Application Security
Microsoft this week announced that Safe Documents and Application Guard, two security capabilities introduced last fall, are now available to more of its Office...
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
A bug in the Google Takeout download service has resulted in some users’ videos being inadvertently shared with other people.
Application Security
After observing an increase in the number of fraudulent transactions, Google over the weekend announced that it halted the publishing of paid items to...
Application Security
My Apple News app recently served up some targeted marketing that really hit home. There before me was the opportunity to purchase a limited-edition...
Application Security
Facebook, Samsung and Ring have unveiled new or improved privacy and security tools at the 2020 CES consumer electronics show taking place this week...
Application Security
F5 Networks announced on Thursday that it has agreed to acquire privately held Shape Security for approximately $1 billion in cash.
Application Security
Google this week announced plans to turn off access to G Suite account data for less secure apps (LSAs), as they represent a potential...
Application Security
Google on Monday announced that it has released the source code of a tool designed to help developers identify vulnerabilities related to file access.
Application Security
Cisco Talos this week released a new tool designed to make it easier to create complex applications that have lengthy dependency chains.Called Mussels, the...
Application Security
Google has shared some data on the adoption of Transport Layer Security (TLS) by Android applications and it seems that significant progress has been...
Application Security
Years ago, I worked on a consulting project for a large financial services company, which had recently invested $20 million into their core offering,...
Application Security
Google this week announced a partnership with several security solutions providers, aimed at fighting bad applications in the Android ecosystem.
Application Security
Arizona transportation officials announced enhanced security measures Thursday for a state website that identity thieves exploited to get dozens of duplicate driver's licenses.The Arizona...
Application Security
In the old world, applications generally consisted of a web server, an app server and a database. Traffic went from router to switch to...
Application Security
An update that Apple will soon release for iOS 13 and iPadOS should resolve an issue that leads to third-party keyboard apps getting elevated...
Application Security
The POISON CARP threat actor has targeted senior members of Tibetan groups via WhatsApp for around six months.
Application Security
Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.
Application Security
Windows 7 and Windows Server 2008 will officially reach end-of-support on January 14, 2020, but they will continue to receive security patches past that...
Application Security
Cisco Talos has released two new open source tools for IDA Pro, namely GhIDA, an IDA Pro plugin, and Ghidraaas (Ghidra as a Service),...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)