Application Security
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
CISO Strategy
With cybersecurity budgets strained, organizations are turning to AI-powered automation to plug staffing gaps, maintain defenses, and survive escalating threats.
Vulnerabilities
The new DDoS attack vector, which involves HTTP/2 implementation flaws, has been compared to Rapid Reset.
Identity & Access
Researchers at enterprise browser security firm SquareX showed how an attacker can impersonate a user and bypass passkey security.
Vulnerabilities
Intel, AMD and Nvidia have published security advisories describing vulnerabilities found recently in their products.
Vulnerabilities
Microsoft’s August 2025 Patch Tuesday updates address critical vulnerabilities in Windows, Office, and Hyper-V.
Application Security
Taking place August 12-13, CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured,...
Artificial Intelligence
New physics-based research suggests large language models could predict when their own answers are about to go wrong — a potential game changer for...
Nation-State
WinRAR has patched CVE-2025-8088, a zero-day exploited by Russia’s RomCom in attacks on financial, defense, manufacturing and logistics companies.
IoT Security
Researchers showed how flaws in a bus’ onboard and remote systems can be exploited by hackers for tracking, control and spying.
Artificial Intelligence
Researchers demonstrate how multi-turn “storytelling” attacks bypass prompt-level filters, exposing systemic weaknesses in GPT-5’s defenses.
Data Breaches
Airlines Air France and KLM have disclosed a data breach stemming from unauthorized access to a third-party platform.
Vulnerabilities
A desync attack method leveraging HTTP/1.1 vulnerabilities impacted many websites and earned researchers more than $200,000 in bug bounties.
Artificial Intelligence
Zenity has shown how AI assistants such as ChatGPT, Copilot, Cursor, Gemini, and Salesforce Einstein can be abused using specially crafted prompts.
Data Breaches
A Google Salesforce instance may have been targeted as part of a ShinyHunters campaign that hit several major companies.
Vulnerabilities
Trend Micro has rushed to fix two Apex One zero-days that may have been exploited by Chinese threat actors.
Endpoint Security
ReVault vulnerabilities in the ControlVault3 firmware in Dell laptops could lead to firmware modifications or Windows login bypass.
Artificial Intelligence
As AI makes software development accessible to all, security teams face a new challenge: protecting applications built by non-developers at unprecedented speed and scale.
Management & Strategy
Many companies are showcasing their products and services this week at the 2025 edition of the Black Hat conference in Las Vegas.
Vulnerabilities
Threat actors might be exploiting a zero-day vulnerability in SonicWall firewalls in a fresh wave of ransomware attacks.
Data Protection
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities
