Application Security News and Articles


LogRhythm Promotes Joanne Wong to Interim Chief Marketing Officer

A pioneer of LogRhythm’s Asia Pacific operations, Joanne Wong’s appointment reinforces LogRhythm’s commitment to employee advancement through strategic internal promotions SINGAPORE, 5 March 2024 – LogRhythm, the company helping security ...

TrustCloud Welcomes Security and Compliance Expert Dixon Wright as VP GRC Transformation

Wright Joins TrustCloud as the company expands solutions for customers, partners and auditors, and invests in its own security program Boston MA — March 5, 2024 — TrustCloud™, the Trust Assurance platform using AI to upgrade GRC into a ...

Data Security Posture Management Should Focus on Securing the Data

Organizations use and store many types of data. Some of it is high value containing business-critical information or regulated data, such as PII (personally identifiable information). Other data is less sensitive and while important for your ...

Entro Streamlines Machine Identity Life Cycle Management

Entro has added a life cycle management capability to its namesake platform for discovering and managing machine identities. The post Entro Streamlines Machine Identity Life Cycle Management appeared first on Security Boulevard.

USENIX Security ’23 – Shawn Shan, Jenna Cryan, Emily Wenger, Haitao Zheng, Rana Hanocka, Ben Y. Zhao – Glaze: Protecting Artists From Style Mimicry By Text-to-Image Models

Distinguished Paper Award Winner and Co-Winner of the 2023 Internet Defense Prize Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open ...

Researchers Give Birth to the First GenAI Worm

It was bound to happen — researchers have created a 1st generation AI worm that can steal data, propagate malware, and spread via email. Ben Nassi from Cornell Tech, Stav Cohen from the Israel Institute of Technology, and Ron Bitton from ...

Daniel Stori’s ‘Obfuscated Code’

via the inimitable Daniel Stori at Turnoff.US. Permalink The post Daniel Stori’s ‘Obfuscated Code’ appeared first on Security Boulevard.

CISA Warns Phobos Ransomware Groups Attacking Critical Infrastructure

Phobos, a complex ransomware-as-a-service (RaaS) operation that has been around for five years and is includes multiple variants, continues to target a range of critical infrastructure in the United States, including education, healthcare, and ...

Demystifying the Maze: A Guide to Cyber Risk Quantification Methods

Cybersecurity is no longer just about firewalls and antivirus software. In today's data-driven world, effectively managing cybersecurity risk requires quantification: turning abstract threats into concrete numbers. This blog is your compass to ...

Critical vulnerabilities in TeamCity JetBrains fixed, release of technical details imminent, patch quickly! (CVE-2024-27198, CVE-2024-27199)

JetBrains has fixed two critical security vulnerabilities (CVE-2024-27198, CVE-2024-27199) affecting TeamCity On-Premises and is urging customers to patch them immediately. “Rapid7 originally identified and reported these vulnerabilities to ...

USENIX Security ’23 – Evangelos Bitsikas, Theodor Schnitzler, Christina Pöpper, Aanjhan Ranganathan – Freaky Leaky SMS: Extracting User Locations by Analyzing SMS Timings

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the ...

GUEST ESSAY: Essential cyber hygiene practices all charities must embrace to protect their donors

Charities and nonprofits are particularly vulnerable to cybersecurity threats, primarily because they maintain personal and financial data, which are highly valuable to criminals. Related: Hackers target UK charities Here are six tips for ...

HYPR Featured Launch Partner for YubiKey Bio Multi-Protocol Edition (Early Access)

Today Yubico announced the expansion of its YubiKey Bio Series to include multi-protocol keys that support biometric authentication for FIDO and Smart Card/PIV protocols. Like other YubiKey Bio Series, the new multi-protocol keys incorporate a ...

Response to CISA Advisory (AA24-060B): Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways

In response to the recently published CISA Advisory (AA24-060B) that disseminates observed threat actor activities, Indicators of Compromise (IOCs), and mitigations associated with ongoing incident response activities in connection with the ...

Cloudflare Defensive AI protects organizations against AI-enhanced attacks

Cloudflare announced Defensive AI, a personalized approach to securing organizations against the new wave of risks presented by emerging technology. Threat actors have begun to successfully test the limits of AI-enhanced attacks, using the power ...

BlackFog Wins teissAwards2024 for Best Threat Intelligence Technology

BlackFog Wins teissAwards2024 for Best Threat Intelligence Technology The post BlackFog Wins teissAwards2024 for Best Threat Intelligence Technology appeared first on Security Boulevard.

Cyolo PRO simplifies remote privileged access in OT environments

Cyolo launched Cyolo PRO (Privileged Remote Operations), a hybrid secure remote access solution for Operational Technology (OT). Developed specifically to enable safe operations of privileged users, Cyolo PRO is an advanced solution set to ...

DataDome Releases Go Server-Side Integration

Our new Go server-side integration is the latest in a range of 50+ integrations that ensure DataDome stops bad bots & fraud on any infrastructure. The post DataDome Releases Go Server-Side Integration appeared first on Security Boulevard.

GitHub push protection now on by default for public repositories

GitHub push protection – a security feature aimed at preventing secrets such as API keys or tokens getting accidentally leaked online – is being switched on by default for all public repositories. “This means that when a ...

Identiv ScrambleFactor provides privacy and security in restricted access environments

Identiv introduces ScrambleFactor, an addition to its high-security physical access control system (PACS) portfolio. The ScrambleFactor reader reimagines secure entry for the federal market with fingerprint biometrics and a LCD touchscreen ...