Application Security
Some third-party applications unnecessarily store keys or secrets that could be abused to leak a variety of user credentials and other type of sensitive...
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
Trend Micro’s Zero Day Initiative (ZDI) published 674 advisories last year and paid out nearly $2 million to researchers who submitted vulnerabilities, the company...
Application Security
Security firm Imperva has analyzed web application vulnerability trends in 2016 and determined that while some types of flaws have declined, others have become...
Application Security
The updates released for the “libpng” library in late December patch an old vulnerability introduced by developers in 1995.Libpng is the official Portable Network...
Application Security
Experts have determined that the remote code execution vulnerabilities affecting the PHPMailer and SwiftMailer email-sending libraries are caused by PHP design flaws.
Application Security
The developers of PHPMailer have patched a critical vulnerability that can be exploited by a remote attacker for arbitrary code execution, a researcher said...
Application Security
Apple informed iOS developers this week that it has decided to give them more time to ensure that their applications communicate over a secure...
Application Security
Miscommunications Between Security Teams and DevOps Teams Put Your Business at Risk
Application Security
Internet infrastructure giant Akamai Technologies announced on Monday that it has acquired bo
Application Security
Researchers at web application security firm RIPS Technologies have analyzed 44,705 of the roughly 48,000 plugins available in the official WordPress plugins directory and...
Application Security
Application Security
DevOps is already in use among 19% of IT organizations, with another 19% in a pilot phase. Another 35% intend to implement DevOps in...
Application Security
SAP on Tuesday released its set of security patches for December 2016, which include 20 Patch Day Security Notes, along with updates for two previously...
Application Security
Researchers discovered what they believe to be a critical vulnerability in a PwC product designed for securing SAP systems, but the vendor has downplayed...
Application Security
Cisco last week prompted a password reset for the user accounts on its Cisco Professional Careers mobile website after a security researcher discovered a...
Application Security
Potentially Unwanted Programs Put Enterprise Data at Risk. How do You Tell Good Apps from Bad Apps?
Application Security
The OODA loop is a well established concept often used in security which originated in the military. OODA stands for Observe, Orient, Decide, Act.
Application Security
Companies are spending millions on bug bounty programs whose goal is to identify vulnerabilities, but it might be more efficient to take a proactive...
Application Security
Google has released new tools and documentation designed to help developers mitigate cross-site scripting (XSS) attacks using the Content Security Policy (CSP) standard.
Application Security
Following a series of high profile high value attacks against a number of banks using the SWIFT interbank financial messaging system, Illusive Networks has announced SWIFT...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)