Application Security
CISA, FBI, and ACSC have published guidance to help software manufacturers establish secure deployment processes.
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
CISA and the FBI are requesting public comment on new guidance regarding risky software security bad practices.
Application Security
Application security and vulnerability management platform DefectDojo has raised $7 million in Series A funding.
Application Security
RunSafe Security has raised $12 million in a Series B funding round for a solution designed to help companies develop secure software.
Application Security
SaaS applications are so easy to use, the decision, and the deployment, is sometimes undertaken by the business unit user with little reference to,...
Application Security
For years, many CISOs have struggled to influence their development cohort on the importance of putting security first.
Application Security
GitHub has made AI-powered Copilot Autofix generally available to help developers fix code vulnerabilities faster.
Application Security
Vulnerabilities in Homebrew could have allowed attackers to load executable code and modify binary builds, security audit finds.
Application Security
Researchers discovered and published details of an XSS attack that could potentially impact millions of websites around the world.
Application Security
Heeler Security has raised $8.5 million in seed funding for its ProductDNA application security technology.
Application Security
CISA says a SILENTSHIELD red team assessment found gaping holes in the security posture of a federal civilian executive branch organization.
Application Security
Patch Tuesday: Enterprise software vendor SAP releases patches for high-severity vulnerabilities in multiple products and tools.
Application Security
EVA Information Security has shared details on three CocoaPods vulnerabilities impacting millions of macOS and iOS applications.
Application Security
The British company behind the popular Burp Suite pen-test utilities has banked a massive $112 million investment from Brighton Park Capital.
Application Security
Most critical open source software contains code written in a memory unsafe language, US, Australian, and Canadian government agencies warn.
Application Security
Aqua Security shows that code in repositories remains accessible even after being deleted or overwritten, continuing to leak secrets.
Application Security
A critical vulnerability tracked as CVE-2024-34359 and dubbed Llama Drama can allow hackers to target AI product developers.
Application Security
Adobe is providing incentives for bug bounty hackers to report security flaws in its implementation of Content Credentials and Adobe Firefly.
Application Security
Malicious hackers are targeting SAP applications at an alarming pace, according to warnings from Onapsis and Flashpoint.
Application Security
YL Ventures leads an early stage funding round for Miggo Security, a Tel Aviv startup working on application detection and response technology.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)