Application Security
Concluding a two-day OSS security summit, CISA details key actions to help improve open source security.
Hi, what are you looking for?
SecurityWeek
Application Security
Google has integrated OSV-SCALIBR features into OSV-Scanner, its free vulnerability scanner for open source developers.
Application Security
The tj-actions/changed-files GitHub Action, which is used in 23,000 repositories, has been targeted in a supply chain attack.
Application Security
The financing was provided by S Capital and investor Mike Moritz, S32, Glilot Capital Partners, and several angel investors.
Application Security
The Open Source Security Foundation (OpenSSF) has created a structured set of security requirements for open source projects.
Application Security
San Francisco startup secures $8.5 million in seed funding led by Valley Capital Partners to tackle browser-based malware attacks.
Application Security
San Francisco application security startup raises $100 million in a Series D funding round led by Menlo Ventures.
Application Security
The API attack surface is expanding and API vulnerabilities are growing. AI will help attackers find and exploit API vulnerabilities at scale.
Application Security
Only 54% of major code changes go through a full security review, a new CrowdStrike State of Application Security report reveals.
Application Security
Google announces $1 million investment in improving Rust’s interoperability with legacy C++ codebases.
Application Security
Google has released its fuzzing framework in open source to boost the ability of developers and researchers to identify vulnerabilities.
Application Security
Over a dozen vulnerabilities discovered in Tor audit, including a high-risk flaw that can be exploited to inject arbitrary bridges.
Application Security
Researchers detail a CI/CD attack leading to PyTorch releases compromise via GitHub Actions self-hosted runners.
Application Security
Late-stage player in the CNAPP space secures a $60 million extended Series E funding round at a valuation north of $1 billion.
Application Security
SentinelOne plans to acquire PingSafe in a cash-and-stock deal that adds cloud native application protection platform (CNAPP) technologies.
Application Security
NSA has published guidance to help organizations incorporate SBOM to mitigate supply chain risks.
Application Security
Adobe warned users on both Windows and macOS systems about exposure to code execution, memory leaks and denial-of-service security issues.
Application Security
Government agencies in the Five Eyes countries have published new guidance on creating memory safety roadmaps.
Cyberwarfare
The vulnerability, tracked as CVE-2025-2783, was chained with a second exploit for remote code execution in attacks targeting organizations in Russia.
Hacker Conversations
Supply Chain Security
Mobile & Wireless
Cloud Security
Network Security
DrayTek routers around the world are rebooting and the vendor’s statement suggests that it may involve the exploitation of a vulnerability.
Vulnerabilities
Artificial Intelligence
Cybersecurity Funding
Data Breaches
Security Architecture
