Application Security
Evidence shows a SpotBugs token compromised in December 2024 was used in the March 2025 GitHub Actions supply chain attack.
Hi, what are you looking for?
SecurityWeek
Application Security
Software and AI supply chain transparency firm Manifest has raised $15 million in a Series A funding round led by Ensemble VC.
Application Security
Endor Labs has raised $93 million in a Series B funding round and announced a major expansion of its AppSec platform.
Application Security
Israeli runtime application security startups closes a $17 million Series A round led by Florida‑based SYN Ventures and YL Ventures.
Application Security
Hopper has emerged from stealth mode with a solution designed to help organizations manage open source software risk.
Application Security
Lemonade says the incident is not material and that its operations were not compromised, nor was its customer data targeted.
Application Security
GitHub security campaigns make it easier for developers and security teams to collaborate on fixing vulnerabilities in their applications.
Application Security
Google has integrated OSV-SCALIBR features into OSV-Scanner, its free vulnerability scanner for open source developers.
Application Security
The tj-actions/changed-files GitHub Action, which is used in 23,000 repositories, has been targeted in a supply chain attack.
Application Security
The financing was provided by S Capital and investor Mike Moritz, S32, Glilot Capital Partners, and several angel investors.
Application Security
The Open Source Security Foundation (OpenSSF) has created a structured set of security requirements for open source projects.
Application Security
San Francisco startup secures $8.5 million in seed funding led by Valley Capital Partners to tackle browser-based malware attacks.
CISO Strategy
This tension between hard-edged risk realism and breathless AI evangelism sets an unmistakable tone for a bellwether conference where 40,000-plus gather to do business.
Management & Strategy
Vulnerabilities
Data Breaches
Vulnerabilities
CISA urges immediate patching for recently disclosed Broadcom, Commvault, and Qualitia vulnerabilities exploited in the wild.
Management & Strategy
Cybersecurity Funding
Cloud Security
Vulnerabilities
