Laura French headshot

<body>
Applications and software supply chains are constantly changing. So is the threat landscape.



Vulnerabilities, misconfigurations, exposed secrets, design flaws, sensitive data exposure, etc., will always be inevitable. That’s why application security remains such a vibrant market and why application security teams have a host of tools (SAST, SCA, DAST, IaC security, etc.) and processes (security questionnaires, pen tests, threat models, etc.) at their disposal. But with today’s pace of change and the complexity of modern applications, those solutions are noisy, resource-intensive, and inefficient.



That’s where application security posture management (ASPM) comes into play, enabling application security teams minimize noisy alert backlogs, reduce remediation times, streamline processes, and proactively reduce application risk.



Join us for this expert-led session where we’ll dive deep into the emerging world of ASPM, including: • The evolution of the ASPM market and the challenges it solves. • How ASPM benefits different teams and functions. • What core components to look for in an ASPM solution. • How to build a risk-based AppSec program and operationalize ASPM.



Sponsored by



<figure class="wp-block-image size-full is-resized"><img loading="lazy" decoding="async" src="https://files.cyberriskalliance.com/wp-content/uploads/2023/10/Apiiro.jpg" alt="" class="wp-image-663931" style="width:307px;height:86px" width="307" height="86" srcset="https://image-optimizer.cyberriskalliance.com/wRo7xVcZWQkKQxjwzjvqQdluY0A=/fit-in/300x84/smart/files.cyberriskalliance.com/wp-content/uploads/2023/10/Apiiro.jpg 300w, https://files.cyberriskalliance.com/wp-content/uploads/2023/10/Apiiro.jpg 600w" sizes="auto, (max-width: 307px) 100vw, 307px" /></figure>
</body>

Supply chain

Cybercast

Archived: Optimizing AppSec: A Deep Dive into ASPM’s Risk-Based Approach

Laura French

gitlab_AdobeStock_905940070_Editorial_Use_Only

Vulnerability Management

Patch/Configuration Management

News

Max severity GitLab path traversal flaw under active reconnaissance

anthropic_AdobeStock_2177063444_Editorial_Use_Only

AI/ML

Application security

Anthropic finds 4th real-world attack by Claude agent, details models’ ‘biased reasoning’

3D rendering of an AI agentic workflow automation software interface with connected nodes and data triggers.

3D rendering of an AI agentic workflow automation software inter

PaperCut MF/NG flaws attacked with hundreds of AI agents

bear_AdobeStock_2085246555

Identity

Phishing

BigBear 2.0 phishing campaign compromises MFA-protected Microsoft accounts

unicode_AdobeStock_1808335831

Email security

ASCII smuggling challenges email phishing filters, Microsoft warns

envelope_email_AdobeStock_475150882

‘Empty envelope’ email attacks target company leaders

grafana_AdobeStock_2031073952_Editorial_Use_Only

Grafana fixes critical SSRF flaw affecting Grafana MCP servers

powershell_AdobeStock_640147284 (1)

Threat Management

Threat Intelligence

Microsoft identifies ‘TerminalFix’ campaign spreading Python reverse tunnel

infostealer_AdobeStock_1554432124

Malware

RevStealer malware spread through fake Claude Opus 5 download

patch_AdobeStock_28985448

PaperCut issues emergency patches for actively exploited critical vulnerability