Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

man pointing to cloud

Сloud Security

Open Source Tool Looks for Signals in Noisy AWS Cloud Logs Open Source Tool Looks for Signals in Noisy AWS Cloud Logs

Permiso Security announced Cloud Console Cartographer during Black Hat Asia to help defenders look inside Amazon Web Services events logs for signs of cyberattacks.

byRobert Lemos, Contributing Writer

Apr 18, 2024

|

1 Min Read

A cockroach crawling on software code

Application Security

Delinea Fixes Flaw, but Only After Analyst Goes Public With Disclosure First Delinea Fixes Flaw After Analyst Goes Public With Disclosure First

byBecky Bracken, Senior Editor, Dark Reading

Apr 16, 2024

1 Min Read

A screen showing technology icons such as keys, 0 and 1, and wireless signal, in hexagons.

Sponsored Content

The Need to Secure AI Use Is Real. Are Organizations Prepared?The Need to Secure AI Use Is Real. Are Organizations Prepared?

Apr 15, 2024

1 Min Read

Sponsored Content

Application Security's New Mandate in a DevOps World Application Security's New Mandate in a DevOps World

Apr 15, 2024

1 Min Read

Threat Intelligence

Sisense Password Breach Triggers 'Ominous' CISA Warning Sisense Password Breach Triggers 'Ominous' CISA Warning

byBecky Bracken, Senior Editor, Dark Reading

Apr 11, 2024

1 Min Read

Application Security

Knostic Raises $3.3M for Enterprise GenAI Access Control Knostic Raises $3.3M for Enterprise GenAI Access Control

Apr 11, 2024

1 Min Read

Application Security

Critical Rust Flaw Poses Exploit Threat in Specific Windows Use Cases

Critical Rust Flaw Poses Exploit Threat in Specific Windows Use Cases

byRobert Lemos, Contributing Writer

Green door in the side of a tan brick building

Сloud Security

Expired Redis Service Abused to Use Metasploit Meterpreter Maliciously

Expired Redis Service Abused to Use Metasploit Meterpreter Maliciously

byElizabeth Montalbano, Contributing Writer

Open Source word alphabet letters on puzzle as a background

Application Security

XZ Utils Scare Exposes Hard Truths About Software Security

XZ Utils Scare Exposes Hard Truths About Software Security

byJai Vijayan, Contributing Writer

Application Security

Wyden Releases Draft Legislation to End Federal Dependence on Insecure, Proprietary Software

Wyden Releases Draft Legislation to End Federal Dependence on Insecure, Proprietary Software

Application Security

StrikeReady Raises $12M for AI Security Command Platform

StrikeReady Raises $12M for AI Security Command Platform

Car blueprint 3D blue electric

ICS/OT Security

Software-Defined Vehicle Fleets Face a Twisty Road on Cybersecurity

Software-Defined Vehicle Fleets Face a Twisty Road on Cybersecurity

byRobert Lemos, Contributing Writer

A screen showing technology icons such as keys, 0 and 1, and wireless signal, in hexagons.

Sponsored Content

Commercial WebApp Security Tools Are Too Restrictive

Commercial WebApp Security Tools Are Too Restrictive

Computer programming, coding and AI artificial intelligence software development engaged by skilled coder and prompt engineer

Application Security

How Do We Integrate LLMs Security Into Application Development?

How Do We Integrate LLMs Security Into Application Development?

Image of blue security lock layered over a fluffy white cloud.

Сloud Security

Reconsider Your CNAPP Strategy Using These 5 Scenarios

Reconsider Your CNAPP Strategy Using These 5 Scenarios

byMicrosoft Security

database code viewed on IDE

Application Security

How to Tame SQL Injection

Tools and Techniques to Tame SQL Injection

byRobert Lemos, Contributing Writer

Finger pointing at a touchscreen to a Microsoft word icon on a screen with various Microsoft applications on it

Сloud Security

Feds to Microsoft: Clean Up Your Cloud Security Act Now

Feds to Microsoft: Clean Up Your Cloud Security Act Now

byElizabeth Montalbano, Contributing Writer

Webpage of Azure AI on a desktop computer screen

Application Security

Microsoft Beefs Up Defenses in Azure AI

Microsoft Beefs Up Defenses in Azure AI

byJai Vijayan, Contributing Writer

Electric blue AI chip

Threat Intelligence

Cybercriminals Weigh Options for Using LLMs: Buy, Build, or Break?

