Application Security
Google introduces Mobile VRP bug bounty program for vulnerabilities in its mobile applications.
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
Red Hat rolls out a new suite of tools and services to help mitigate vulnerabilities across every stage of the modern software supply chain.
Application Security
Cloudflare introduces Secrets Store, a new solution to help developers and organizations securely store and manage secrets.
Application Security
Lineaje introduces SBOM360 Hub, an exchange allowing software producers, sellers, and consumers to publish, share and use SBOMs and related compliance artifacts.
Application Security
Former ByteDance executive said China government officials maintained access to all TikTok data, including information stored in the United States.
Application Security
OpenSSF has added four new members and is receiving $5 million in funding for its Alpha-Omega open source software security project.
Application Security
GitHub makes push protection generally available to warn developers whenever they include a secret in a commit.
Application Security
Open banking can be described as a perfect storm for cybersecurity. At one end, small startups with financial acumen but little or no security...
Application Security
CISA has opened proposed guidance for secure software development to public review and comment.
Application Security
Apiiro’s Risk Graph Explorer helps security teams to understand their application attack surface.
Application Security
GitHub this week introduced NPM package provenance and deployment protection rules and announced general availability of private vulnerability reporting.
Application Security
VMware warns of two critical vulnerabilities -- CVE-2023-20864 and CVE-2023-20865 -- in the VMware Aria Operations for Logs product.
Application Security
Boston-based Mobb has raised $5.4 million in seed funding for a product that automatically fixes vulnerabilities found in applications developed by customers.
Application Security
Adobe documents 56 security defects in multiple products, some serious enough to expose Windows and macOS users to code execution attacks.
Application Security
Consulting giant KPMG spins out a startup building technology to secure AI (artificial intelligence) applications and deployments.
Application Security
OpenSSL 1.1.1 will reach EoL in six months and users are instructed to either upgrade to a newer version or pay for extended support...
Application Security
Twitter sent a copyright notice to code hosting service GitHub to request the removal of a repository that contained Twitter source code.
Application Security
Backslash Security banks seed-stage capital to build new technology to identify and mitigate “toxic code flows” in cloud-native applications.
Application Security
Black Lantern Security introduces Badsecrets, an open source tool for identifying known or weak cryptographic secrets across multiple platforms.
Application Security
GitHub this week made secret scanning generally available and free for all public repositories.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)