Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

A woman typing on a keyboard in the background and digital spheres connected to one another in the foreground. The middle one says VPN
Threat Intelligence
Attackers Target Check Point VPNs to Access Corporate NetworksAttackers Target Check Point VPNs to Access Corporate Networks

Using VPNs as an initial access vector is ironic, given that security is the very reason enterprises employ them in the first place.

byNate Nelson, Contributing Writer
May 28, 2024
|
1 Min Read
PR Logo
Application Security
Concentric AI to Unveil Data Security Remediation and Compliance Reporting Capabilities at Infosecurity Europe 2024Concentric AI to Unveil Data Security Remediation, Compliance Reporting at Infosecurity Europe 2024
May 23, 2024
1 Min Read
Concept image of application programming interface
Application Security
Critical Netflix Genie Bug Opens Big Data Orchestration to RCECritical Netflix Genie Bug Opens Big Data Orchestration to RCE
byJai Vijayan, Contributing Writer
May 22, 2024
1 Min Read
Finger pushing on the email icon to connect with other people.
Application Security
OpenSSF Siren to Share Threat Intelligence for Open Source SoftwareOpenSSF Siren to Share Threat Intelligence for Open Source Software
byDark Reading Staff
May 21, 2024
1 Min Read
Laptop computer displaying Google Workspace apps
Application Security
Google Pitches Workspace as Microsoft Email Alternative, Citing CSRB ReportGoogle Pitches Workspace as Microsoft Email Alternative, Citing CSRB
byJai Vijayan, Contributing Writer
May 20, 2024
1 Min Read
A statue of Paul Bunyan holding an ax
Сloud Security
Critical Bug Allows DoS, RCE, Data Leaks in All Major Cloud PlatformsCritical Bug Allows DoS, RCE, Data Leaks in All Major Cloud Platforms
byNate Nelson, Contributing Writer
May 20, 2024
1 Min Read
Row of open laundromat washing machines
ICS/OT Security
Students Spot Washing Machine App Flaw That Gives Out Free Cycles
Students Spot Washing Machine App Flaw That Gives Out Free Cycles
May 20, 2024
|
1 Min Read
byKristina Beek, Associate Editor, Dark Reading
digital shield in a man's hand
Сloud Security
10 Ways a Digital Shield Protects Apps and APIs
10 Ways a Digital Shield Protects Apps and APIs
May 17, 2024
|
1 Min Read
byJoshua Goldfarb
A brown leather patch sewn on fabric
Vulnerabilities & Threats
Patch Now: Another Google Zero-Day Under Exploit in the Wild
Patch Now: Another Google Zero-Day Under Exploit in the Wild
May 16, 2024
|
1 Min Read
byDark Reading Staff
A blue coded background with a red and purple triangle on top and a fish hook going through it
Threat Intelligence
Scammers Fake Docusign Templates to Blackmail & Steal From Companies
Scammers Fake Docusign Templates to Blackmail & Steal From Companies
May 15, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Closeup of mix many different multicolored Dutch tulips in a garden border near Amsterdam, Holland / Netherlands
Vulnerabilities & Threats
Microsoft Windows DWM Zero-Day Poised for Mass Exploit
Microsoft Windows DWM Zero-Day Poised for Mass Exploit
May 14, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Boxes of Band-Aids in drugstore aisle
Vulnerabilities & Threats
Dangerous Google Chrome Zero-Day Allows Sandbox Escape
Dangerous Google Chrome Zero-Day Allows Sandbox Escape
May 14, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
A screen showing technology icons such as keys, 0 and 1, and wireless signal, in hexagons.
Sponsored Content
A Comprehensive Approach to SAP Security
A Comprehensive Approach to SAP Security
May 13, 2024
|
1 Min Read
Mobile screen showing F5 logo
Application Security
2 (or 5) Bugs in F5 Asset Manager Allow Full Takeover, Hidden Accounts
2 (or 5) Bugs in F5 Asset Manager Allow Full Takeover, Hidden Accounts
May 9, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Microsoft company logo on building
Application Security
Microsoft Will Hold Executives Accountable for Cybersecurity
Microsoft Will Hold Executives Accountable for Cybersecurity
May 8, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
"LLM" in a dialogue box; "LARGE LANGUAGE MODEL" below it
Application Security
LLMs & Malicious Code Injections: 'We Have to Assume It's Coming'
LLMs & Malicious Code Injections: 'We Have to Assume It's Coming'
May 6, 2024
|
1 Min Read
byJeffrey Schwartz, Contributing Writer
PR Logo
Application Security
Dazz Unveils AI-Powered Automated Remediation for Application Security Posture Management
Dazz Unveils AI-Powered Automated Remediation for Application Security Posture Management
May 3, 2024
|
1 Min Read
A green spider lurking on a leaf
Application Security
Critical GitLab Bug Under Exploit Enables Account Takeover, CISA Warns
Critical GitLab Bug Under Exploit Enables Account Takeover, CISA Warns
May 3, 2024
|
1 Min Read
byNathan Eddy, Contributing Writer
Flag of North Korea
Сloud Security
DPRK's Kimsuky APT Abuses Weak DMARC Policies, Feds Warn
DPRK's Kimsuky APT Abuses Weak DMARC Policies, Feds Warn