Cybercriminals Weigh Options for Using LLMs: Build It or Break?

byRobert Lemos, Contributing Writer

Send us a caption for an image of a businessman flying over an airport security machine while others wait in line

Сloud Security

Name That Edge Toon: Defying Gravity

Name That Edge Toon: Defying Gravity

byJohn Klossner, Cartoonist

Risk board game with tank playing pieces on a map

Сloud Security

CISO Corner: Cyber-Pro Swindle; New Faces of Risk; Cyber Boosts Valuation

CISO Corner: Cyber-Pro Swindle; New Faces of Risk; Cyber & Valuations

byTara Seals, Managing Editor, News, Dark Reading

A school of striped catfish

Сloud Security

Cloud Email Filtering Bypass Attack Works 80% of the Time

Cloud Email Filtering Bypass Attack Works 80% of the Time

Cisco sign outside of the company headquarters

Application Security

Cisco IOS Bugs Allow Unauthenticated, Remote DoS Attacks

Cisco IOS Bugs Allow Unauthenticated, Remote DoS Attacks

byBecky Bracken, Senior Editor, Dark Reading

Hands on keyboard with AI-related screens superimposed

Application Security

Pervasive LLM Hallucinations Expand Code Developer Attack Surface

Pervasive LLM Hallucinations Expand Code Developer Attack Surface

byJai Vijayan, Contributing Writer

Application Security

Patchless Apple M-Chip Vulnerability Allows Cryptography Bypass

Patchless Apple M-Chip Vulnerability Allows Cryptography Bypass

byJai Vijayan, Contributing Writer

Business tycoon with cigar and scotch

Application Security

'Tycoon' Malware Kit Bypasses Microsoft, Google MFA

'Tycoon' Malware Kit Bypasses Microsoft, Google MFA

byElizabeth Montalbano, Contributing Writer

Software developer laptop screen

Cyberattacks & Data Breaches

CISA Seeks to Curtail 'Unforgivable' SQL Injection Defects

CISA Seeks to Curtail 'Unforgivable' SQL Injection Defects

byDark Reading Staff

Application Security

GitHub Developers Hit in Complex Supply Chain Cyberattack

GitHub Developers Hit in Complex Supply Chain Cyberattack

byNathan Eddy, Contributing Writer

Man with sticky notes covering his face and torso

Sponsored Content

What SolarWinds Means for DevSecOps

What SolarWinds Means for DevSecOps

Application Security

Akamai Research Finds 29% of Web Attacks Target APIs

Akamai Research Finds 29% of Web Attacks Target APIs

Name That Toon: Bridge the Gap

Сloud Security

Name That Toon: Bridge the Gap

Name That Toon: Bridge the Gap

byJohn Klossner, Cartoonist

A hand holding a tablet device with a hologram of a digital brain floating above it

Сloud Security

ML Model Repositories: The Next Big Supply Chain Attack Target

ML Model Repositories: The Next Big Supply Chain Attack Target

byJai Vijayan, Contributing Writer

Medical pro using a computer tablet

Cyberattacks & Data Breaches

NHS Breach, HSE Bug Expose Healthcare Data in the British Isles

NHS Breach, HSE Bug Expose Healthcare Data in the British Isles

byNate Nelson, Contributing Writer

Digital wireframe of car with digital background

ICS/OT Security

Heated Seats? Advanced Telematics? Software-Defined Cars Drive Risk

Heated Seats? Advanced Telematics? Software-Defined Cars Drive Risk

byRobert Lemos, Contributing Writer

Pirate standing on treasure pile against ruined ships at sunset

Application Security

'PixPirate' RAT Invisibly Triggers Wire Transfers From Android Devices

'PixPirate' RAT Invisibly Triggers Wire Transfers From Android Devices

byNate Nelson, Contributing Writer

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.