Application Security
Earlier this year, a security researcher discovered that it was possible to bypass Google’s reCAPTCHA via HTTP parameter pollution.
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
Vulcan Cyber is the latest Israel-based cybersecurity startup to emerge from stealth mode. The company, whose main product is a vulnerability remediation platform, announced...
Application Security
The CERT Coordination Center (CERT/CC) at Carnegie Mellon University this week announced the launch of a new version of the network traffic analysis tool...
Application Security
Cloudflare announced a series of improvements to its Rate Limiting distributed denial of service (DDoS) protection tool this week.
Application Security
FireEye on Monday announced the availability of a platform to allow organizations and pentesters check their ability to detect and respond to OAuth abuse...
Application Security
Open source components have been increasingly used by developers, but failure to patch vulnerabilities in this type of software can pose serious risks.
Application Security
Serverless application security firm Protego Labs announced Wednesday that it has raised $2 million seed funding from a group of investors led by Ron...
Application Security
Google this week announced the release of an open-source framework and software development kit (SDK) that allows developers to build applications targeting trusted execution...
Application Security
Team collaboration solutions provider Slack last week announced that one of the secure development lifecycle (SDL) tools used internally by the company has been...
Application Security
Honeypot Experiment Shows the Commoditization of Using Bots to Perform Low-level Hacking Tasks
Application Security
Application security firm Onapsis has raised $31 million through a Series C funding round led by new investor LLR Partners, the company announced Friday,...
Application Security
Cloudflare on Thursday announced the availability of a new service that extends the company’s protection capabilities to gaming, remote access, email, IoT and other...
Application Security
Amazon Web Services (AWS) announced on Wednesday the launch of several tools and services designed to help customers manage their firewalls, use private certificates,...
Application Security
Cybersecurity startup Threat X, which offers cloud-based web application firewall (WAF) solutions, today announced that it has closed an $8.2 million Series A funding...
Application Security
Cybercriminals are targeting websites running the Magento platform to inject them with code that can steal credit card data and infect visitors with malware,...
Application Security
VMware announced this week that it has acquired threat detection and response company E8 Security, whose technology will be used to improve the Workspace...
Application Security
Drupal announced plans to release a security update for Drupal 7.x, 8.3.x, 8.4.x, and 8.5.x on March 28, 2018, aimed at addressing a highly...
Application Security
Attackers can use online sandbox services to exfiltrate data from an isolated network, a SafeBreach security researcher has discovered.
Application Security
Did you know that 84% of all cyber attacks target applications, not networks? What’s even more curious is that 80% of Internet of Things...
Application Security
White hats managed to hack Microsoft Edge, Apple Safari and Oracle VirtualBox on the first day of the Pwn2Own 2018 competition taking place these...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)