Application Security
Use-after-free and OS command injection vulnerabilities reach the top five most dangerous software weaknesses in the 2023 CWE Top 25 list.
Hi, what are you looking for?
SecurityWeek
Application Security
GitHub has launched a $1.25 million fund to be invested in improving the security of 125 open source projects.
Application Security
Security researcher investigated Microsoft Power Pages installations and found several with misconfigurations allowing unintentional access to confidential data.
Application Security
Willfully ignoring important security issues to make our lives easier is, unfortunately, something that does happen in the security field.
Application Security
CISA, FBI, and ACSC have published guidance to help software manufacturers establish secure deployment processes.
Application Security
CISA and the FBI are requesting public comment on new guidance regarding risky software security bad practices.
Application Security
Application security and vulnerability management platform DefectDojo has raised $7 million in Series A funding.
Application Security
Tel Aviv startup scores investment to build technology to secure in-house low-code/no-code custom applications.
Application Security
New guidance from CISA and the NSA provides recommendations on securing CI/CD pipelines against malicious attacks.
Application Security
Two critical-severity authentication bypass vulnerabilities in WordPress plugins with tens of thousands of installations.
Application Security
Fake security researcher accounts seen distributing malware disguised as Chrome, Signal, WhatsApp, Discord and Exchange zero-day exploits.
Application Security
Adobe ships urgent fixes for at least a dozen flaws that expose Adobe Commerce users to code execution attacks.
Application Security
OMB has published new guidance on federal agencies obtaining security guarantees from software vendors.
Application Security
Cybersecurity news that you may have missed this week: AI regulation, layoffs, US aerospace malware attacks, and post-quantum encryption.
Application Security
VMware ships urgent patches to cover security defects that expose businesses to remote code execution attacks.
Application Security
OWASP’s ranking for the major API security risks in 2023 has been published. The list includes many parallels with the 2019 list, some reorganizations/redefinitions,...
Application Security
NCC Group announces new open source tools for finding hardcoded credentials and for distributing cloud workloads.
Application Security
Google introduces Mobile VRP bug bounty program for vulnerabilities in its mobile applications.
Malware & Threats
Russia's Turla hackers hijacked 33 command servers operated by Pakistani hackers who had themselves breached Afghanistan and Indian targets.
Supply Chain Security
Hacker Conversations
Tracking & Law Enforcement
Artificial Intelligence
Vulnerabilities
Artificial Intelligence
