Application Security
Nearly 40 cybersecurity-related mergers and acquisitions were announced in July 2021.
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
The Open Source Security Foundation (OpenSSF), the cross-industry forum focused on improving open source software security, has expanded its member list with the addition...
Application Security
For the last 15 years, researchers have produced an annual State of Application Security report. But in the last 18 pandemic driven months, they...
Application Security
Security researchers at Guardicore Labs are sharing details of a critical vulnerability in Hyper-V that Microsoft patched in May 2021.
Application Security
Google this week announced a series of updates to its Google Play policies that are meant to improve overall user privacy and security and...
Application Security
The U.S. government and its allies are pleading with defenders to pay attention to gaping holes in perimeter-type devices, warning that advanced threat actors...
Application Security
Google says it paid out more than $29 million in bug bounty rewards for vulnerability reports received over the past 10 years.
Application Security
Apple on Monday released a major security update with fixes for a security defect the company says “may have been actively exploited” to plant...
Application Security
Mozilla has completely removed support for the File Transfer Protocol (FTP) from the latest release of its flagship Firefox web browser.
Application Security
GitLab last week announced the release of a new open source tool designed to help software developers identify malicious code in their projects’ dependencies.
Application Security
Threat actors are abusing Argo Workflows to target Kubernetes deployments and deploy crypto-miners, according to a warning from security vendor Intezer.
Application Security
European bug bounty and vulnerability disclosure policy platform YesWeHack this week announced the closing of a €16 million ($18.8 million) round of venture capital...
Application Security
Google Cloud this week announced a new set of services aimed at help federal, state, and local government organizations in the United States to...
Application Security
After years of mostly sitting on the sidelines, Microsoft is starting to be aggressive with cybersecurity acquisitions.The world’s largest software company said Wednesday it...
Application Security
Google on Tuesday announced the release of Chrome 92 in the stable channel, with 35 security patches and with various other security improvements, such...
Application Security
Google announced recently that it has expanded the capabilities of Cloud Armor, a service that provides distributed denial of service (DDoS) protections and a...
Application Security
Microsoft on Monday announced that it secured a court order to take down numerous malicious homoglyph domains that a criminal group registered to impersonate...
Application Security
Juniper Networks has shipped security patches to cover numerous vulnerabilities across its product portfolio, including a series of critical bugs in third-party software used...
Application Security
Microsoft’s problems with security defects in the Windows Print Spooler utility are getting worse by the week.
Application Security
For the seventh time this year, Google is dealing with zero-day attacks targeting users of its flagship Chrome web browser.The search advertising giant released...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)