Application Security
Agentic AI can be expensive to use, causing further and unpredictable pressure on tight budgets.
Hi, what are you looking for?
SecurityWeek
Application Security
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
Application Security
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Application Security
The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.
Application Security
A long-lived NPM access token was used to bypass the GitHub Actions OIDC-based CI/CD publishing workflow and push backdoored package versions.
Application Security
After validating stolen credentials using TruffleHog, the hacking group started AWS services enumeration and lateral movement activities.
Application Security
The startup has built an edge security management (ESM) platform, an AI engine atop the entire edge security stack.
Application Security
The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.
Application Security
Raven’s platform observes applications at runtime to detect anomalous behavior and prevent cyberattacks.
Application Security
New research shows attackers increasingly abusing APIs at machine speed as AI-driven systems widen exposure and amplify impact.
Application Security
The startup relies on AI agents to identify software vulnerabilities and validate them before reporting.
Application Security
The company will use the investment to expand its R&D team and operations, deepen platform capabilities, and scale go-to-market presence.
Application Security
VS Code-integrated configuration files are automatically executed in Codespaces when the user opens a repository or pull request.
Application Security
Rein aims to close the production visibility gap by stopping attacks inside the application runtime.
Application Security
API cybersecurity will be a ping pong ball, battered between the rackets of AI-assisted attackers and AI-assisted defenders.
Application Security
Vibe coding generates a curate’s egg program: good in parts, but the bad parts affect the whole program.
Application Security
The developer security company has raised a total of more than $84 million in funding.
Application Security
The worm exposed Trust Wallet’s Developer GitHub secrets, allowing attackers to publish a backdoor extension and steal funds from 2,520 wallets.
Application Security
XSS remains the top software weakness, followed by SQL injection and CSRF. Buffer overflow issues and improper access control make it to top 25.
Application Security
A researcher has pointed out that only instances using a newer feature are impacted by CVE-2025-55182.
Application Security
The cybersecurity startup embeds AI agents into widely used tools to identify design flaws and eliminate them early.
Application Security
Learn why legacy approaches fail to stop modern API threats and show how dedicated API security delivers the visibility, protection, and automation needed to...
Application Security
A financially motivated threat actor automated the package publishing process in a coordinated tea.xyz token farming campaign.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)