Application Security
Solutions designed to make it easier for iOS app developers to quickly push out hotfixes and updates can be abused by malicious actors to...
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
PayPal has addressed a serious remote code execution vulnerability caused by a Java deserialization bug disclosed last year, and shared some recommendations for security...
Application Security
Check Point Targets Data Centers and Large Enterprise Networks With Integrated Threat Prevention Appliances
Application Security
Application Security
Shape Security today announced that it has raised $25 Million in a Series D funding round to accelerate deployments of its Botwall Service, with specific...
Application Security
Trend Micro Patches Password Manager Vulnerabilities Reported by Google Researcher Trend Micro has rolled out updates to patch easy-to-exploit vulnerabilities found by a Google Project...
Application Security
A rite of passage for new parents is child-proofing—securing the home from threats to children. Most experts on the subject highly recommend that parents...
Application Security
The first platform update for Microsoft Edge, released by the tech giant last week, brings several improvements to the web browser’s rendering engine, including...
Application Security
Attacks designed to compromise users and steal sensitive data are increasing in magnitude and velocity as cybercriminals leverage automated tools, Imperva’s annual Web Application...
Application Security
Hackers breached the systems of anti-adblocking solutions provider PageFair and used the access to deliver malware via the publishers that rely on the company’s...
Application Security
Netflix this week released an in-house developed tool for discovering cross-site scripting (XSS) vulnerabilities in applications and for scanning secondary software programs for potential...
Application Security
Amazon announced last week its intention to stop accepting Flash-based advertisements for Amazon.com. The decision comes after major web browser vendors decided to implement...
Application Security
Facebook announced today the general availability of Security Checkup, a new tool designed to help users better protect their accounts.
Application Security
Network traffic visibility platform provider Gigamon (NYSE: GIMO) has launched a new platform designed to give enterprises extensive visibility into network traffic, users, applications...
Application Security
While container adoption is likely to surge over the next few years, concerns around security, certification and adequate skills remain, according to a recent...
Application Security
After malicious actors started adapting their techniques, Google has decided to ban the installation of extensions for the Chrome web browser from sources other...
Application Security
SAP has fixed multiple vulnerabilities in compression libraries used in several SAP products discovered by Core Security researchers. Administrators should check the Support Portal...
Application Security
Attackers typically use one of three common techniques to compromise SAP systems at the application layer: pivoting, portal attacks, and database warehousing, according to...
Application Security
Google today released Password Alert, a free and open-source Chrome extension designed to protect Google and Google Apps for Work accounts against phishing attacks.
Application Security
RSA Conference 2015 -- "The DevOps train is coming, and security can choose to get on board or not, but DevOps isn't going away."
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)