Application Security News and Articles


AI-Powered CIAM in Retail: The Next Frontier of Customer Identity

AI-powered CIAM is heralding a new era for customer identity and access management in the retail industry. By blending the strengths of machine learning with th The post AI-Powered CIAM in Retail: The Next Frontier of Customer Identity appeared ...

AI Security Map: Linking AI vulnerabilities to real-world impact

A single prompt injection in a customer-facing chatbot can leak sensitive data, damage trust, and draw regulatory scrutiny in hours. The technical breach is only the first step. The real risk comes from how quickly one weakness in an AI system ...

How compliance teams can turn AI risk into opportunity

AI is moving faster than regulation, and that creates opportunities and risks for compliance teams. While governments work on new rules, businesses cannot sit back and wait. In this Help Net Security interview, Matt Hillary, CISO at Drata, look ...

Network Visibility

Network visibility – the real-time ability to monitor and understand data flows and activity across your digital infrastructure—is more than a security tool; it’s your lens into detecting stealthy threats, optimizing performance, and making ...

Hottest cybersecurity open-source tools of the month: August 2025

This month’s roundup features exceptional open-source cybersecurity tools that are gaining attention for strengthening security across various environments. Buttercup: Open-source AI-driven system detects and patches vulnerabilities Buttercup ...

What CISOs can learn from Doppel’s new AI-driven social engineering simulation

Doppel has introduced a new product called Doppel Simulation, which expands its platform for defending against social engineering. The tool uses autonomous AI agents to create multi-channel simulations that mirror how attackers operate across ...

Social media apps that aggressively harvest user data

Both domestic and foreign technology companies collect vast amounts of Americans’ personal data through mobile applications, according to Incogni. Some apps leverage data for marketing and advertising purposes, feeding algorithms to calculate ...

UNC6395 and the Salesloft Drift Attack: Why Salesforce OAuth Integrations are a Growing Risk

A recent UNC6395 Salesloft Drift breach reveals Salesforce SaaS risks. Learn how to simplify breach detection, prevention, and visibility. The post UNC6395 and the Salesloft Drift Attack: Why Salesforce OAuth Integrations are a Growing Risk ...

Broadcom Extends Reach and Scope of Cybersecurity Portfolio

Broadcom today added a slew of cybersecurity updates, including a technology preview of an update to VMware vDefend that secures communications between artificial intelligence (AI) agents, promising to improve overall resiliency and automate ...

TDL003 | Breaking Barriers: IPv6 Adoption and DNS Transformation with Tommy Jensen

Summary This episode of the Defender’s Log features special guest Tommy Jensen, an internet technologist specializing in IPv6, Zero Trust, and standards. Jensen’s career path, from an AppleCare contractor to a key figure in advancing internet ...

Staying Ahead with Advanced NHI Detection?

Why is Advanced NHI Detection the Game Changer in Cybersecurity? Have you ever considered how Non-Human Identities (NHIs) impact your organization’s cybersecurity strategy? Protecting your business extends far beyond securing your employees’ ...

Is Your Secrets Vault Truly Impenetrable?

Unlocking the Real Value of Secrets Vault Security How much credence does your organization assign to secrets vault security? If you are operating in the cloud, the bulletproof protection of Non-Human Identities (NHIs) and their associated ...

BSidesSF 2025: State Of (Absolute) AppSec

Creator, Author and Presenter: Seth Law, Ariel Shin, Lakshmi Sudheer, Ken Johnson Our deep appreciation to Security BSides - San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. ...

Zero Trust Security Is a Mindset, Not a Technology

Zero Trust security isn’t something you buy. It’s something you do. Or more accurately, it’s something you commit to doing every day, across every part of your network. If that... The post Zero Trust Security Is a Mindset, Not a Technology ...

What is Security Automation? Why Your Business Can’t Afford to Ignore It

The post What is Security Automation? Why Your Business Can’t Afford to Ignore It appeared first on AI Security Automation. The post What is Security Automation? Why Your Business Can’t Afford to Ignore It appeared first on Security Boulevard.

Microsoft’s New AI Risk Assessment Framework – A Step Forward

  Microsoft recently introduced a new framework designed to assess the security of AI models. It’s always encouraging to see developers weaving cybersecurity considerations into the design and deployment of emerging, disruptive technologies. ...

CVE-2025-7775: Citrix NetScaler ADC and NetScaler Gateway Zero-Day Remote Code Execution Vulnerability Exploited in the Wild

Citrix has released patches to address a zero-day remote code execution vulnerability in NetScaler ADC and NetScaler Gateway that has been exploited. Organizations are urged to patch immediately. Background On August 26, Citrix published a ...

Zero Trust Microsegmentation with ColorTokens’ Progressive Segmentation for IT and OT Convergence in Industry 4.0

The convergence of Information Technology (IT) and Operational Technology (OT) in Industry 4.0 (allows for smart manufacturing and the creation of intelligent factories) environments, such as manufacturing, energy, and critical infrastructure, ...

Farmers Group Loses 1.111M PII Rows: It’s Salesforce Again

ShinyHunters Hunt Again: Scattered Spider claims another Salesforce instance—albeit three months ago. The post Farmers Group Loses 1.111M PII Rows: It’s Salesforce Again appeared first on Security Boulevard.

BSidesSF 2025: WHOIS Your Daddy: Tracking Iranian-Backed Cyber Operations With Passive DNS

Creator, Author and Presenter: Austin Northcutt Our deep appreciation to Security BSides - San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s ...