Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

An upside-down toy airplane
Threat Intelligence
Microsoft: Russia's Sandworm APT Exploits Edge Bugs GloballyMicrosoft: Russia's Sandworm APT Exploits Edge Bugs Globally

Sandworm (aka Seashell Blizzard) has an initial access wing called "BadPilot" that uses standard intrusion tactics to spread Russia's tendrils around the world.

byNate Nelson, Contributing Writer
Feb 12, 2025
|
1 Min Read
Windows update screen on a laptop computer
Application Security
Microsoft's February Patch a Lighter Lift Than January'sMicrosoft's February Patch a Lighter Lift Than January's
byJai Vijayan, Contributing Writer
Feb 11, 2025
1 Min Read
The DeepSeek logo under a magnifying glass
Application Security
LLM Hijackers Quickly Incorporate DeepSeek API KeysLLM Hijackers Quickly Incorporate DeepSeek API Keys
byNate Nelson, Contributing Writer
Feb 7, 2025
1 Min Read
A silhouette of a man holding a smartphone, in front of a screen displaying OpenAI's logo
Application Security
Researcher Outsmarts, Jailbreaks OpenAI's New o3-miniResearcher Outsmarts, Jailbreaks OpenAI's New o3-mini
byNate Nelson, Contributing Writer
Feb 6, 2025
1 Min Read
A branch of HDFC Bank in India
Cyberattacks & Data Breaches
Basket of Bank Trojans Defraud Citizens of East IndiaBasket of Bank Trojans Defraud Citizens of East India
byNate Nelson, Contributing Writer
Feb 6, 2025
1 Min Read
Introduction to Claude 3, seen on the Anthropic website
Application Security
'Constitutional Classifiers' Technique Mitigates GenAI Jailbreaks'Constitutional Classifiers' Technique Mitigates GenAI Jailbreaks
byJai Vijayan, Contributing Writer
Feb 3, 2025
1 Min Read
DeepSeek displayed on a mobile device screen
Application Security
AI Malware Dressed Up as DeepSeek Packages Lurk in PyPi
AI Malware Dressed Up as DeepSeek Lurks in PyPi
Feb 3, 2025
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
A finger touching DeepSeek's logo on a screen
Application Security
DeepSeek Jailbreak Reveals Its Entire System Prompt
DeepSeek Jailbreak Reveals Its Entire System Prompt
Jan 31, 2025
|
1 Min Read
byNate Nelson, Contributing Writer
Black Hat USA 2024
Cyberattacks & Data Breaches
Black Hat USA 2024 Highlights
Black Hat USA 2024 Highlights
Jan 31, 2025
software developer Semgrep Opengrep
Application Security
Code-Scanning Tool's License at Heart of Security Breakup
Code-Scanning Tool's License at Heart of Security Breakup
Jan 31, 2025
|
1 Min Read
byRobert Lemos, Contributing Writer
GitHub Copilot's logo on an iPhone screen, laying on a keyboard
Vulnerabilities & Threats
New Jailbreaks Allow Users to Manipulate GitHub Copilot
New Jailbreaks Allow Users to Manipulate GitHub Copilot
Jan 30, 2025
|
1 Min Read
byNate Nelson, Contributing Writer
Person holing a tablet; above the tablet, the words "PENETRATION TEST"
Vulnerabilities & Threats
Automated Pen Testing Is Improving — Slowly
Automated Pen Testing Is Improving — Slowly
Jan 30, 2025
|
1 Min Read
byAlex Haynes, Chief Information Security Officer, IBS Software
An Oauth concept image with people sitting on and walking around the word Oauth
Application Security
OAuth Flaw Exposed Millions of Airline Users to Account Takeovers
OAuth Flaw Exposed Millions of Airline Users to Account Takeovers
Jan 28, 2025
|
1 Min Read
byJai Vijayan, Contributing Writer
Digital world map in shades of blue
Cyber Risk
Reporting a Breach or Vuln? Be Sure Your Lawyer's on Call
Reporting a Breach or Vuln? Be Sure Your Lawyer's on Call
Jan 28, 2025
|
1 Min Read
byRobert Lemos, Contributing Writer
Person types on a laptop keyboard; a robot labeled "Ai" floats above the keyboard
Сloud Security
For $50, Cyberattackers Can Use GhostGPT to Write Malicious Code
For $50, Cyberattackers Can Use GhostGPT to Write Malicious Code
Jan 27, 2025
|
1 Min Read
byJai Vijayan, Contributing Writer
PR Logo
Application Security
Spectral Capital Files Quantum Cybersecurity Patent
Spectral Capital Files Quantum Cybersecurity Patent
Jan 27, 2025
|
1 Min Read
PR Logo
Application Security
CISA Calls For Action to Close the Software Understanding Gap
CISA Calls For Action to Close the Software Understanding Gap
Jan 23, 2025
|
1 Min Read
Ivanti logo on the side of a beige building with blue tinted window
Vulnerabilities & Threats
CISA: Ivanti Vulns Chained Together in Cyberattack Onslaught
CISA: Ivanti Vulns Chained Together in Cyberattack Onslaught
Jan 23, 2025
|
1 Min Read
byKristina Beek, Associate Editor, Dark Reading
A corkboard with six post-it notes of various colors saying "yes," "no," "maybe," "don't know," and "don't care."
Cyber Risk
Security Needs to Start Saying 'No' Again
Security Needs to Start Saying ‘No’ Again
Jan 22, 2025
|
1 Min Read
byJoan Goodchild, Contributing Writer
A pile of red block with silhouettes on one side.
