Application Security News and Articles


Tonic.ai product updates: May 2025

Tonic.ai acquires Fabricate, Tonic Textual adds Audio Synthesis, + Okta SSO arrives on Structural Cloud and Textual Cloud! The post Tonic.ai product updates: May 2025 appeared first on Security Boulevard.

Driving Innovation Through Secure NHIs

Why Is Secure NHI Management Crucial for Innovation? What if your organization could unlock the full potential of its cloud environment, ensuring robust security while also spurring on relentless innovation? That’s exactly what effective ...

Feel Empowered by Enhanced NHI Management

Can NHI Management Empower Your Cybersecurity Strategy? One concept is repeatedly surfacing as a strategic necessity – Non-Human Identities (NHIs) management. NHI management is a robust methodology designed to secure machine identities, ...

Is Your Data Truly Protected with Current NHIs?

Are Traditional Security Measures Enough for Data Protection? Most organizations have stringent security measures in place, but the question remains: are these enough to deliver robust data protection? The scope of security threats is also ...

Application-Layer Visibility and Security | Contrast ADR vs Traditional Tools | Contrast Security

Imagine you're a lifeguard at a beach, but you're only allowed to watch from a helicopter or from a camera mounted on the boardwalk. Sure, you’ll see some splashing — maybe even a shark fin or two — but if something happens beneath the ...

BSidesLV24 – Ground Truth – AI In The Human Loop: GenAI In Security Service Delivery

Author/Presenter: Preeti Ravindra Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; ...

The organizational structure of ransomware threat actor groups is evolving before our eyes

The Ransomware-as-a-service (RaaS) model has not recovered from law enforcement disruption, and the entrance of novice actors along with non-Russian state-linked cybercriminals has led to uncertain outcomes for victims. The post The ...

Kubernetes Resource Optimization & Best Practices with Goldilocks

Kubernetes is now the industry standard for orchestrating containerized workloads, but efficient resource management remains a challenge for many organizations. It’s important to get right though! Over-provisioning leads to wasted cloud spend, ...

The Rise of AI-Driven Cyberattacks: Accelerated Threats Demand Predictive and Real-Time Defenses 

Artificial intelligence (AI) is transforming industries, but it’s also empowering cybercriminals to launch sophisticated, high-speed cyberattacks. AI-driven attacks, particularly those orchestrated by autonomous AI agents, operate at an ...

Vulnerability Management: A Race Against Time & Complexity

The post Vulnerability Management: A Race Against Time & Complexity appeared first on AI Security Automation. The post Vulnerability Management: A Race Against Time & Complexity appeared first on Security Boulevard.

Report Exposes Soft Security Underbelly of Mobile Computing

Zimperium, this week during the 2025 RSA Conference, shared an analysis of mobile computing environments that finds more than 60% of iOS and 34% of Android apps lack basic code protection, with nearly 60% of iOS and 43% of Android apps also ...

BSidesLV24 – Ground Truth – I Won’t Allow My Child To Have A Smartphone: Why Smart Parents Make Not So Smart Children

Authors/Presenters: Arun Vishwanath Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; ...

Mobile and third-party risk: How legacy testing leaves you exposed

Risks to software supply chains from mobile applications are increasing, largely due to a lack of deeper visibility into their codebase, a new study has found.  The post Mobile and third-party risk: How legacy testing leaves you exposed appeared ...

MY TAKE: RSAC 2025 – Conversing with vendors hanging out in the Marriott Marquis mezzanine

SAN FRANCISCO — Sometimes, the best insights come not from the keynote stage, but from the hotel lobby. Related: RSAC 2025 top takeaways In between sessions at RSAC 2025, I slipped over to the Marriott lobby and held quick, … (more…) The ...

Best 10 SOC Tools for Security Operations and Threat Detection

In today’s digital world, cybersecurity is as much about smart tools as it is about the people who use them. Modern Security Operations Centers (SOCs) are at the heart of an organization’s defense.  But behind the shiny dashboards and ...

Canadian Electric Utility Hit by Cyberattack

Nova Scotia Power and Emera are responding to a cybersecurity incident that impacted IT systems and networks.  The post Canadian Electric Utility Hit by Cyberattack appeared first on SecurityWeek.

Critical Vulnerabilities and Top CVEs of April 2025

Some vulnerabilities make headlines. Others quietly become someone’s worst day at work. The critical CVEs 2025 that surfaced in April weren’t just technical flaws, they were real entry points. Into... The post Critical Vulnerabilities and Top ...

Photos: RSAC 2025, part 2

RSAC 2025 Conference is taking place at the Moscone Center in San Francisco. Help Net Security is on-site, and this gallery takes you inside the event. The first gallery is here. The featured vendors are: Tines, Thales, Sumo Logic, N-able, ...

Year of the Twin Dragons: Developers Must Slay the Complexity and Security Issues of AI Coding Tools

The advantages AI tools deliver in speed and efficiency are impossible for developers to resist. But the complexity and risk created by AI-generated code can’t be ignored. The post Year of the Twin Dragons: Developers Must Slay the Complexity ...

More Details Come to Light on Commvault Vulnerability Exploitation

Commvault has shared indicators of compromise associated with the exploitation of a vulnerability by state-sponsored hackers. The post More Details Come to Light on Commvault Vulnerability Exploitation appeared first on SecurityWeek.