round led by Riverwood Capital with participation by Silver Lake Waterman and Advent. With the strong momentum of generative AI, enterprises have rushed to stand up new initiatives that drive ...

Recent Node.js Vulnerabilities Fixed in Ubuntu

Several vulnerabilities within Node.js were identified, posing a significant threat to Ubuntu systems. These vulnerabilities could enable attackers to execute arbitrary code on compromised systems, potentially leading to severe consequences for ...

Beyond PHP EOL: An Upgrade Dilemma

Extensive code rewrites for upgrading PHP impact operations and security. Extended Lifecycle Support provides patches and fixes for PHP EOL, enabling you to avoid extensive code rewrites. Saving resources and reducing disruptions allows ...

What is Credential Harvesting? Examples & Prevention Methods

Credential harvesting attacks can lead to all kinds of online fraud. Learn how to detect and prevent credential harvesting attacks on your business. The post What is Credential Harvesting? Examples & Prevention Methods appeared first on ...

WordPress Brute-Force Attacks: Sites Used As Staging Ground

In a recent discovery by Sucuri, a concerning trend has emerged involving brute-force attacks on WordPress sites through malicious JavaScript injections. These WordPress brute-force attacks stand out for their stealthy approach. Security ...

Streamline your SBOM management with SBOM Manager

Modern software development means applications are woven from diverse components sourced from in-house development, open source repositories, and external vendors. Keeping track of all these dependencies is becoming more critical as governments ...

Surviving the “quantum apocalypse” with fully homomorphic encryption

In the past few years, an increasing number of tech companies, organizations, and even governments have been working on one of the next big things in the tech world: successfully building quantum computers. These actors see a lot of potential in ...

How Ivanti’s Vulnerability Led to CISA Breach?

Data breaches are an ongoing threat to businesses of all sizes and types operating across industries. Violations can have a significant impact on large groups, small businesses, government agencies, and nonprofits. This is particularly true for ...

Cybersecurity jobs available right now: March 19, 2024

Central Investigations & Cybersecurity Analyst Meta | USA | On-site – View job details The successful candidate will be able to assess and analyze large amounts of data to identify sources of potential threats and abuses, ...

Why is everyone talking about certificate automation?

Digital Certificates are not new. In this Help Net Security video, Andreas Brix, Senior Program Manager at GlobalSign, discusses why they are back in the news and what you should do about it. The post Why is everyone talking about certificate ...

Outsmarting cybercriminal innovation with strategies for enterprise resilience

In this Help Net Security interview, Pedro Cameirão, Head of Cyber Defense Center at Nokia, discusses emerging cybersecurity trends for 2024 and advises enterprises on preparation strategies. Cameirão will speak at GISEC Global 2024 in Dubai, a ...

Lynis: Open-source security auditing tool

Lynis is a comprehensive open-source security auditing tool for UNIX-based systems, including Linux, macOS, and BSD. Hardening with Lynis Lynis conducts a thorough security examination of the system directly. Its main objective is to evaluate ...

Your FAQ Guide to RSA Conference 2024

Here’s your essential FAQ guide for RSA Conference 2024! Whether you’re a first-timer or a seasoned attendee, this guide aims to help you navigate the conference with ease and make the most of your experience. Welcome to stop by our booth ...

Protecting Against Attacks on NTLM Authentication

When it comes to cyberattacks, March has come in like a lion for Microsoft. Last week, Microsoft said in an SEC filing that that information stolen in a hack of senior leaders’ email accounts is now being used to “gain or attempt to gain ...

Fujitsu finds malware on company systems, investigates possible data breach

Fujitsu Limited, the largest Japanese IT services provider, has announced that several of the company’s computers have been compromised with malware, leading to a possible data breach. Known details about the Fujitsu data breach The company ...

Why USB Attacks Are Back and How to Prevent Them

When we think about modern cyber threats, USB drives and keys are probably not the... The post Why USB Attacks Are Back and How to Prevent Them appeared first on Security Boulevard.