Application Security
In many organizations, building and securing apps has typically been a siloed affair. The product owner, the network engineer, the developer and the security...
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
Microsoft-owned GitHub on Thursday announced the introduction of several new security tools and features designed to help developers secure their code.
Application Security
Application Security
Only 15% of Malware-Infected Websites Are Blacklisted, Report Finds
Application Security
WordPress released version 5.2 of the popular content management system (CMS) this week, which includes new security and stability features. Named “Jaco,” the update is...
Application Security
Shape Security has announced a new product designed to protect small and medium business (SMB) websites from the growing scourge of advanced bot-based credential...
Application Security
The shift to the cloud is well underway. The RightScale 2019 State of the Cloud Report finds that 84 percent of respondents have a...
Application Security
The U.S. National Institute of Standards and Technology (NIST) this week announced that updates to its Automated Combinatorial Testing for Software (ACTS) research toolkit...
Application Security
This move to container-based development and agile methodologies has been great for innovation and iteration, but it’s also brought a massive shift in the...
Application Security
Bad bots are a continuing problem. Good bots, those that perform welcome and benign activities -- such as search engine crawlers like Googlebot and...
Application Security
Security company FireEye this week announced the release of an open source tool designed to automate the analysis of Adobe Flash files in order...
Application Security
As Organizations Digitize Their Business, They Need to Know What and Who They Can Trust
Application Security
Aqua Security, a company that specializes in protecting container-based applications, on Wednesday announced that it raised $62 million in a Series C funding round.
Application Security
ACROS Security, a Slovenia-based company that specializes in cybersecurity research, penetration testing and code review, on Tuesday announced the launch of a paid version...
Application Security
Sqreen, a San Francisco-based company that provides application security solutions, on Tuesday announced that it raised $14 million in a Series A funding round.
Application Security
Facebook last week announced that it introduced new settings designed to make it easier for white hat hackers to test the security of its...
Application Security
Blue Cedar, a San Francisco-based company that specializes in securing mobile applications, on Tuesday announced that it raised $17 million in a Series B...
Application Security
Google on Monday announced that it has made available its Sandboxed API as open source in an effort to make it easier for software...
Application Security
Antivirus testing firm AV-Comparatives has analyzed 250 security applications for Android offered on Google Play and found that many of them either fail to...
Application Security
Fileless attacks are increasing and are more likely to succeed than traditional file-based malware. Most defenses seek to detect them by recognizing anomalous behavior...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)