Application Security News and Articles


Envisioning a mobile-powered government workforce

ATARC’s Future of Secure Work Working Group, of which Privoro’s Heather McMahon is a member, recently published a white paper exploring what the future of secure mobility within the Federal government looks like. The working group envisions a ...

Interview: How Awareness Training Protects Schools from Cyberattacks

When it comes to strengthening the cyber defenses of a K12 school or university, the... The post Interview: How Awareness Training Protects Schools from Cyberattacks appeared first on Security Boulevard.

Microsoft’s February 2024 Patch Tuesday Addresses 2 Zero-Days and 73 Vulnerabilities

Microsoft’s Patch Tuesday for March 2024 has once again highlighted the importance of regular updates in maintaining the security of digital environments. This month, Microsoft addressed a significant number of vulnerabilities, including two ...

Randall Munroe’s XKCD ‘Physics vs. Magic’

via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Physics vs. Magic’ appeared first on Security Boulevard.

Google Splashes the Cash in Bug Bounty Bonanza: $59 Million to Date

Wanna be a VRP VIP? Last year, $GOOG paid $10 million to ethical hackers for finding vulnerabilities. The post Google Splashes the Cash in Bug Bounty Bonanza: $59 Million to Date appeared first on Security Boulevard.

Security Flaws within ChatGPT Ecosystem Allowed Access to Accounts On Third-Party Websites and Sensitive Data

Salt Labs researchers identified generative AI ecosystems as a new interesting attack vector. vulnerabilities found during this research on ChatGPT ecosystem could have granted access to accounts of users, including GitHub repositories, including ...

JetBrains Says Rapid7’s Fast Release of Flaw Details Harmed Users

JetBrains is continuing to criticize Rapid7’s policy for disclosing vulnerabilities its researchers uncover, saying the cybersecurity firm’s quick release of details of flaws in JetBrains’ TeamCity platform harmed some customers and runs ...

Summoning RAGnarok With Your Nemesis

I hope I’m Not Too Late With the explosion of large language model (LLM) use, everyone is rushing to apply LLMs to their specific industry and it’s the same for information security. While LLMs have a huge range of applications in the ...

The Macros Playbook: Maximizing Benefits, Minimizing Risks

The post The Macros Playbook: Maximizing Benefits, Minimizing Risks appeared first on Votiro. The post The Macros Playbook: Maximizing Benefits, Minimizing Risks appeared first on Security Boulevard.

Don’t Miss These Emerging Trends in Cloud Application Security

Get details on trends and best practices in cloud application security. The post Don’t Miss These Emerging Trends in Cloud Application Security appeared first on Security Boulevard.

Understanding the OWASP API Security Top 10: Why BOLA is the Number One Risk for APIs

Understanding and addressing vulnerabilities is critical in cybersecurity, where APIs serve as the backbone for seamless data exchange. The OWASP API Security Top 10, revised in 2023, provides a comprehensive guide to the critical issues that ...

The effects of law enforcement takedowns on the ransomware landscape

While the results of law enforcement action against ransomware-as-a-service operators Alphv/BlackCat and LockBit are yet to be fully realized, the August 2023 disruption of the Qakbot botnet has had one notable effect: ransomware affiliates have ...

Tenable enhances ExposureAI capabilities to directly query AI engine and reduce risk

Tenable has unveiled enhancements to ExposureAI, the generative AI capabilities and services within its Tenable One Exposure Management Platform. The new features enable customers to quickly summarize relevant attack paths, ask questions of an AI ...

USENIX Security ’23 – Dilawer Ahmed, Aafaq Sabir, Anupam Das – Spying Through Your Voice Assistants: Realistic Voice Command Fingerprinting

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

DataDome Ad Protect detects fraudulent ad traffic

DataDome launched DataDome Ad Protect, designed to combat fraudulent traffic affecting digital ad campaigns. This solution is set to transform how organizations manage and secure their online advertising efforts, ensuring that marketing budgets ...

HYAS Product Enhancements – Part II

Product Release News If you know the movie and novel The Princess Bride, then you’re familiar with a certain narcissistic, 2-bit criminal concluding that “you fell victim to one of the classic blunders.” While getting into “a land war in ...

Motion Picture Association Updates Cybersecurity Best Practices

The MPA recently revised its content security best practices to address, among other challenges, the issue of data protection in the cloud computing age. The post Motion Picture Association Updates Cybersecurity Best Practices appeared first on ...

New Relic empowers IT and engineering teams to focus on real application security problems

New Relic launched new capabilities for New Relic IAST (Interactive Application Security Testing), including proof-of-exploit reporting for application security testing. New Relic customers can now identify exploitable vulnerabilities with an ...

Trellix secures sensitive and proprietary information with new protections for macOS

Trellix announced new macOS Trellix Data Loss Prevention Endpoint Complete capabilities to better secure sensitive and proprietary information from accidental or intentional exposure. Global organizations can now protect against critical data ...

Regula 4205D updates help border control authorities fight identity document fraud

The International Organization for Migration reports that the migrant flow has been steadily rising, with the numbers swelling from 153 million in 1995 to 281 million in 2022. Concurrently, the quality of counterfeit documents keeps advancing. ...