Application Security
Canadian data security startup Qohash this week announced it raised CAD 8 million (approximately USD $6.3 million) in Series A funding. The financing was...
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
The ongoing controversies surrounding TikTok hit a new gear on Thursday with a bombshell report accusing the Chinese company of spying on millions of...
Application Security
German software maker SAP has published 10 advisories to document flaws and fixes for a range of serious security vulnerabilities.
Application Security
Microsoft on Tuesday released the first batch of security patches for 2021 with fixes for 83 documented security vulnerabilities, including a "critical" bug in...
Application Security
At the virtual Consumer Electronics Show (CES) on Monday, chipmaker Intel announced CPU-based ransomware detection capabilities have been fitted directly into the Intel vPro...
Application Security
F5 Networks (NASDAQ: FFIV) announced on Thursday that it has agreed to acquire Volterra, a Santa Clara, Calif.-based provider of tools that help customers...
Application Security
Lacework, a five-year-old cybersecurity company that automates security across enterprise cloud deployments, has reached unicorn status with the closing of a $525 million round...
Application Security
Business communications platform Slack is scrambling to recover from an ongoing outage that is proving disruptive to cybersecurity response teams around the world.
Application Security
Palo-Alto, California-based application intelligence startup Bionic on Thursday announced that it has emerged from stealth mode with $17 million in seed and Series A...
Application Security
The Open Source Security Foundation (OpenSSF) announced on Wednesday at the Black Hat Europe conference the availability of an open source tool designed for...
Application Security
The Apache Software Foundation has released a security update for Struts 2, to address what is described as a “possible remote code execution” flaw...
Application Security
API security platform provider Salt Security announced on Tuesday that it has raised $30 million in Series B funding led by Sequoia Capital, with...
Application Security
The OpenSSL Project today warned that the widely deployed TLS/SSL toolkit is vulnerable to a serious security flaw that exposes users to denial-of-service attacks.
Application Security
Canonical, the publisher of the Ubuntu Linux distribution, announced on Tuesday that it has made available long-term support (LTS) container images on Docker Hub,...
Application Security
build.security, an Israel-based company that has been developing an authorization policy management platform, emerged from stealth mode on Wednesday with $6 million in seed...
Application Security
Zoom over the weekend rolled out two new features that are aimed at tackling meeting disruptions.
Application Security
Enso Security, a company that claims to have built the first application security posture management (ASPM) platform, emerged from stealth mode on Wednesday with...
Application Security
DevSecOps and risk management solutions provider apiiro on Tuesday emerged from stealth mode with $35 million in funding.
Application Security
Cloudflare on Monday announced the launch of a new zero trust platform that can help organizations address the networing and security challenges associated with...
Application Security
GitHub on Wednesday announced that its code scanning feature, which is designed to enable developers to easily identify vulnerabilities in their products before they...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)