Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
Application security is being challenged by a disconnect between developers and executives, according to a new study by the Ponemon Institute.
Application Security
While obscuring website code, server architecture, and security mechanisms doesn’t provide bullet-proof security on its own, it can be effective...
Application Security
Application Security
Qualys, a provider of cloud-based security and compliance solutions, announced that starting tomorrow, a beta version of its new Web Application Firewall (WAF) will...
Application Security
Now Available on Demand
Application Security
Webcast: Wednesday, July 31 at 1 PM ET / 10 AM PT
Application Security
A technical advisory from Command Five, an Australian security consultancy, has outlined the recently patched flaws in Atlassian’s Crowd Single Sign-on (SSO) software package....
Application Security
Looking at BYOD from the viewpoint of data matters most. New York’s Mobile Helix is shifting away from train of thought that says security...
Application Security
Facebook on Friday said that phone numbers and email addresses belonging to roughly 6 million of its users had been improperly shared due to...
Application Security
In my previous SecurityWeek column, I wrote about Managing Security with the Business in Mind and discussed briefly the importance of taking an application-centric...
Application Security
Risk I/O, a vulnerability intelligence platform designed to help organizations efficiently report and mitigate security vulnerabilities, on Wednesday announced that it now analyzes real-time,...
Application Security
The Open Web Application Security Project (OWASP) released an update to its Top 10 list of risks facing developers. As in previous years, injection...
Application Security
Trend Micro has launched a new security as a service solution that uses automated and expert analysis to help protect web applications.
Application Security
On Tuesday, Jerry Davis, the VA’s former CISO, told members of the House Veterans' Affairs oversight and investigations subcommittee the sensitive personal information the...
Application Security
Fortinet has introduced a new operating system for its FortiWeb Web application firewalls.
Application Security
A new analysis by NSS Labs puts Microsoft Internet Explorer 10 ahead of the pack when it comes to browser protections against malware downloads.
Application Security
Today’s businesses must be able to rapidly adapt to changing market conditions – to support a new venture, merger/acquisition, etc. As business needs change,...
Application Security
Microsoft's coding practices and methodology complies with an international standard for developing secure software, the company said Tuesday.
Application Security
Smaller open source projects tend to be more secure than proprietary applications, but the opposite is the case for software with more than a...
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)