Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

ServiceNow logo on smartphone screen
Сloud Security
Patch Now: ServiceNow Critical RCE Bugs Under Active ExploitPatch Now: ServiceNow Critical RCE Bugs Under Active Exploit

One threat actor claims to have already gathered email addresses and associated hashes from more than 110 remote IT management databases.

byJai Vijayan, Contributing Writer
Jul 29, 2024
|
1 Min Read
A person's finger tapping a blue screen with the Windows 11 logo on it
Application Security
Microsoft Talks Kernel Drivers Post CrowdStrike OutageMicrosoft Talks Kernel Drivers Post CrowdStrike Outage
byDark Reading Staff
Jul 29, 2024
1 Min Read
Three banners in dark blue, red and light blue that say Login with Facebook, Google, and Twitter, respectively
Endpoint Security
OAuth+XSS Attack Threatens Millions of Web Users With Account TakeoverOAuth+XSS Attack Threatens Millions of Web Users With Account Takeover
byElizabeth Montalbano, Contributing Writer
Jul 29, 2024
1 Min Read
A metal statue of a snake
Threat Intelligence
Targeted PyPi Package Steals Google Cloud Credentials From macOS DevsTargeted PyPi Package Steals Google Cloud Credentials From macOS Devs
byNate Nelson, Contributing Writer
Jul 26, 2024
1 Min Read
A hand holding a virtual AI display
Cyber Risk
Nvidia Embraces LLMs & Commonsense Cybersecurity StrategyNvidia Embraces LLMs & Commonsense Cybersecurity Strategy
byRobert Lemos, Contributing Writer
Jul 26, 2024
1 Min Read
A finger tapping on a blue screen that says Windows 11
Threat Intelligence
Microsoft's Internet Explorer Gets Revived to Lure in Windows VictimsMicrosoft's Internet Explorer Gets Revived to Lure in Windows Victims
byDark Reading Staff
Jul 25, 2024
1 Min Read
Closeup of a green female goblin with long nose and ears
Application Security
'Stargazer Goblin' Amasses Rogue GitHub Accounts to Spread Malware
'Stargazer Goblin' Amasses Rogue GitHub Accounts to Spread Malware
Jul 24, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Magnifying glass over a Windows update notification
Vulnerabilities & Threats
Cyberattackers Exploit Microsoft SmartScreen Bug in Stealer Campaign
Cyberattackers Exploit Microsoft SmartScreen Bug in Stealer Campaign
Jul 24, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Two hamsters beside each other sitting in grass
Cyber Risk
Hamster Kombat Players Threatened by Spyware & Infostealers
Hamster Kombat Players Threatened by Spyware & Infostealers
Jul 24, 2024
|
1 Min Read
byDark Reading Staff
China and Taiwan flags
Threat Intelligence
China's 'Evasive Panda' APT Spies on Taiwan Targets Across Platforms
China's 'Evasive Panda' APT Spies on Taiwan Targets Across Platforms
Jul 23, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
A laptop showing the Microsoft WIndows 11 logo
Endpoint Security
Goodbye? Attackers Can Bypass 'Windows Hello' Strong Authentication
Goodbye? Attackers Can Bypass 'Windows Hello' Strong Authentication
Jul 23, 2024
|
1 Min Read
byJeffrey Schwartz, Contributing Writer
Mobile device in a hand with the Tinder app open to a profile
Application Security
Swipe Right for Data Leaks: Dating Apps Expose Location, More
Swipe Right for Data Leaks: Dating Apps Expose Location, More
Jul 22, 2024
|
1 Min Read
byElizabeth Montalbano, Contributing Writer
Quantum entanglement; conceptual artwork of a pair of entangled quantum particles or events
Cyber Risk
Quantum Leap: Advanced Computing Is a Vulnerable Cyber Target
Quantum Leap: Advanced Computing Is a Vulnerable Cyber Target
Jul 22, 2024
|
1 Min Read
byJeffrey Schwartz, Contributing Writer
Brazil and Newcastle United star midfielder Bruno Guimarães playing soccer in his jersey sporting Chinese gambling brand Fun88
Threat Intelligence
Chinese Forced-Labor Ring Sponsors Football Clubs, Hides Behind Stealth Tech
Chinese Crime Ring Sponsors Soccer Clubs, Hides Behind Stealth Tech
Jul 22, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
blue screen of death
Application Security
Fallout From Faulty Friday CrowdStrike Update Persists
Fallout From Faulty Friday CrowdStrike Update Persists
Jul 22, 2024
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
A screen featuring various forms of code
Application Security
Under-Resourced Maintainers Pose Risk to Africa's Open Source Push
Under-Resourced Maintainers Pose Risk to Africa's Open Source Push
Jul 22, 2024
|
1 Min Read
byRobert Lemos, Contributing Writer
A judge's gavel
Application Security
Sizable Chunk of SEC Charges Against SolarWinds Tossed Out of Court
Sizable Chunk of SEC Charges Against SolarWinds Tossed Out of Court
Jul 18, 2024
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
Red button on a computer keyboard that says "email security" in white
Threat Intelligence
20 Million Trusted Domains Vulnerable to Email Hosting Exploits
20 Million Trusted Domains Vulnerable to Email Hosting Exploits
Jul 18, 2024
|
1 Min Read
byElizabeth Montalbano, Contributing Writer
A burning piece of white paper
Threat Intelligence
