Application Security News and Articles


Generative AI Governance: Balancing Innovation and Ethical Responsibility

As artificial intelligence (AI) continues its march toward realization, the realm of “possible” expands with each passing day. Breakthroughs in machine learning, advanced computing, and cognitive reasoning are revolutionizing industries and ...

Today’s biggest AI security challenges

98% of companies surveyed view some of their AI models as vital for business success, and 77% have experienced breaches in their AI systems over the past year, according to HiddenLayer. The report surveyed 150 IT security and data science leaders ...

Tazama: Open-source real-time fraud management

Tazama is an open-source platform focused on improving fraud management within digital payment systems. Tazama marks a substantial transformation in the approach to financial monitoring and compliance worldwide. Previously, the financial sector ...

Major shifts in identity, ransomware, and critical infrastructure threat trends

In this Help Net Security video, Michelle Alvarez, Strategic Threat Analysis Manager at IBM X-Force, discusses the 2024 X-Force Threat Intelligence Index, revealing top threats and trends the team observed last year across its global engagements ...

API Security in 2024: Imperva Report Uncovers Rising Threats and the Urgent Need for Action

API Security in 2024: Imperva Report Uncovers Rising Threats and the Urgent Need for Action madhav Thu, 03/07/2024 - 04:56 APIs (Application Programming Interfaces) are the backbone of modern digital innovation. They drive seamless connectivity, ...

78% of MSPs identify cybersecurity as prime IT challenge

Cybersecurity remained a top priority and an area of growth for MSPs, with 73% saying it’s a top revenue driver for their business, according to Kaseya. Ongoing cyberattack threats impact MSPs The threat of cyberattacks continues to weigh ...

A cybercriminal is sentenced, will it make a difference?

The darknet is home to many underground hacking forums in which cybercriminals convene, freely sharing stories, tactics, success stories and failures. Their unguarded discussions allow our team to peek into the politics and ethics behind recent ...

NSFOCUS NIPS Brute-Force Protection

A brute-force attack involves systematically attempting every possible combination of letters, numbers, and symbols to discover a password. Websites requiring user authentication are susceptible to such attacks. Attackers may begin with ...

How to Adopt Phishing-Resistant MFA

In a recent blog post, we discussed what phishing-resistant multi-factor authentication (MFA) is and why... The post How to Adopt Phishing-Resistant MFA appeared first on Axiad. The post How to Adopt Phishing-Resistant MFA appeared first on ...

How Does Identity Theft Affect Your Business?

Learn what identity theft is, how identity theft affects your business and workforce, and proactive risk intelligence strategies that can mitigate these threats. The post How Does Identity Theft Affect Your Business? appeared first on Security ...

What Is Domain Monitoring and Why Do I Need It?

Have you ever worried about your website domain’s well-being? If not, you definitely should. The post What Is Domain Monitoring and Why Do I Need It? appeared first on Security Boulevard.

Healthcare Groups Push for Help in Wake of Ransomware Attack on Change

Healthcare providers groups are ramping up pressure on the federal government, lawmakers, and UnitedHealth Group to help hospitals, healthcare clinics, and pharmacies that have gone more than two weeks without payments following the devastating ...

Protecting Rugged Gear from UEFI Threats and Secure Boot Vulnerabilities

One time while attending a conference and getting ready to hop in an Uber (although it may have been a cab at the time), I was passing my luggage to be loaded in the vehicle. Perhaps it was the Las Vegas heat, coupled with being exhausted after a ...

USENIX Security ’23 – Wai Man Si, Michael Backes, and Yang Zhang, Ahmed Salem – Two-in-One: A Model Hijacking Attack Against Text Generation Models

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

Moving Beyond Materiality Disclosures for the SEC Cyber Rules

Shining light on cyber risk management program disclosure requirements We’ve discussed materiality extensively in relation to the SEC’s new cybersecurity disclosure rules, but it’s time we address other crucial aspects. Read More The post ...

How NIST CSF 2.0 Can Help Schools

Schools and school districts in the US are under continuous threat from cyber attacks, including... The post How NIST CSF 2.0 Can Help Schools appeared first on Security Boulevard.

Emulating the Sabotage-Focused Russian Adversary Sandworm

AttackIQ has released a new assessment template that emulates the various Post-Compromise Tactics, Techniques, and Procedures (TTPs) associated with the politically motivated Russian adversary Sandworm. The post Emulating the Sabotage-Focused ...

Daniel Stori’s ‘Shutdown!’

via the inimitable Daniel Stori at Turnoff.US. Permalink The post Daniel Stori’s ‘Shutdown!’ appeared first on Security Boulevard.

When “Good Enough” Automation Leaves you with “Good Luck With That”

The post When “Good Enough” Automation Leaves you with “Good Luck With That” appeared first on AI Enabled Security Automation. The post When “Good Enough” Automation Leaves you with “Good Luck With That” appeared first on Security ...

CVE-2024-1403: Progress OpenEdge Authentication Bypass Deep-Dive

On February 27, 2024, Progress released a security advisory for OpenEdge, their application development and deployment platform suite. The advisory details that there exists an authentication bypass vulnerability which effects […] The post ...