Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

Microsoft logo signage on a building
Application Security
Microsoft Cracks Down on Malicious Copilot AI UseMicrosoft Cracks Down on Malicious Copilot AI Use

According to the tech giant, it has observed a threat group seeking out vulnerable customer accounts using generative AI, then creating tools to abuse these services.

byKristina Beek, Associate Editor, Dark Reading
Jan 13, 2025
|
1 Min Read
A dictionary listing for "deja vu"
Vulnerabilities & Threats
Threat Actors Exploit a Critical Ivanti RCE Bug, AgainThreat Actors Exploit a Critical Ivanti RCE Bug, Again
byNate Nelson, Contributing Writer
Jan 10, 2025
1 Min Read
Satellite view of a typhoon in the Philippines
Cyberattacks & Data Breaches
Hacking Group 'Silk Typhoon' Linked to US Treasury BreachHacking Group 'Silk Typhoon' Linked to US Treasury Breach
byKristina Beek, Associate Editor, Dark Reading
Jan 9, 2025
1 Min Read
The letters AI made out of binary code
Vulnerabilities & Threats
New AI Challenges Will Test CISOs & Their Teams in 2025New AI Challenges Will Test CISOs & Their Teams in 2025
byJosh Lemos
Jan 9, 2025
1 Min Read
Green Bay Packers' fans cheer during a game against the Indianapolis Colts in Green Bay, Wisconsin
Cyberattacks & Data Breaches
Green Bay Packers' Online Pro Shop Sacked by Payment SkimmerGreen Bay Packers' Online Pro Shop Sacked by Payment Skimmer
byTara Seals, Managing Editor, News, Dark Reading
Jan 8, 2025
1 Min Read
Mobile device in pocket with Telegram app displayed
Cybersecurity Operations
Sharing of Telegram User Data Surges After CEO ArrestSharing of Telegram User Data Surges After CEO Arrest
byBecky Bracken, Senior Editor, Dark Reading
Jan 7, 2025
1 Min Read
Close up of the US Treasury Building on the back of the US $10 bill
Cyberattacks & Data Breaches
CISA: Third-Party Data Breach Limited to Treasury Dept.
CISA: Third-Party Data Breach Limited to Treasury Dept.
Jan 7, 2025
|
1 Min Read
byKristina Beek, Associate Editor, Dark Reading
a sign with the words 'open source' written in blue
Application Security
Veracode Buys Package Analysis Technology From Phylum
Veracode Buys Package Analysis Technology From Phylum
Jan 7, 2025
|
1 Min Read
byFahmida Y. Rashid, Managing Editor, Features
AI code generation keyboard developer
Application Security
Will AI Code Generators Overcome Their Insecurities This Year?
Will AI Code Generators Overcome Their Insecurities This Year?
Jan 6, 2025
|
1 Min Read
byRobert Lemos, Contributing Writer
Sharks circling a computer
Threat Intelligence
Thousands of BeyondTrust Systems Remain Exposed
Thousands of BeyondTrust Systems Remain Exposed
Jan 3, 2025
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
Chrome browser extension app on an iPhone
Application Security
Chrome Extension Compromises Highlight Software Supply Challenges
Chrome Extension Compromises Highlight Software Supply Challenges
Jan 3, 2025
|
1 Min Read
byRobert Lemos, Contributing Writer
PR Logo
Application Security
CDAO Sponsors Crowdsourced AI Assurance Pilot in the Context of Military Medicine
CDAO Sponsors Crowdsourced AI Assurance Pilot in the Context of Military Medicine
Jan 2, 2025
|
1 Min Read
Servers falling down sideways
Vulnerabilities & Threats
Unpatched Active Directory Flaw Can Crash Any Microsoft Server
Unpatched Active Directory Flaw Can Crash Any Microsoft Server
Jan 2, 2025
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
PR Logo
Application Security
VicOne and Zero Day Initiative (ZDI) to Lead Pwn2Own Automotive
VicOne and Zero Day Initiative (ZDI) to Lead Pwn2Own Automotive
Jan 2, 2025
|
1 Min Read
A hand about to press a large digital button marked AI on a screen
Cyber Risk
6 AI-Related Security Trends to Watch in 2025
6 AI-Related Security Trends to Watch in 2025
Dec 31, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
$10 bill closeup of US Treasury Building
Cyberattacks & Data Breaches
Chinese State Hackers Breach US Treasury Department
Chinese State Hackers Breach US Treasury Department
Dec 30, 2024
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
A face swap deepfake in video edit
Cyberattacks & Data Breaches
Deepfakes, Quantum Attacks Loom Over APAC in 2025
Deepfakes, Quantum Attacks Loom Over APAC in 2025
Dec 30, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Cute bug on a leaf
Vulnerabilities & Threats
Fortinet Addresses Unpatched Critical RCE Vector
Fortinet Addresses Unpatched Critical RCE Vector
Dec 19, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Apache's logo on a mobile phone screen
Application Security
Orgs Scramble to Fix Actively Exploited Bug in Apache Struts 2
Orgs Scramble to Fix Actively Exploited Bug in Struts 2
Dec 19, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
A redacted document with a magnifying glass and a whistle
Data Privacy
Wald.ai Launches Data Loss Protection for AI Platforms
Wald.ai Launches Data Loss Protection for AI Platforms
Dec 18, 2024
|
1 Min Read
byFahmida Y. Rashid, Managing Editor, Features
PR logo
Application Security
Delinea Joins CVE Numbering Authority Program
Delinea Joins CVE Numbering Authority Program
Dec 17, 2024
|
1 Min Read
A hand at a keyboard overlaid with an AI graphic
Application Security
Does Desktop AI Come With a Side of Risk?
Does Desktop AI Come With a Side of Risk?
Dec 16, 2024
|
1 Min Read
byRobert Lemos, Contributing Writer
In Bavaria, boy driving pedal go-kart on a tiled driveway is chased by a running woman. Both are smiling. A house and trees are in the background.
Application Security
Citizen Development Moves Too Fast for Its Own Good
Citizen Development Moves Too Fast for Its Own Good
Dec 16, 2024
|
1 Min Read
byMichael Bargury, CTO & Co-Founder, Zenity
Elizabeth Taylor in the 1963 movie Cleopatra
Application Security
Cleo MFT Zero-Day Exploits Are About to Escalate, Analysts Warn
Cleo MFT Zero-Day Exploits Are About to Escalate
Dec 13, 2024
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
open-source tools
Application Security
Generative AI Security Tools Go Open Source
Generative AI Security Tools Go Open Source
Dec 13, 2024
|
1 Min Read
byRobert Lemos, Contributing Writer
A Coral AI USB accelerator
Vulnerabilities & Threats
With 'TPUXtract,' Attackers Can Steal Orgs' AI Models
With 'TPUXtract,' Attackers Can Steal Orgs' AI Models
Dec 13, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Statue of Prometheus, viewed from the back
Сloud Security
336K Prometheus Instances Exposed to DoS, 'Repojacking'
336K Prometheus Instances Exposed to DoS, 'Repojacking'
Dec 12, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Krispy Kreme doughnut assortment on plate
Cyberattacks & Data Breaches
Krispy Kreme Doughnut Delivery Gets Cooked in Cyberattack
Krispy Kreme Doughnut Delivery Gets Cooked in Cyberattack
Dec 11, 2024
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
A glowing purple and pink key, with dots and numbers in the background
Cyber Risk
Symmetrical Cryptography Pioneer Targets the Post-Quantum Era
Symmetrical Cryptography Pioneer Targets the Post-Quantum Era
Dec 11, 2024
|
1 Min Read
byKristina Beek, Associate Editor, Dark Reading
A woman sitting at a laptop and holding a mobile device, the screens of both displaying a green check mark in a circle
Cyberattacks & Data Breaches
Researchers Crack Microsoft Azure MFA in an Hour
Researchers Crack Microsoft Azure MFA in an Hour
Dec 11, 2024
|
1 Min Read
byElizabeth Montalbano, Contributing Writer
A patchwork quilt
Application Security
Actively Exploited Zero-Day, Critical RCEs Lead Microsoft Patch Tuesday
Microsoft Fixes Active Zero-Day, Critical RCEs on Patch Tuesday
Dec 10, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
The Debating Chamber of the Scottish Parliament in Holyrood, Edinburgh, Scotland
Cyberattacks & Data Breaches
Scottish Parliament TV at Risk From Deepfakes
Scottish Parliament TV at Risk From Deepfakes
Dec 10, 2024
|
1 Min Read
byKristina Beek, Associate Editor, Dark Reading
The Visual Studio Code logo
Cyberattacks & Data Breaches
Sprawling 'Operation Digital Eye' Attack Targets European IT Orgs
'Operation Digital Eye' Attack Targets European IT Orgs
Dec 10, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
The words "zero-day" written in a line of code on a computer screen
Application Security
Microsoft NTLM Zero-Day to Remain Unpatched Until April
Microsoft NTLM Zero-Day to Remain Unpatched Until April
Dec 9, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
a patchwork quilt
Vulnerabilities & Threats
Google Launches Open Source Patch Validation Tool
Google Launches Open Source Patch Validation Tool
Dec 9, 2024
|
1 Min Read
byJennifer Lawinski, Contributing Writer

Editor's Choice

"HIPAA Violation" written on a form, surrounded by medical supplies
Vulnerabilities & Threats
New HIPAA Cybersecurity Rules Pull No PunchesNew HIPAA Cybersecurity Rules Pull No Punches
byNate Nelson, Contributing Writer
Jan 3, 2025
6 Min Read
Tencent's website homepage
Cybersecurity Operations
Pentagon Adds Chinese Gaming Giant Tencent to Federal BanPentagon Adds Chinese Gaming Giant Tencent to Federal Ban
byKristina Beek, Associate Editor, Dark Reading
Jan 7, 2025
1 Min Read
A hand about to press a large digital button marked AI on a screen
Cyber Risk
6 AI-Related Security Trends to Watch in 20256 AI-Related Security Trends to Watch in 2025
byJai Vijayan, Contributing Writer
Dec 31, 2024
6 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe