Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

Sharks circling a computer
Threat Intelligence
Thousands of BeyondTrust Systems Remain ExposedThousands of BeyondTrust Systems Remain Exposed

Weeks after the critical vulnerability was reported and a hacking of the Treasury Department, nearly 9,000 BeyondTrust instances remain wide open to the Internet, researchers say -- though it's impossible to tell how many are still vulnerable.

byBecky Bracken, Senior Editor, Dark Reading
Jan 3, 2025
|
1 Min Read
Chrome browser extension app on an iPhone
Application Security
Chrome Extension Compromises Highlight Software Supply ChallengesChrome Extension Compromises Highlight Software Supply Challenges
byRobert Lemos, Contributing Writer
Jan 3, 2025
1 Min Read
PR Logo
Application Security
CDAO Sponsors Crowdsourced AI Assurance Pilot in the Context of Military MedicineCDAO Sponsors Crowdsourced AI Assurance Pilot in the Context of Military Medicine
Jan 2, 2025
1 Min Read
Servers falling down sideways
Vulnerabilities & Threats
Unpatched Active Directory Flaw Can Crash Any Microsoft ServerUnpatched Active Directory Flaw Can Crash Any Microsoft Server
byBecky Bracken, Senior Editor, Dark Reading
Jan 2, 2025
1 Min Read
PR Logo
Application Security
VicOne and Zero Day Initiative (ZDI) to Lead Pwn2Own AutomotiveVicOne and Zero Day Initiative (ZDI) to Lead Pwn2Own Automotive
Jan 2, 2025
1 Min Read
A hand about to press a large digital button marked AI on a screen
Cyber Risk
6 AI-Related Security Trends to Watch in 20256 AI-Related Security Trends to Watch in 2025
byJai Vijayan, Contributing Writer
Dec 31, 2024
1 Min Read
$10 bill closeup of US Treasury Building
Cyberattacks & Data Breaches
Chinese State Hackers Breach US Treasury Department
Chinese State Hackers Breach US Treasury Department
Dec 30, 2024
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
A face swap deepfake in video edit
Cyberattacks & Data Breaches
Deepfakes, Quantum Attacks Loom Over APAC in 2025
Deepfakes, Quantum Attacks Loom Over APAC in 2025
Dec 30, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Cute bug on a leaf
Vulnerabilities & Threats
Fortinet Addresses Unpatched Critical RCE Vector
Fortinet Addresses Unpatched Critical RCE Vector
Dec 19, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Apache's logo on a mobile phone screen
Application Security
Orgs Scramble to Fix Actively Exploited Bug in Apache Struts 2
Orgs Scramble to Fix Actively Exploited Bug in Struts 2
Dec 19, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
A redacted document with a magnifying glass and a whistle
Data Privacy
Wald.ai Launches Data Loss Protection for AI Platforms
Wald.ai Launches Data Loss Protection for AI Platforms
Dec 18, 2024
|
1 Min Read
byFahmida Y. Rashid, Managing Editor, Features
PR logo
Application Security
Delinea Joins CVE Numbering Authority Program
Delinea Joins CVE Numbering Authority Program
Dec 17, 2024
|
1 Min Read
A hand at a keyboard overlaid with an AI graphic
Application Security
Does Desktop AI Come With a Side of Risk?
Does Desktop AI Come With a Side of Risk?
Dec 16, 2024
|
1 Min Read
byRobert Lemos, Contributing Writer
In Bavaria, boy driving pedal go-kart on a tiled driveway is chased by a running woman. Both are smiling. A house and trees are in the background.
Application Security
Citizen Development Moves Too Fast for Its Own Good
Citizen Development Moves Too Fast for Its Own Good
Dec 16, 2024
|
1 Min Read
byMichael Bargury, CTO & Co-Founder, Zenity
Elizabeth Taylor in the 1963 movie Cleopatra
Application Security
Cleo MFT Zero-Day Exploits Are About to Escalate, Analysts Warn
Cleo MFT Zero-Day Exploits Are About to Escalate
Dec 13, 2024
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
open-source tools
Application Security
Generative AI Security Tools Go Open Source
Generative AI Security Tools Go Open Source
Dec 13, 2024
|
1 Min Read
byRobert Lemos, Contributing Writer
A Coral AI USB accelerator
Vulnerabilities & Threats
With 'TPUXtract,' Attackers Can Steal Orgs' AI Models
With 'TPUXtract,' Attackers Can Steal Orgs' AI Models
Dec 13, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Statue of Prometheus, viewed from the back
Сloud Security
336K Prometheus Instances Exposed to DoS, 'Repojacking'
336K Prometheus Instances Exposed to DoS, 'Repojacking'
Dec 12, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Krispy Kreme doughnut assortment on plate
Cyberattacks & Data Breaches
Krispy Kreme Doughnut Delivery Gets Cooked in Cyberattack
Krispy Kreme Doughnut Delivery Gets Cooked in Cyberattack
Dec 11, 2024
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
A glowing purple and pink key, with dots and numbers in the background
Cyber Risk
Symmetrical Cryptography Pioneer Targets the Post-Quantum Era
Symmetrical Cryptography Pioneer Targets the Post-Quantum Era
Dec 11, 2024
|
1 Min Read
byKristina Beek, Associate Editor, Dark Reading
A woman sitting at a laptop and holding a mobile device, the screens of both displaying a green check mark in a circle
Cyberattacks & Data Breaches
Researchers Crack Microsoft Azure MFA in an Hour
Researchers Crack Microsoft Azure MFA in an Hour
Dec 11, 2024
|
1 Min Read
byElizabeth Montalbano, Contributing Writer
A patchwork quilt
Application Security
Actively Exploited Zero-Day, Critical RCEs Lead Microsoft Patch Tuesday
Microsoft Fixes Active Zero-Day, Critical RCEs on Patch Tuesday
Dec 10, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
The Debating Chamber of the Scottish Parliament in Holyrood, Edinburgh, Scotland
Cyberattacks & Data Breaches
Scottish Parliament TV at Risk From Deepfakes
Scottish Parliament TV at Risk From Deepfakes
Dec 10, 2024
|
1 Min Read
byKristina Beek, Associate Editor, Dark Reading
The Visual Studio Code logo
Cyberattacks & Data Breaches
Sprawling 'Operation Digital Eye' Attack Targets European IT Orgs
'Operation Digital Eye' Attack Targets European IT Orgs
Dec 10, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
The words "zero-day" written in a line of code on a computer screen
Application Security
Microsoft NTLM Zero-Day to Remain Unpatched Until April
Microsoft NTLM Zero-Day to Remain Unpatched Until April
Dec 9, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
a patchwork quilt
Vulnerabilities & Threats
Google Launches Open Source Patch Validation Tool
Google Launches Open Source Patch Validation Tool
Dec 9, 2024
|
1 Min Read
byJennifer Lawinski, Contributing Writer
Still of Arnold Schwarzenegger's face from the 1990 movie Total Recall
Application Security
Microsoft Expands Access to Windows Recall AI Feature
Microsoft Expands Access to Windows Recall AI Feature
Dec 6, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
software components connected development
Application Security
Open Source Security Priorities Get a Reshuffle
Open Source Security Priorities Get a Reshuffle
Dec 6, 2024
|
1 Min Read
byRobert Lemos, Contributing Writer
PR Logo
Application Security
Compromised Software Code Poses New Systemic Risk to U.S. Critical Infrastructure
Compromised Software Code Poses New Systemic Risk to U.S. Critical Infrastructure
Dec 5, 2024
|
1 Min Read
DMCA logo and gavel sitting on a computer keyboard
Cyber Risk
Library of Congress Offers AI Legal Guidance to Researchers
Library of Congress Offers AI Legal Guidance to Researchers
Dec 5, 2024
|
1 Min Read
byRobert Lemos, Contributing Writer
Great Siege Tunnels, Gibraltar, featuring a tableau of seven cannons overlooking Spanish positions
Сloud Security
Russia's 'BlueAlpha' APT Hides in Cloudflare Tunnels
Russia's 'BlueAlpha' APT Hides in Cloudflare Tunnels
Dec 5, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Mitel's corporate logo on an office building
Vulnerabilities & Threats
Bypass Bug Revives Critical N-Day in Mitel MiCollab
Bypass Bug Revives Critical N-Day in Mitel MiCollab
Dec 5, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
PR Logo
Application Security
Onapsis Expands Code Security Capabilities to Accelerate and De-Risk SAP BTP Development Projects
Onapsis Expands Code Security Capabilities to Accelerate and De-Risk SAP BTP Development Projects
Dec 4, 2024
|
1 Min Read
A magnifying glass hovering over the Veeam logo on its webpage
Vulnerabilities & Threats
Veeam Urges Updates After Discovering Critical Vulnerability
Veeam Urges Updates After Discovering Critical Vulnerability
Dec 4, 2024
|
1 Min Read
byKristina Beek, Associate Editor, Dark Reading
Concept illustration of a content delivery network on a world map
Application Security
Misconfigured WAFs Heighten DoS, Breach Risks
Misconfigured WAFs Heighten DoS, Breach Risks
Dec 3, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer

Editor's Choice

Binary code in blue and orange colors
Vulnerabilities & Threats
Emerging Threats & Vulnerabilities to Prepare for in 2025Emerging Threats & Vulnerabilities to Prepare for in 2025
byKristina Beek, Associate Editor, Dark Reading
Dec 26, 2024
11 Min Read
Trump signing cybersecurity order creating CISA in 2018
Cybersecurity Operations
Trump 2.0 Portends Big Shift in Cybersecurity PoliciesTrump 2.0 Portends Big Shift in Cybersecurity Policies
byBecky Bracken, Senior Editor, Dark Reading
Dec 24, 2024
7 Min Read
People shaking hands imposed over a photo of China and a globe
Endpoint Security
US Ban on TP-Link Routers More About Politics Than Exploitation RiskTP-Link Router Ban Is Mostly About Politics
byRobert Lemos, Contributing Writer
Dec 20, 2024
6 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe