Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

OWASP Announces BLADE Business Logic Attack Framework to Give Enterprises Better Tools to Fight Sophisticated Bots

Update to attack framework announced to coincide with recognition as an industry standard The Open Worldwide Application Security Project (OWASP) announced today that the Business Logic Attack Definition Framework (BLADE Framework) has become The OWASP BLADE Framework Project. The name change reflects the acceptance of the attack framework as an OWASP project and recognition of the framework as an industry standard.

How New Bot Detection Tools are Using Behavior Analysis to Target Scammers

Not all bots are built equal. Your online life largely relies on friendly, harmless bots that, for example, help power search engines, run social platforms, monitor sites, and much more. However, there are also bad bots out there, built specifically to cause damage and chaos. These online pests include credential stuffing bots designed to take over your user accounts, scraper bots attempting to steal your publicly available information, and scalping bots trying to grab your inventory for resale. It really is a jungle out there.

AI's Content Gold Rush: Who's Getting Paid, Who's Getting Scraped, and How Businesses Can Turn Content into Revenue

The AI boom is creating a new content economy – one where savvy content owners are striking multi-million-dollar licensing deals, while others are being automatically scraped by bots to train AI models for free. It’s impossible not to have noticed the biggest names in AI, including OpenAI, Google, Anthropic, Perplexity and more, at the center of an argument about ethical content scraping.

An early look at cryptographic watermarks for AI-generated content

Generative AI is reshaping many aspects of our lives, from how we work and learn, to how we play and interact. Given that it's Security Week, it's a good time to think about some of the unintended consequences of this information revolution and the role that we play in bringing them about.

X-Ray Specs: A Look Inside Trading Card Scalper Innovation

The perfect conditions for both pre-planned and opportunistic scalper attacks are quite simple: limited availability and high demand. The trading card culture – think everything from Pokémon and Magic the Gathering to Panini or Topps football and baseball cards – fuels this fire, with first print editions and special editions held to a higher value than reprints.

Cato CTRL Threat Research: Ballista - New IoT Botnet Targeting Thousands of TP-Link Archer Routers

Over the years, major IoT botnets like Mirai and Mozi have proven how easily routers can be exploited and threat actors have taken note. Two key issues have played in their favor: the fact that users rarely deploy new firmware to their routers, coupled with the lack of regard for security by router vendors. As a result, router vulnerabilities may persist in the wild for much longer than initially expected, even after patches are published publicly.

Unmasking the Hidden Threat: How Unsecured IoT Devices Fueled the Eleven11bot Botnet-and How to Stop the Next Attack

The recent emergence of the Eleven11bot botnet which has compromised over 86,000 Internet of Things (IoT) devices, underscores the critical vulnerabilities inherent in unmanaged IoT ecosystems. This botnet, reported by The Shadowserver Foundation, primarily targets devices such as security cameras and network video recorders, leveraging them to execute large-scale DDoS attacks against sectors including telecommunications and online gaming platforms.