May 2, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
A yellow sticky note on a keyboard with a username and password written on it
Application Security
Dropbox Breach Exposes Customer Credentials, Authentication Data
Dropbox Breach Exposes Customer Credentials, Authentication Data
May 2, 2024
|
1 Min Read
byElizabeth Montalbano, Contributing Writer
The Microsoft logo
Сloud Security
Microsoft Graph API Emerges as a Top Attacker Tool to Plot Data Theft
Microsoft Graph API Emerges as a Top Attacker Tool to Plot Data Theft
May 2, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Female hand showing thumbs down failure hand sign gesture.
Cyberattacks & Data Breaches
UnitedHealth Congressional Testimony Reveals Rampant Security Fails
UnitedHealth Congressional Testimony Reveals Rampant Security Fails
May 1, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Hand about to tap the letters API on a screen
Application Security
Shadow APIs: An Overlooked Cyber-Risk for Orgs
Shadow APIs: An Overlooked Cyber-Risk for Orgs
May 1, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
A Qantas plane taking off
Cyber Risk
Qantas Customers' Boarding Passes Exposed in Flight App Mishap
Qantas Customers' Boarding Passes Exposed in Flight App Mishap
May 1, 2024
|
1 Min Read
byDark Reading Staff
R programming language inscription against laptop keyboard and code background
Application Security
R Programming Bug Exposes Orgs to Vast Supply Chain Risk
R Programming Bug Exposes Orgs to Vast Supply Chain Risk
Apr 29, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Man in a suit drawing development graph strategy on gray wall
Cybersecurity Operations
CISO Corner: Evil SBOMs; Zero-Trust Pioneer Slams Cloud Security; MITRE's Ivanti Issue
CISO Corner: Evil SBOMs; ZT Pioneer Slams Cloud Security; MITRE's Ivanti Issue
Apr 26, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Software components hex blue connected
Application Security
Cyberattack Gold: SBOMs Offer an Easy Census of Vulnerable Software
Cyberattack Gold: SBOMs Offer an Easy Census of Vulnerable Software
Apr 26, 2024
|
1 Min Read
byRobert Lemos, Contributing Writer
Person using a laptop computer with social engineering icon on virtual screen
Application Security
Attacker Social-Engineered Backdoor Code Into XZ Utils
Attacker Social-Engineered Backdoor Code Into XZ Utils
Apr 24, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Hand typing on a computer laptop
Threat Intelligence
Hackers Create Legit Phishing Links With Ghost GitHub, GitLab Comments
Hackers Create Legit Phishing Links With Ghost GitHub, GitLab Comments
Apr 23, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Blue eye with electronic camera design overlay
Cybersecurity Operations
US Gov Slaps Visa Restrictions on Spyware Honchos
US Gov Slaps Visa Restrictions on Spyware Honchos
Apr 23, 2024
|
1 Min Read
byDark Reading Staff
Symbols in interconnected spheres in front of a purple and blue background
Endpoint Security
Zero Trust Takes Over: 63% of Orgs Implementing Globally
Zero Trust Takes Over: 63% of Orgs Implementing Globally
Apr 22, 2024
|
1 Min Read
byDark Reading Staff
PR Logo
Application Security
Miggo Launches Application Detection and Response (ADR) Solution
Miggo Launches Application Detection and Response (ADR) Solution
Apr 19, 2024
|
1 Min Read
Lastpass webpage logo magnified through a looking glass
Cyberattacks & Data Breaches
Multiple LastPass Users Lose Master Passwords to Ultra-Convincing Scam
Multiple LastPass Users Lose Master Passwords to Ultra-Convincing Scam
Apr 19, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
The letters EDR/XDR amid binary code
Application Security
Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware
Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware
Apr 19, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Cones and spools of colorful sewing thread organized by color from red, orange, yellow, blue
Application Security
Sneaky Shellcode: Windows Fibers Offer EDR-Proof Code Execution
Sneaky Shellcode: Windows Fibers Offer EDR-Proof Code Execution
Apr 18, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading

Editor's Choice

Pegasus Spyware concept with binary code background
Endpoint Security
WhatsApp: NSO Group Operates Pegasus Spyware for CustomersWhatsApp: NSO Group Operates Pegasus Spyware for Customers
byJai Vijayan, Contributing Writer
Nov 18, 2024
4 Min Read
Laptop with Palo Alto networks logo
Cyberattacks & Data Breaches
Palo Alto Networks Patches Critical Zero-Day Firewall BugPalo Alto Networks Patches Critical Zero-Day Firewall Bug
byBecky Bracken, Senior Editor, Dark Reading
Nov 18, 2024
3 Min Read
ChatGPT, typed out on a screen
Сloud Security
ChatGPT Exposes Its Instructions, Knowledge & OS FilesChatGPT Exposes Its Instructions, Knowledge & OS Files
byNate Nelson, Contributing Writer
Nov 15, 2024
4 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Events
More Events
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe