Application Security
Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions.
Hi, what are you looking for?
SecurityWeek
Application Security
RunSafe Security has raised $12 million in a Series B funding round for a solution designed to help companies develop secure software.
Application Security
SaaS applications are so easy to use, the decision, and the deployment, is sometimes undertaken by the business unit user with little reference to,...
Application Security
For years, many CISOs have struggled to influence their development cohort on the importance of putting security first.
Application Security
GitHub has made AI-powered Copilot Autofix generally available to help developers fix code vulnerabilities faster.
Application Security
Vulnerabilities in Homebrew could have allowed attackers to load executable code and modify binary builds, security audit finds.
Application Security
Researchers discovered and published details of an XSS attack that could potentially impact millions of websites around the world.
Application Security
Google has released the source code of BinDiff, a binary file comparison tool popular within the security research community, on GitHub.
Application Security
The cash-and-stock transaction provides capabilities for CrowdStrike to beef up its enterprise cloud security portfolio.
Application Security
CISA details its plan to support the open source software ecosystem and secure the use of open source software within the federal government.
Application Security
Israeli security startup Zenity banks $16.5 million in new venture capital funding to work on ‘low-code/no-code’ security technology.
Application Security
Truffle Security has discovered thousands of popular websites leaking their secrets, including .git directories and AWS and GitHub keys.
Application Security
GitHub Enterprise Server 3.10 released with additional security capabilities, including support for custom deployment rules.
Application Security
The Crates.io Rust package registry was targeted in preparation of a malware attack aimed at developers, according to Phylum.
Application Security
Google sprinkles magic of generative-AI into its open source fuzz testing infrastructure and finds immediate success with code coverage.
Application Security
Adobe rolls out a big batch of security updates to fix at least 30 Acrobat and Reader vulnerabilities affecting Windows and macOS users.
Application Security
To boost user privacy, Apple is requiring app developers to declare a reason to use specific APIs.
Application Security
Thinking through the good, the bad, and the ugly now is a process that affords us “the negative focus to survive, but a positive...
Nation-State
The US government has announced the disruption of Raptor Train, a Flax Typhoon botnet powered by hacked consumer devices.
Artificial Intelligence
Nation-State
Network Security
Sessions from SecurityWeek's 2024 Attack Surface Management are now available to watch on demand.
Artificial Intelligence
