Application Security
NightVision, an early stage startup in the application security testing space, has raised $5.4 million in seed funding.
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
A critical vulnerability in multiple programming languages allows attackers to inject commands in Windows applications.
Application Security
A cross-site scripting vulnerability in the WP-Members Membership plugin could allow attackers to inject scripts into user profile pages.
Application Security
Veracode announces a deal to acquire Longbow Security, a Texas seed-stage startup working on automated root cause analysis technology.
Application Security
BlueFlag Security emerges from stealth mode with $11.5 million in a seed funding round led by Maverick Ventures and Ten Eleven Ventures.
Application Security
GitHub’s code scanning autofix delivers remediation suggestions for two-thirds of the identified vulnerabilities.
Application Security
Enterprise software maker SAP documents multiple critical-severity issues and warns of risk of command injection attacks.
Application Security
Concluding a two-day OSS security summit, CISA details key actions to help improve open source security.
Application Security
The API attack surface is expanding and API vulnerabilities are growing. AI will help attackers find and exploit API vulnerabilities at scale.
Application Security
Only 54% of major code changes go through a full security review, a new CrowdStrike State of Application Security report reveals.
Application Security
Google announces $1 million investment in improving Rust’s interoperability with legacy C++ codebases.
Application Security
Google has released its fuzzing framework in open source to boost the ability of developers and researchers to identify vulnerabilities.
Application Security
Over a dozen vulnerabilities discovered in Tor audit, including a high-risk flaw that can be exploited to inject arbitrary bridges.
Application Security
Researchers detail a CI/CD attack leading to PyTorch releases compromise via GitHub Actions self-hosted runners.
Application Security
Late-stage player in the CNAPP space secures a $60 million extended Series E funding round at a valuation north of $1 billion.
Application Security
SentinelOne plans to acquire PingSafe in a cash-and-stock deal that adds cloud native application protection platform (CNAPP) technologies.
Application Security
NSA has published guidance to help organizations incorporate SBOM to mitigate supply chain risks.
Application Security
Adobe warned users on both Windows and macOS systems about exposure to code execution, memory leaks and denial-of-service security issues.
Application Security
Government agencies in the Five Eyes countries have published new guidance on creating memory safety roadmaps.
Application Security
ArmorCode raises $40 million in a Series B funding round to help organizations ship secure applications.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)