Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

Image of hands on a keyboard
Application Security
PyPI Mandates 2FA, Plans Google Titan Key GiveawayPyPI Mandates 2FA, Plans Google Titan Key Giveaway

Python's most popular package manager is intent on securing the supply chain by requiring developers to enable two-factor authentication.

byDark Reading Staff
Jul 12, 2022
|
1 Min Read
Image of a Windows 10 update page, with a magnifying glass zooming in on it.
Application Security
Microsoft Issues Fixes for 84 Vulnerabilities: Here's What to Patch NowMicrosoft Issues Fixes for 84 Vulnerabilities: Here's What to Patch Now
byJai Vijayan, Contributing Writer
Jul 12, 2022
1 Min Read
Image of a sea of Escape keys on a keyboard
Application Security
Don't Have a COW: Containers on Windows and Other Container-Escape ResearchDon't Have a COW: Containers on Windows and Other Container-Escape Research
byEricka Chickowski, Contributing Writer
Jul 12, 2022
1 Min Read
Computer keyboard button that reads "secure payment" to illustrate online payment fraud
Application Security
Online Payment Fraud Expected to Cost $343B Over Next 5 YearsOnline Payment Fraud Expected to Cost $343B Over Next 5 Years
byDark Reading Staff
Jul 11, 2022
1 Min Read
Windows icon on computer keyboard key
Application Security
Microsoft Reverses Course on Blocking Office Macros by DefaultMicrosoft Reverses Course on Blocking Office Macros by Default
byJai Vijayan, Contributing Writer
Jul 8, 2022
1 Min Read
thumbnail
Application Security
Swimlane Secures $70M Growth Round to Fuel Global Expansion of Next Generation Low-Code Security Automation PlatformSwimlane Secures $70M Growth Round to Fuel Global Expansion of Next Generation Low-Code Security Automation Platform
Jul 8, 2022
1 Min Read
Application Security
Fortress Information Security Sponsors Open Web Application Security Project To Work on Industry-Wide Software Bill of Materials Standards
Fortress Information Security Sponsors Open Web Application Security Project To Work on Industry-Wide Software Bill of Materials Standards
Jul 7, 2022
|
1 Min Read
Bitcoin image
Application Security
Buggy 'Log in With Google' API Implementation Opens Crypto Wallets to Account Takeover
Buggy 'Log in With Google' API Implementation Opens Crypto Wallets to Account Takeover
Jul 7, 2022
|
1 Min Read
byNathan Eddy, Contributing Writer
Illustration of a glowing key outline superimposed on a circuit board's CPU to symbolize encryption
Application Security
Inside NIST's 4 Crypto Algorithms for a Post-Quantum World
Inside NIST's 4 Crypto Algorithms for a Post-Quantum World
Jul 7, 2022
|
1 Min Read
byRobert Lemos, Contributing Writer
Concept art of an eye on a computer screen to illustrate spyware
Application Security
Apple Debuts Spyware Protection for State-Sponsored Cyberattacks
Apple Debuts Spyware Protection for State-Sponsored Cyberattacks
Jul 6, 2022
|
1 Min Read
byDark Reading Staff
Airplane
Application Security
Cloud Misconfig Exposes 3TB of Sensitive Airport Data in Amazon S3 Bucket: 'Lives at Stake'
Cloud Misconfig Exposes 3TB of Sensitive Airport Data in Amazon S3 Bucket: 'Lives at Stake'
Jul 6, 2022
|
1 Min Read
byNathan Eddy, Contributing Writer
Illustration of glowing lines of blue binary code radiating out like fiber optic cables
Application Security
API Security Losses Total Billions, But It's Complicated
API Security Losses Total Billions, But It's Complicated
Jun 30, 2022
|
1 Min Read
byRobert Lemos, Contributing Writer
Illustration of binary code, with ones and zeroes both flat on the surface and rising above as extruded solids
Application Security
Only 3% of Open Source Software Bugs Are Actually Attackable, Researchers Say
Only 3% of Open Source Software Bugs Are Actually Attackable, Researchers Say
Jun 24, 2022
|
1 Min Read
byEricka Chickowski, Contributing Writer
Application Security
Synopsys Completes Acquisition of WhiteHat Security
Synopsys Completes Acquisition of WhiteHat Security
Jun 22, 2022
|
1 Min Read
open source
Application Security
Why Financial Institutions Must Double Down on Open Source Investments
Why Financial Institutions Must Double Down on Open Source Investments
Jun 21, 2022
|
1 Min Read
byGabriele Columbro
Digital chain
Application Security
Open Source Software Security Begins to Mature
Open Source Software Security Begins to Mature
Jun 21, 2022
|
1 Min Read
byRobert Lemos, Contributing Writer
logo in a gray background |
Application Security
How to Secure a High-Profile Event Like the Super Bowl
How to Secure a High-Profile Event Like the Super Bowl
Jun 10, 2022
byDark Reading Staff
logo in a gray background |
Application Security
Application Security Testing Is on the Mend With Automated Remediation
Application Security Testing Is on the Mend With Automated Remediation
Jun 10, 2022
byDark Reading Staff
logo in a gray background |
Application Security
Noname: Proactiveness Is the Name of the Game in App Security
