Application Security
Enterprise software maker SAP documents multiple critical-severity issues and warns of risk of command injection attacks.
Hi, what are you looking for?
SecurityWeek
Application Security
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
Application Security
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Application Security
The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.
Application Security
Concluding a two-day OSS security summit, CISA details key actions to help improve open source security.
Application Security
The API attack surface is expanding and API vulnerabilities are growing. AI will help attackers find and exploit API vulnerabilities at scale.
Application Security
Only 54% of major code changes go through a full security review, a new CrowdStrike State of Application Security report reveals.
Application Security
Google announces $1 million investment in improving Rust’s interoperability with legacy C++ codebases.
Application Security
Google has released its fuzzing framework in open source to boost the ability of developers and researchers to identify vulnerabilities.
Application Security
Over a dozen vulnerabilities discovered in Tor audit, including a high-risk flaw that can be exploited to inject arbitrary bridges.
Application Security
Researchers detail a CI/CD attack leading to PyTorch releases compromise via GitHub Actions self-hosted runners.
Application Security
Late-stage player in the CNAPP space secures a $60 million extended Series E funding round at a valuation north of $1 billion.
Application Security
SentinelOne plans to acquire PingSafe in a cash-and-stock deal that adds cloud native application protection platform (CNAPP) technologies.
Application Security
NSA has published guidance to help organizations incorporate SBOM to mitigate supply chain risks.
Application Security
Adobe warned users on both Windows and macOS systems about exposure to code execution, memory leaks and denial-of-service security issues.
Application Security
Government agencies in the Five Eyes countries have published new guidance on creating memory safety roadmaps.
Application Security
ArmorCode raises $40 million in a Series B funding round to help organizations ship secure applications.
Application Security
Aikido Security has raised €5 million (~$5.4 million) in seed funding for an all-in-one application security platform.
Application Security
Adobe patches 72 security bugs and calls special attention to code-execution defects in the widely deployed Acrobat and Reader software.
Application Security
New report provides a detailed look into the ever-changing threats targeting APIs.
Application Security
GitGuardian discovered roughly 4,000 secrets in nearly 3,000 PyPI packages, including Azure, AWS, and GitHub keys.
Application Security
GitHub adds AI-powered security features to help developers identify and address code vulnerabilities faster.
Application Security
Myrror Security emerges from stealth mode to disrupt supply chain attacks with binary-to-source code analysis.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)