Application Security News and Articles


FileCloud expands data governance and compliance tools

FileCloud announced several new product advancements to help customers meet enterprise data protection requirements. “FileCloud makes it simple for enterprise organizations to meet their content governance, privacy and compliance ...

Defense Unicorns raises $35 million to enhance national security through open-source software

Defense Unicorns has raised a $35 million Series A funding round led by Sapphire Ventures and Ansa Capital. Founded by early leaders of the Department of Defense’s software factories – a grassroots Air Force initiative turned mandate to ...

What is Micro Breaching?

What is micro breaching, and how can organizations defend themselves? Not all attacks make headlines with massive data leaks or crippling ransomware attack impacts. Enter the realm of “micro breaching,” a subtle yet potent form of targeted ...

VMware patches critical flaws in ESXi, Workstation, Fusion and Cloud Foundation

VMware has fixed four vulnerabilities (CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255) in ESXi, Workstation, Fusion and Cloud Foundation, some of which could allow attackers to escape the sandbox and execute code on the host ...

5 Tips for Securing Your Active Directory

Active Directory (AD) is Microsoft’s directory server. Ubiquitous across Fortune 500 and small businesses alike, AD is the software that connects on-prem servers, workstations, users, and networks. AD’s cloud-based counterpart, Azure, ...

Veeam and Microsoft develop AI solutions aimed at improving data protection

Veeam Software announced an extended, five-year strategic partnership with Microsoft to innovate new solutions for protecting customers by integrating Veeam’s product family and Microsoft Copilot and AI services. In addition to joint ...

Regula updates Document Reader SDK to reduce the risk of identity theft

Liveness detection, both for individuals and their IDs, has become a cornerstone for a secure customer onboarding process. It is especially crucial in remote scenarios where document submission and verification are done via the Internet. With 65% ...

Skybox 13.2 empowers organizations to identify and remediate vulnerabilities

Skybox Security announced Skybox 13.2, introducing enhancements to its Vulnerability and Threat Management solution. These updates mark a significant milestone in vulnerability prioritization and attack surface management, empowering ...

How Public AI Can Strengthen Democracy

With the world’s focus turning to misinformation,  manipulation, and outright propaganda ahead of the 2024 U.S. presidential election, we know that democracy has an AI problem. But we’re learning that AI has a democracy problem, too. Both ...

Why Ignoring Vulnerability Prioritization is a CISO’s Worst Nightmare?

As a CISO, you’re constantly bombarded with security threats, vulnerabilities, and a never-ending to-do list. But amidst the chaos, one crucial task often gets pushed aside: vulnerability prioritization. This might... The post Why Ignoring ...

Web-based PLC malware: A new potential threat to critical infrastructure

A group of researchers from Georgia Tech’s College of Engineering have developed web-based programmable logic controller (PLC) malware able to target most PLCs produced by major manufacturers. “Our Web-Based (WB) PLC malware resides ...

Canva’s Kane Narraway on Building a Zero Trust MVP

Season 3, Episode 3: Canva’s Head of Enterprise Security, Kane Narraway, discusses how to deploy a Zero Trust strategy in under a year. The post Canva’s Kane Narraway on Building a Zero Trust MVP appeared first on Security Boulevard.

What Is A Cyber Incident Response Policy?

Imagine your school district experiences a cybersecurity event, such as a data breach. Where do you begin? Who do you contact? How do you respond? These questions, among others, are essential to protecting sensitive data. But, if your security ...

Paramount Defenses Gold Finger 8.0 accurately assess and lockdown access in Active Directory

Paramount Defenses released Gold Finger version 8.0 for Microsoft Active Directory. From America to Israel, from the European Union to Saudi Arabia and from India to Australia, Active Directory is the foundation of cyber security at thousands of ...

The Future of Kubernetes Network Policy

Introduction In the ever-changing world of Kubernetes security, it’s crucial to stay ahead of threats while maintaining operational The post The Future of Kubernetes Network Policy appeared first on ARMO. The post The Future of Kubernetes ...

New SSH-Snake Worm-Like Tool Threatens Network Security

The Sysdig Threat Research Team (TRT) discovered that a threat actor is leveraging an open-source network mapping tool called SSH-Snake for malicious activities. This tool utilizes SSH credentials found on the compromised systems to propagate ...

Streamlining KVM Operations: A Comprehensive Cheat Sheet

KVM offers several methods to manage virtual machines, including command-line tools and graphical user interfaces (GUIs) All logs related to KVM virtual machines are stored in the /var/log/libvirt directory QEMUCare is used for automated ...

Say Goodbye to Manual AppSec Overhead: Unleashing the Power OX’s Automated No-Code Workflows

Last month, we unveiled our Active ASPM Platform which includes our newest feature, no-code automation workflows. OX has established itself as a frontrunner in automating the discovery, analysis, and prioritization of security risks throughout ...

Russian Hackers Target Ukraine Via A Disinformation Campaign

Disinformation campaigns play an important role in cyber warfare, and this is exactly what Russian hackers target Ukraine. After waging war on Ukraine on land, Russia is attacking the East European country online as well. One example of this is ...

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

Paris, France, March 7th, 2024, Cyberwire Company Open Sources FHE Libraries to Build Privacy-Preserving Blockchain and AI Applications for the First Time. Investment secured to bring Fully Homomorphic Encryption (FHE) to the fore, giving ...