Application Security
The ongoing battle over the Federal Bureau of Investigation’s (FBI) use of a zero-day in the Tor anonymity browser hit a new gear this...
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
Security researchers are seeing evidence that up to 36 global organizations have been hacked via exploits against a vulnerability in SAP Business Applications that...
Application Security
A zero-day vulnerability in Adobe’s ubiquitous Flash Player software is being exploited to launch malware attacks, the company warned in an advisory issued today.The...
Application Security
Application Security
Adobe’s widely deployed PDF Reader and Acrobat software products will get security band-aids on May 10 to cover dangerous vulnerabilities that put users at...
Application Security
A team of researchers from the University of Michigan and Microsoft conducted an analysis of a smart home platform from Samsung-owned SmartThings and discovered...
Application Security
Many developers unknowingly expose sensitive data, including business-critical information, when they publish code containing their Slack access tokens on GitHub.
Application Security
Short-URL enumeration can be used to discover and read shared content stored in the cloud, including files for which the user didn’t create a...
Application Security
A group of security researchers has discovered vulnerabilities in the reCaptcha systems of Google and Facebook, and have created an attack that is highly...
Application Security
A group of researchers from Northeastern University have detailed a new method that allows malicious actors to launch stealthy attacks by leveraging the lack...
Application Security
A recent layer 7 distributed denial of service (DDoS) attack managed to break all previous known records in terms of bandwidth consumption, peaking at...
Application Security
Zen Cart on Friday released an updated version of the popular online open source shopping cart application to address multiple Cross-Site Scripting (XSS) vulnerabilities.
Application Security
The personal details of thousands of foreign nationals living in southern Thailand were briefly leaked online in what the site's developer admitted Monday was...
Application Security
“…is part of this balanced breakfast…” This is the claim of many sugary cereals aimed directly at children. It is also the claim of...
Application Security
Researchers discovered that a patch released more than two years ago by Oracle for a serious Java sandbox escape vulnerability can be easily bypassed.
Application Security
Custom Content Type Manager (CCTM), a WordPress plugin with over 10,000 active installations, recently turned rogue and started stealing admin credentials via a backdoor,...
Application Security
Let’s play the “Analyst Firm Dating Game.” We asked four of the top analyst firms what technologies they consider to be in the realm...
Application Security
Tens of thousands of WordPress websites have been recently used to launch Layer 7 distributed denial of service (DDoS) attacks, security researchers at Sucuri...
Application Security
Success Comes From Changing Your Habits to Make the Commitment to Secure Software a Lifestyle
Application Security
Oracle on Wednesday announced specific plans to kill the Java browser plugin and has advised users to start migrating to other technologies.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)