Noname: Proactiveness Is the Name of the Game in App Security
Jun 9, 2022
byDark Reading Staff
Application Security
Bugcrowd Expands Pen Testing Solutions with New Platform Services
Bugcrowd Expands Pen Testing Solutions with New Platform Services
Jun 7, 2022
|
1 Min Read
image of a hopscotch board drawn in chalk on pavement
Application Security
Gathering Momentum: 3 Steps Forward to Expand SBOM Use
Gathering Momentum: 3 Steps Forward to Expand SBOM Use
Jun 6, 2022
|
1 Min Read
byEricka Chickowski, Contributing Writer
Concept art of a phishing lure on a computer
Application Security
Phishers Having a Field Day on WhatsApp, Telegraph
Phishers Having a Field Day on WhatsApp, Telegraph
Jun 2, 2022
|
1 Min Read
byDark Reading Staff
Application Security
Neosec Introduces Expert Managed Threat Hunting Service for Detecting and Investigating API Abuse and Vulnerabilities
Neosec Introduces Expert Managed Threat Hunting Service for Detecting and Investigating API Abuse and Vulnerabilities
Jun 2, 2022
|
1 Min Read
image of stacks of shiny gold bitcoins
Application Security
'Clipminer' Malware Actors Steal $1.7 Million Using Clipboard Hijacking
'Clipminer' Malware Actors Steal $1.7 Million Using Clipboard Hijacking
Jun 2, 2022
|
1 Min Read
byNathan Eddy, Contributing Writer
photo of a Marine peering through binoculars
Application Security
EnemyBot Puts Enterprises in the Crosshairs With Raft of '1-Day' Bugs
EnemyBot Puts Enterprises in the Crosshairs With Raft of '1-Day' Bugs
Jun 1, 2022
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Application Security
New CyberCatch Research Discovers Alarming Increase in Cyber Vulnerabilities for Small and Medium Sized Businesses in US and Canada
New CyberCatch Research Discovers Alarming Increase in Cyber Vulnerabilities for Small and Medium Sized Businesses in US and Canada
May 31, 2022
|
1 Min Read
multiple computer screens in SOC
Application Security
Critical OAS Bugs Open Industrial Systems to Takeover
Critical OAS Bugs Open Industrial Systems to Takeover
May 28, 2022
|
1 Min Read
byJai Vijayan, Contributing Writer
Image of various browser icons, with Chrome in the center
Application Security
ChromeLoader Malware Hijacks Browsers With ISO Files
ChromeLoader Malware Hijacks Browsers With ISO Files
May 27, 2022
|
1 Min Read
byNathan Eddy, Contributing Writer
javascript on computer screen
Application Security
Third-Party Scripts on Websites Present a 'Broad & Open' Attack Vector
Third-Party Scripts on Websites Present a 'Broad & Open' Attack Vector
May 26, 2022
|
1 Min Read
byJai Vijayan, Contributing Writer
Application Security
JFrog Launches Project Pyrsia to Help Prevent Software Supply Chain Attacks
JFrog Launches Project Pyrsia to Help Prevent Software Supply Chain Attacks
May 25, 2022
|
1 Min Read
Application Security
Zero-Click Zoom Bug Allows Code Execution Just by Sending a Message
Zero-Click Zoom Bug Allows Code Execution Just by Sending a Message
May 25, 2022
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Concept illustration showing unlocked padlock beside a Microsoft logo
Application Security
Microsoft Elevation-of-Privilege Vulnerabilities Spiked Again in 2021
Microsoft Elevation-of-Privilege Vulnerabilities Spiked Again in 2021
May 24, 2022
|
1 Min Read
byJai Vijayan, Contributing Writer
Concept illustration with Python code on computer screen
Application Security
Malicious Python Repository Package Drops Cobalt Strike on Windows, macOS & Linux Systems
Malicious Python Repository Package Drops Cobalt Strike on Windows, macOS & Linux Systems
May 23, 2022
|
1 Min Read
byJai Vijayan, Contributing Writer
software computer program upgrade concept
Application Security
Partial Patching Still Provides Strong Protection Against APTs
Partial Patching Still Provides Strong Protection Against APTs
May 20, 2022
|
1 Min Read
byJai Vijayan, Contributing Writer
Map showing accessible Kubernetes servers by unique IP
Application Security
Majority of Kubernetes API Servers Exposed to the Public Internet
Majority of Kubernetes API Servers Exposed to the Public Internet
May 19, 2022
|
1 Min Read
byEricka Chickowski, Contributing Writer

Editor's Choice

Pegasus Spyware concept with binary code background
Endpoint Security
WhatsApp: NSO Group Operates Pegasus Spyware for CustomersWhatsApp: NSO Group Operates Pegasus Spyware for Customers
byJai Vijayan, Contributing Writer
Nov 18, 2024
4 Min Read
Laptop with Palo Alto networks logo
Cyberattacks & Data Breaches
Palo Alto Networks Patches Critical Zero-Day Firewall BugPalo Alto Networks Patches Critical Zero-Day Firewall Bug
byBecky Bracken, Senior Editor, Dark Reading
Nov 18, 2024
3 Min Read
ChatGPT, typed out on a screen
Сloud Security
ChatGPT Exposes Its Instructions, Knowledge & OS FilesChatGPT Exposes Its Instructions, Knowledge & OS Files
byNate Nelson, Contributing Writer
Nov 15, 2024
4 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Events
More Events
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe