Application Security
Facebook has shared another update on the hacker attack disclosed last week. The social media giant says there is no evidence that the attackers...
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
When was the last time you thought about what permissions the apps on your phone have? Often, when downloading something new from the app...
Application Security
Credential stuffing is a growing threat. It is not new, but for many companies it is treated as annoying background noise that can be...
Application Security
BGP (Border Gateway Protocol) routing isn’t secure and organizations should embrace Resource Public Key Infrastructure (RPKI) to improve security, Cloudflare says.
Application Security
Rapid7 announced on Thursday that its Insight Platform now features automation and orchestration capabilities through a new tool called InsightConnect.
Application Security
Comprehensive Data Security Measures Should Include a Formal Process for Application Security and Vulnerability Assessment
Application Security
Hundreds of e-commerce Sites Impacted by MageCart Compromise of Cloud Service Provider
Application Security
Instagram this week announced new features to boost account security and provide users with increased visibility into accounts with a large number of followers.
Application Security
Semmle, a company whose software engineering analytics platform is already used by several major companies, on Tuesday announced its global launch, along with a...
Application Security
Cyber security and risk mitigation company NCC Group has released a new open source tool designed to make it easier for penetration testers and...
Application Security
Application Security
Security Teams Can Shift the Risk/Reward Ratio and Make ERP Applications Less Attractive TargetsA confluence of factors is putting hundreds of thousands of implementations...
Application Security
The U.S. National Institute of Standards and Technology (NIST) announced on Tuesday that its Computer Security Division has decided to withdraw eleven outdated SP...
Application Security
GitHub announced on Thursday that developers will be warned if the Python packages used by their applications are affected by known vulnerabilities.
Application Security
Application Security
Identity management solutions provider Ping Identity on Tuesday announced the acquisition of Elastic Beam, a company that specializes in detecting and blocking attacks aimed...
Application Security
Thousands of mobile applications running on iOS and Android have exposed over 113 gigabytes of data from 2,300 unsecured Firebase databases, enterprise mobile security...
Application Security
VirusTotal, which recently became part of Alphabet’s new cybersecurity company Chronicle, announced on Tuesday the launch of a new service designed to help software...
Application Security
Machine data solutions firm Splunk announced Monday that it has agreed the acquisition of alert management start-up VictorOps for approximately $120 million. The acquisition...
Application Security
IBM announced on Monday that it has added two new important features to its “MaaS360 with Watson” unified endpoint management (UEM) solution.UEM solutions allow...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)