Application Security News and Articles
ESET Research has discovered evidence of collaboration between the Gamaredon and Turla threat groups. Both groups are linked to Russia’s primary intelligence agency, the FSB, and were found working in tandem to target high-profile organizations ...
Cyber-physical systems are getting harder to protect as the business landscape keeps shifting. Economic pressures, supply chain changes, and new regulations are creating more openings for attackers while complicating how organizations manage ...
In this Help Net Security video, Matt Cooper, Director of Governance, Risk, and Compliance at Vanta, discusses the EU’s Digital Operational Resilience Act (DORA) and its effects six months after it went into effect. DORA is the first EU-wide ...
Security teams rely on threat reports to understand what’s out there and to keep their organizations safe. But a new report shows that these reports might only reveal part of the story. Hidden malware variants are quietly slipping past ...
Here’s a look at the most interesting products from the past week, featuring releases from Absolute Security, Catchpoint, Nagomi Security, Neon Cyber, and QuSecure. Absolute Security Rehydrate restores compromised endpoints Rehydrate delivers ...
Key Takeaways Artificial intelligence is being adopted at a remarkable pace. Enterprises now use AI in customer service, fraud detection, logistics, healthcare diagnostics, and dozens of other areas. With this adoption comes a new category of ...
Palo Alto, Calif., Sept. 18, 2025, CyberNewswire: SquareX first discovered and disclosed Last Mile Reassembly attacks at DEF CON 32 last year, warning the security community of 20+ attacks that allow attackers to bypass all major SASE/SSE ...
SOC automation breaks in the messy middle of triage and investigation. Learn how Morpheus AI fixes it with transparent, adaptive playbooks.
The post The Messy Middle: Where SOC Automation Breaks (and How Morpheus AI Fixes It) appeared first on D3 ...
Phishing remains one of the most successful cyberattack techniques today. Despite decades of awareness campaigns, it continues to deceive individuals and organizations into giving away sensitive information, from login credentials to financial ...
Creators, Authors and Presenters: Silk Interviews Members ShellPhish
Our sincere appreciation to DEF CON, and the Creators/Presenters/Authors for publishing their timely DEF CON 33 outstanding content. Originating from the conference's events ...
Get details on this supply chain attack.
The post “Shai-Hulud” npm Attack: What You Need to Know appeared first on Security Boulevard.
Discover how the best bank reconciliation software simplifies audits, ensures compliance, reduces errors, and strengthens financial transparency.
The post How the Best Bank Reconciliation Software Simplifies Audits and Strengthens Compliance ...
September marks National Insider Threat Awareness Month, a reminder that some of the biggest security risks to an organization do not come from shadowy external hackers, but from the people already inside the walls. Employees, contractors, and ...
CrowdStrike unveiled its Falcon Agentic Security Platform at Fal.Con 2025, ushering in the “agentic era of cybersecurity.” With AI-powered agents, unified data governance, and threat intelligence, the platform aims to counter adversaries ...
Let's dive in and learn about his drive to expand Sonar's presence in Latin America, what a typical day looks like, and what fuels his passion both in and out of the office.
The post Day in the Life: Expanding Sonar into LATAM as a Country ...
For an extended period, cybersecurity has been characterized by the isolated operation of sophisticated tools. While endpoint protection, identity solutions, and network security each fulfill their respective functions, a critical vulnerability ...
How Morpheus brings trusted cybersecurity frameworks to life through automation and intelligence.
The post Operationalizing NIST and MITRE with Autonomous SecOps appeared first on D3 Security.
The post Operationalizing NIST and MITRE with ...
4 min readA practical walkthrough of the Auth0 settings and tweaks you’ll need to get an MCP server working smoothly with real-world clients like Claude.
The post Configuring an MCP Server with Auth0 as the Authorization Server appeared first ...
Check out the latest enhancements to our CNAPP product, including a more intuitive user experience with customizable dashboards, and stronger workload protection and data security. These improvements are designed to help you personalize workflows ...
The post The Quality Era: How CISA’s Roadmap Reflects Urgency for Modern Cybersecurity appeared first on AI Security Automation.
The post The Quality Era: How CISA’s Roadmap Reflects Urgency for Modern Cybersecurity appeared first on ...