Application Security
Aikido Security has raised €5 million (~$5.4 million) in seed funding for an all-in-one application security platform.
Hi, what are you looking for?
SecurityWeek
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
Adobe patches 72 security bugs and calls special attention to code-execution defects in the widely deployed Acrobat and Reader software.
Application Security
New report provides a detailed look into the ever-changing threats targeting APIs.
Application Security
GitGuardian discovered roughly 4,000 secrets in nearly 3,000 PyPI packages, including Azure, AWS, and GitHub keys.
Application Security
GitHub adds AI-powered security features to help developers identify and address code vulnerabilities faster.
Application Security
Myrror Security emerges from stealth mode to disrupt supply chain attacks with binary-to-source code analysis.
Application Security
Washington startup Chainguard banks $61 million in new financing as investors make hefty wagers on software supply chain security companies.
Application Security
Michigan startup raises $75 million in new funding as venture capital investors bet big on attack surface management technologies.
Application Security
Blockaid raises a Series A funding round to build technology to secure blockchain applications from hacks and scams.
Application Security
Microsoft patches more than 100 vulnerabilities across the Windows ecosystem and warns that three are already being exploited in the wild.
Application Security
Atlassian confirms that “a handful of customers” were hit by exploits targeting a remotely exploitable flaw in its Confluence Data Center and Server products.
Application Security
Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions.
Application Security
Google has released the source code of BinDiff, a binary file comparison tool popular within the security research community, on GitHub.
Application Security
The cash-and-stock transaction provides capabilities for CrowdStrike to beef up its enterprise cloud security portfolio.
Application Security
CISA details its plan to support the open source software ecosystem and secure the use of open source software within the federal government.
Application Security
Israeli security startup Zenity banks $16.5 million in new venture capital funding to work on ‘low-code/no-code’ security technology.
Application Security
Truffle Security has discovered thousands of popular websites leaking their secrets, including .git directories and AWS and GitHub keys.
Application Security
GitHub Enterprise Server 3.10 released with additional security capabilities, including support for custom deployment rules.
Application Security
The Crates.io Rust package registry was targeted in preparation of a malware attack aimed at developers, according to Phylum.
Application Security
Google sprinkles magic of generative-AI into its open source fuzz testing infrastructure and finds immediate success with code coverage.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)