Microsoft-Signed Chinese Adware Opens the Door to Kernel Privileges
Microsoft-Signed Chinese Adware Opens the Door to Kernel Privileges
Jul 18, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
PR Logo
Application Security
Tumeryk Inc. Launches With Free Gen AI LLM Vulnerability Scanner
Tumeryk Inc. Launches With Free Gen AI LLM Vulnerability Scanner
Jul 17, 2024
|
1 Min Read
PR Logo
Application Security
Top 5 Mistakes Businesses Make When Implementing Zero Trust
Top 5 Mistakes Businesses Make When Implementing Zero Trust
Jul 17, 2024
|
1 Min Read
A lit up orange, yellow, and blue printed circuit board with the letters AI standing on top of it
Threat Intelligence
Orgs Are Finally Making Moves to Mitigate GenAI Risks
Orgs Are Finally Making Moves to Mitigate GenAI Risks
Jul 17, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
PR Logo
Application Security
The Linux Foundation and OpenSSF Release Report on the State of Education in Secure Software Development
The Linux Foundation and OpenSSF Release Report on the State of Education in Secure Software Development
Jul 16, 2024
|
1 Min Read
Blue Security Operations Center key on white conceptual keyboard
Cybersecurity Operations
Cloud Security, PowerShell Expertise Emerge as Key SOC Analyst Skills
Cloud Security, PowerShell Expertise Emerge as Key SOC Analyst Skills
Jul 16, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Leonardslee garden in full bloom, Sussex UK
Threat Intelligence
Well-Established Cybercriminal Ecosystem Blooming in Iraq
Well-Established Cybercriminal Ecosystem Blooming in Iraq
Jul 15, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
PR Logo
Application Security
Lineaje Awarded Contract by the Department of the US Air Force
Lineaje Awarded Contract by the Department of the US Air Force
Jul 12, 2024
|
1 Min Read
GitLab logo on a mobile phone
Application Security
GitLab Sends Users Scrambling Again With New CI/CD Pipeline Takeover Vuln
GitLab Sends Users Scrambling Again With New CI/CD Pipeline Takeover Vuln
Jul 12, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Infostealer concept with male hooded figure agains dark background
Application Security
Attackers Have Been Leveraging Microsoft Zero-Day for 18 Months
Attackers Have Been Leveraging Microsoft Zero-Day for 18 Months
Jul 10, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
NSA headquarters
Application Security
What's Bugging the NSA? A Vuln in Its 'SkillTree' Training Platform
What's Bugging the NSA? A Vuln in Its 'SkillTree' Training Platform
Jul 10, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
stylized drawing of a computer chip with digital key
Endpoint Security
Google Targets Passkey Support to High-Risk Execs, Civil Society
Google Targets Passkey Support to High-Risk Execs, Civil Society
Jul 10, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Camel at outdoor zoo on a sunny day
Threat Intelligence
Houthi-Aligned APT Targets Mideast Militaries With 'GuardZoo' Spyware
Houthi-Aligned APT Targets Mideast Militaries With 'GuardZoo' Spyware
Jul 10, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
"Zero-day exploit" alert icon on display of computer
Application Security
Attackers Already Exploiting Flaws in Microsoft's July Security Update
Attackers Already Exploiting Flaws in Microsoft's July Security Update
Jul 9, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
The word "Javascript" in yellow surrounded by other developer-related words in white
Cyberattacks & Data Breaches
Trojanized jQuery Packages Spread via 'Complex' Supply Chain Attack
Trojanized jQuery Packages Spread via 'Complex' Supply Chain Attack
Jul 9, 2024
|
1 Min Read
byElizabeth Montalbano, Contributing Writer
A full-sized Trojan horse
Application Security
Software Productivity Tools Hijacked to Deliver Infostealers
Software Productivity Tools Hijacked to Deliver Infostealers
Jul 4, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Boxes of bandages in a shopping aisle
Сloud Security
'RegreSSHion' Bug Threatens Takeover of Millions of Linux Systems
'RegreSSHion' Bug Threatens Takeover of Millions of Linux Systems
Jul 1, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading

Editor's Choice

Pegasus Spyware concept with binary code background
Endpoint Security
WhatsApp: NSO Group Operates Pegasus Spyware for CustomersWhatsApp: NSO Group Operates Pegasus Spyware for Customers
byJai Vijayan, Contributing Writer
Nov 18, 2024
4 Min Read
Laptop with Palo Alto networks logo
Cyberattacks & Data Breaches
Palo Alto Networks Patches Critical Zero-Day Firewall BugPalo Alto Networks Patches Critical Zero-Day Firewall Bug
byBecky Bracken, Senior Editor, Dark Reading
Nov 18, 2024
3 Min Read
ChatGPT, typed out on a screen
Сloud Security
ChatGPT Exposes Its Instructions, Knowledge & OS FilesChatGPT Exposes Its Instructions, Knowledge & OS Files
byNate Nelson, Contributing Writer
Nov 15, 2024
4 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Events
More Events
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe