Application Security News and Articles


Secure your blockchain project from the start

Systemic security issues in blockchain projects often appear early in development. Without an initial focus on security, projects may choose flawed architectures or make insecure design or development choices that result in hard-to-maintain or ...

Building a Security Culture of Shared Responsibility

These seven major factors can contribute to (or hinder) the development of a positive cybersecurity culture. The post Building a Security Culture of Shared Responsibility appeared first on Security Boulevard.

New Phishing Campaign Delivers Remote Access Trojans (RATs)

Sophisticated phishing campaign leverages public services, where remote access Trojans are being delivered via malicious Java downloader A new phishing campaign has surfaced this week which cleverly employs a Java-based downloader to distribute ...

Stellar Cyber and Torq join forces to deliver automation-driven security operations platform

Stellar Cyber announced a technology partnership with Torq to help security teams dramatically improve their ability to combat advanced attacks. This partnership combines the power of Stellar Cyber Open XDR with Torq Hyperautomation, providing ...

SVG Files Abused in Emerging Campaigns

By Max Gannon Scalable Vector Graphic files, or SVG files, are image files that have become an advanced tactic for malware delivery that has greatly evolved over time. The use of SVG files to deliver malware was made even easier when the tool ...

How Real-Time Personal Cybersecurity and Botnet Detection Protects Corporate Executives

The specter of botnet infections looms large over corporate executives, posing not just a threat to their personal data, but also to the integrity and security of their entire organizations. Botnets are networks of private computers infected with ...

Phishing Threats Rise as Malicious Actors Target Messaging Platforms

As messaging apps like Telegram gain popularity, cybercriminals are increasingly finding they are an attractive vector for phishing attacks. The post Phishing Threats Rise as Malicious Actors Target Messaging Platforms appeared first on Security ...

Nozomi Networks raises $100 million to help secure critical infrastructure

Nozomi Networks announced a $100 million Series E funding round to help accelerate innovative cyber defenses and expand cost-efficient go-to-market expansion globally. This latest round includes investments from Mitsubishi Electric and Schneider ...

Charting a Course for Cybersecurity

Over the past months, headlines have been marked by persistent conflicts in Ukraine and Israel. Cybercriminals took—and continue to take—advantage of a volatile geopolitical situation and relentlessly exploited vulnerabilities. 2023 also saw ...

Mirantis enhances Lens Desktop to improve Kubernetes operations

Mirantis announced significant updates to Lens Desktop that makes working with Kubernetes easier by simplifying operations, improving efficiency, and increasing productivity. Lens 2024 Early Access is now available to Lens users. Also, Lens adds ...

Proliferation of digital identities: increase in digital certificates

Digital identities are crucial in today's virtual landscape. For businesses, secure verification with digital certificates is essential. Trust is eroding, but automated certificate lifecycle management is a solution. The post Proliferation of ...

What is Identity Governance: 5 Steps to Build Your Framework

From financial records to employees’ personal details, almost all information nowadays is highly sensitive – and, therefore, highly valuable to attackers.  With 61% of data breaches involving credentials, it’s unsurprising that Identity ...

LastPass’ CIO vision for driving business strategy, innovation

Recently, LastPass appointed Asad Siddiqui as its CIO. He brings over two decades of experience leading startups and large technology organizations. It was the perfect time for Help Net Security to find out what’s next for Siddiqui in his ...

BSAM: Open-source methodology for Bluetooth security assessment

Many wireless headsets using Bluetooth technology have vulnerabilities that may allow malicious individuals to covertly listen in on private conversations, Tarlogic Security researchers have demonstrated last week at RootedCON in Madrid. ...

The most concerning risks for 2024 and beyond

In this Help Net Security video, Melissa Bischoping, Director, Endpoint Security Research at Tanium, discusses the most concerning risks for 2024 and beyond, from both an internal and external perspective. The post The most concerning risks for ...

Mitigating Risks in the Age of AI Agents

#TLDR AI agent technology, using Large Language Models, is transforming modern enterprises as it provides software and digital assistance. However it introduces significant security risks like data exposure and supply chain risks. This blog ...

Product showcase: How to track SaaS security best practices with Nudge Security

As technology adoption has shifted to be employee-led, IT and security teams are contending with an ever-expanding SaaS attack surface. At the same time, they are often spread thin, meaning they need ways to quickly identify and prioritize the ...

Keyloggers, spyware, and stealers dominate SMB malware detections

In 2023, 50% of malware detections for SMBs were keyloggers, spyware and stealers, malware that attackers use to steal data and credentials, according to Sophos. Attackers subsequently use this stolen information to gain unauthorized remote ...

Tweaks Stealer Targets Roblox Users Through YouTube and Discord

IntroductionZscaler’s ThreatLabz recently discovered a new campaign distributing an infostealer called Tweaks (aka Tweaker) that targets Roblox users. Attackers are exploiting popular platforms, like YouTube and Discord, to distribute Tweaks to ...

Patch Tuesday Update – March 2024

The post Patch Tuesday Update - March 2024 appeared first on Digital Defense. The post Patch Tuesday Update – March 2024 appeared first on Security Boulevard.