cybersecurity

Some days, it feels like every application and system out there is getting new functionality based on large language models (LLMs). As chatbots and other AI assistants get more and more access to data and software, it’s vital to understand the security risks involved—and prompt injections are considered the number one LLM threat. In his […]

As the saying goes, it’s tough to make predictions, especially about the future. And yet everyone tries—whether for planning or in the naive hope of not getting caught off-guard this time. While we do have our own modest tradition of end-of-year prediction posts on this blog, we look to the experts to help us make

In early December 2023, the U.S. Department of Health and Human Services published a concept paper outlining imperative new guidelines for healthcare organizations tackling cybersecurity. The publication comes on the tailwind of the Biden-Harris administration’s National Cybersecurity Strategy, building off of that momentum with a renewed focus on one of the nation’s most high-risk sectors.

It’s tempting to speak about security in binary terms: fixed or not fixed, patched or unpatched, secure or insecure. Reality, though, is more about shades of gray and probabilities than absolutes. It’s also about limited resources and endless prioritization—always with the awareness that the stakes are high and any security gaps you fail to address

Tool sprawl is a problem in all walks of the technology industry but can hit especially hard in cybersecurity. Losing track of the security toolset in your organization introduces inefficiencies that can hurt not only your security operations and incident response but also your application development and overall company performance. There are many examples of

Creating industry-leading products in application security goes beyond developing a powerful platform that delivers results without any noise—it also involves focusing on customer experiences that help build lasting relationships and add more value to our tools. Research from Salesforce proves the importance of customer experience: 73% of consumers expect vendors to understand their unique needs

In the military world, asymmetric warfare is where a large military force has to deal with far smaller and irregular opposition, like guerillas or other insurgents. So instead of facing off against a clearly visible enemy military unit, you could be surrounded by any number of smaller threats that remain hidden until an unexpected and

The security industry is abuzz after researchers published the paper LLM Agents Can Autonomously Hack Websites, describing how they successfully got LLM-backed bots to develop and perform attacks against websites in a test environment. As with any attention-grabbing “Skynet will take over soon” AI story, it’s a good idea to take a closer look at

The rise of application security testing tools in recent years has caused confusion for both buyers and vendors. For some, DAST has been wrongly reduced to a checklist item, prioritizing cost over quality. This trend is increasing the risk for organizations, potentially unbeknownst to security leaders. It’s time to differentiate between business-critical DAST and superficial

The rise of application security testing tools in recent years has led to significant confusion. For some buyers and vendors, DAST has been mistakenly reduced to a mere checklist item with a greater emphasis on affordability rather than quality. This rush towards cost-cutting measures is creating risks in organizations that security leaders may not be