Application Security
The tj-actions/changed-files GitHub Action, which is used in 23,000 repositories, has been targeted in a supply chain attack.
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
The financing was provided by S Capital and investor Mike Moritz, S32, Glilot Capital Partners, and several angel investors.
Application Security
The Open Source Security Foundation (OpenSSF) has created a structured set of security requirements for open source projects.
Application Security
San Francisco startup secures $8.5 million in seed funding led by Valley Capital Partners to tackle browser-based malware attacks.
Application Security
San Francisco application security startup raises $100 million in a Series D funding round led by Menlo Ventures.
Application Security
With each passing year, social engineering attacks are becoming bigger and bolder thanks to rapid advancements in artificial intelligence.
Application Security
150 abandoned Amazon S3 buckets could have been leveraged to deliver malware or backdoors to governments and Fortune companies.
Application Security
Oligo Security has raised $50 million in Series B funding for its application detection and response (ADR) platform.
Application Security
Opengrep is a new consortium-backed fork of Semgrep, intended to be and remain a true genuine OSS SAST tool.
Application Security
DryRun Security has raised $8.7 million in a seed funding round for its AI-powered application security solutions.
Application Security
APIs are easy to develop, simple to implement, and frequently attacked. They are prime and lucrative targets for cybercriminals.
Application Security
CISA and the FBI have updated their guidance regarding risky software security bad practices based on feedback received from the public.
Application Security
CISA and other agencies call to action for the US government to take steps to close the software understanding gap.
Application Security
Google releases OSV-SCALIBR, an open source library for software composition analysis and file system scanning.
Application Security
Cisco has unveiled AI Defense, a solution designed to help organizations protect development and use of AI applications.
Application Security
Redmond's AI Red Team says human involvement remains irreplaceable in addressing nuanced risks.
Application Security
Google has announced the open source availability of Vanir, a patch validation tool for Android platform developers.
Application Security
GitHub has launched a $1.25 million fund to be invested in improving the security of 125 open source projects.
Application Security
Security researcher investigated Microsoft Power Pages installations and found several with misconfigurations allowing unintentional access to confidential data.
Application Security
Willfully ignoring important security issues to make our lives easier is, unfortunately, something that does happen in the security field.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)