Сloud Security
Cisco Previews AI Defenses to Cloud Security Platform
Cisco Previews AI Defenses to Cloud Security Platform
Jan 21, 2025
|
1 Min Read
byJeffrey Schwartz, Contributing Writer
Icons for TikTok and REDnote displayed on mobile device screen
Threat Intelligence
Has the TikTok Ban Already Backfired on US Cybersecurity?
Has the TikTok Ban Already Backfired on US Cybersecurity?
Jan 17, 2025
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
A shoe polish kit
Vulnerabilities & Threats
Trusted Apps Sneak a Bug Into the UEFI Boot Process
Trusted Apps Sneak a Bug Into the UEFI Boot Process
Jan 16, 2025
|
1 Min Read
byNate Nelson, Contributing Writer
Closed padlock on digital background
Application Security
Microsoft Rings in 2025 With Record Security Update
Microsoft Rings in 2025 With Record Security Update
Jan 14, 2025
|
1 Min Read
byJai Vijayan, Contributing Writer
Microsoft logo signage on a building
Application Security
Microsoft Cracks Down on Malicious Copilot AI Use
Microsoft Cracks Down on Malicious Copilot AI Use
Jan 13, 2025
|
1 Min Read
byKristina Beek, Associate Editor, Dark Reading
A dictionary listing for "deja vu"
Vulnerabilities & Threats
Threat Actors Exploit a Critical Ivanti RCE Bug, Again
Threat Actors Exploit a Critical Ivanti RCE Bug, Again
Jan 10, 2025
|
1 Min Read
byNate Nelson, Contributing Writer
Satellite view of a typhoon in the Philippines
Cyberattacks & Data Breaches
Hacking Group 'Silk Typhoon' Linked to US Treasury Breach
Hacking Group 'Silk Typhoon' Linked to US Treasury Breach
Jan 9, 2025
|
1 Min Read
byKristina Beek, Associate Editor, Dark Reading
The letters AI made out of binary code
Vulnerabilities & Threats
New AI Challenges Will Test CISOs & Their Teams in 2025
New AI Challenges Will Test CISOs & Their Teams in 2025
Jan 9, 2025
|
1 Min Read
byJosh Lemos, CISO, GitLab
Green Bay Packers' fans cheer during a game against the Indianapolis Colts in Green Bay, Wisconsin
Cyberattacks & Data Breaches
Green Bay Packers' Online Pro Shop Sacked by Payment Skimmer
Green Bay Packers' Online Pro Shop Sacked by Payment Skimmer
Jan 8, 2025
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Mobile device in pocket with Telegram app displayed
Cybersecurity Operations
Sharing of Telegram User Data Surges After CEO Arrest
Sharing of Telegram User Data Surges After CEO Arrest
Jan 7, 2025
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
Close up of the US Treasury Building on the back of the US $10 bill
Cyberattacks & Data Breaches
CISA: Third-Party Data Breach Limited to Treasury Dept.
CISA: Third-Party Data Breach Limited to Treasury Dept.
Jan 7, 2025
|
1 Min Read
byKristina Beek, Associate Editor, Dark Reading
a sign with the words 'open source' written in blue
Application Security
Veracode Buys Package Analysis Technology From Phylum
Veracode Buys Package Analysis Technology From Phylum
Jan 7, 2025
|
1 Min Read
byFahmida Y. Rashid, Managing Editor, Features
AI code generation keyboard developer
Application Security
Will AI Code Generators Overcome Their Insecurities This Year?
Will AI Code Generators Overcome Their Insecurities This Year?
Jan 6, 2025
|
1 Min Read
byRobert Lemos, Contributing Writer
Sharks circling a computer
Threat Intelligence
Thousands of BeyondTrust Systems Remain Exposed
Thousands of BeyondTrust Systems Remain Exposed
Jan 3, 2025
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
Chrome browser extension app on an iPhone
Application Security
Chrome Extension Compromises Highlight Software Supply Challenges
Chrome Extension Compromises Highlight Software Supply Challenges
Jan 3, 2025
|
1 Min Read
byRobert Lemos, Contributing Writer
PR Logo
Application Security
CDAO Sponsors Crowdsourced AI Assurance Pilot in the Context of Military Medicine
CDAO Sponsors Crowdsourced AI Assurance Pilot in the Context of Military Medicine
Jan 2, 2025
|
1 Min Read

Editor's Choice

Human finger pointing to the word "deepseek" in blue on a computer screen with the words "into the unknown" under it
Cyber Risk
DeepSeek AI Fails Multiple Security Tests, Raising Red Flag for BusinessesBiz Beware: DeepSeek AI Fails Multiple Security Tests
byElizabeth Montalbano, Contributing Writer
Feb 11, 2025
4 Min Read
Binary code floating trough space on an angle
Cyberattacks & Data Breaches
Salt Typhoon's Impact on the US & BeyondSalt Typhoon's Impact on the US & Beyond
byMichael McLaughlin, Jillian Cashand 1 more
Feb 11, 2025
4 Min Read
Five heads on matchsticks; flames grew higher toward the right of image
Cybersecurity Operations
Analyst Burnout Is an Advanced Persistent ThreatAnalyst Burnout Is an Advanced Persistent Threat
byWilliam MacMillan
Feb 10, 2025
4 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Events
More Events
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe