Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

Close-up portrait of a Giant Panda eating bamboo leaves
Сloud Security
China's 'Evasive Panda' APT Debuts High-End Cloud HijackingChina's 'Evasive Panda' APT Debuts High-End Cloud Hijacking

A professional-grade tool set, appropriately dubbed "CloudScout," is infiltrating cloud apps like Microsoft Outlook and Google Drive, targeting sensitive info for exfiltration.

byTara Seals, Managing Editor, News, Dark Reading
Oct 29, 2024
|
1 Min Read
Windows Update running on a laptop screen
Application Security
Windows 'Downdate' Attack Reverts Patched PCs to a Vulnerable StateWindows 'Downdate' Attack Reverts Patched PCs to a Vulnerable State
byJai Vijayan, Contributing Writer
Oct 28, 2024
1 Min Read
White hex code in front of a green light
Application Security
Mozilla: ChatGPT Can Be Manipulated Using Hex CodeMozilla: ChatGPT Can Be Manipulated Using Hex Code
byNate Nelson, Contributing Writer
Oct 28, 2024
1 Min Read
A stylized chip design with the words Vulnhuntr across.
Application Security
Open Source LLM Tool Sniffs Out Python Zero-DaysOpen Source LLM Tool Sniffs Out Python Bugs
byDark Reading Staff
Oct 24, 2024
1 Min Read
Edge Toon winner showing people sitting in a circle pointing to their left.
Application Security
'Shift Left' Gets Pushback, Triggers Security Soul Searching'Shift Left' Gets Pushback, Triggers Security Soul Searching
byRobert Lemos, Contributing Writer
Oct 24, 2024
1 Min Read
Cisco logo on a black wall
Application Security
Cisco ASA, FTD Software Under Active VPN ExploitationCisco ASA, FTD Software Under Active VPN Exploitation
byDark Reading Staff
Oct 24, 2024
1 Min Read
Alcoholic Martinez Cocktail with Gin Vermouth and Orange Peel
Vulnerabilities & Threats
AI Chatbots Ditch Guardrails After 'Deceptive Delight' Cocktail
AI Chatbots Ditch Guardrails After 'Deceptive Delight' Cocktail
Oct 24, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Microsoft SharePoint app seen on-screen with blurred finger pointing at it
Vulnerabilities & Threats
Microsoft SharePoint Vuln Is Under Active Exploit
Microsoft SharePoint Vuln Is Under Active Exploit
Oct 23, 2024
|
1 Min Read
byDark Reading Staff, Dark Reading
Cloud formed using lines connected by points of light to the top right and a network of lines connected by points of light to the bottom left
Сloud Security
Mobile Apps With Millions of Downloads Expose Cloud Credentials
Mobile Apps With Millions of Downloads Expose Cloud Credentials
Oct 23, 2024
|
1 Min Read
byElizabeth Montalbano, Contributing Writer
The words "Hack password" within program code on a computer screen
Vulnerabilities & Threats
OPA for Windows Vulnerability Exposes NTLM Hashes
OPA for Windows Vulnerability Exposes NTLM Hashes
Oct 22, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
CAPTCHA ("I am not a robot") displayed on screen
Cyberattacks & Data Breaches
Tricky CAPTCHA Caught Dropping Lumma Stealer Malware
Tricky CAPTCHA Caught Dropping Lumma Stealer Malware
Oct 22, 2024
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
The phrase APPLICATION SECURITY; behind it, a man in a suit points to it
Application Security
Why I'm Excited About the Future of Application Security
Why I'm Excited About the Future of Application Security
Oct 21, 2024
|
1 Min Read
byBradley Schaufenbuel, Vice President & CISO, Paychex
Skull and cross bones burned into a piece of toast on a plate
Vulnerabilities & Threats
DPRK Uses Microsoft Zero-Day in No-Click Toast Attacks
DPRK Uses Microsoft Zero-Day in No-Click Toast Attacks
Oct 21, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
A surfer riding a wave
Vulnerabilities & Threats
MacOS Safari 'HM Surf' Exploit Exposes Camera, Mic, Browser Data
MacOS Safari 'HM Surf' Exploit Exposes Camera, Mic, Browser Data
Oct 18, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Emai security DMARC
Cybersecurity Operations
Time to Get Strict With DMARC
Time to Get Strict With DMARC
Oct 18, 2024
|
1 Min Read
byRobert Lemos, Contributing Writer
Jet fuel fire at an airport firefigher training facility
Cyberattacks & Data Breaches
ESET-Branded Wiper Attack Targets Israel; Firm Denies Compromise
ESET-Branded Wiper Attack Targets Israel; Firm Denies Compromise
Oct 18, 2024
|
1 Min Read
byTara Seals, Managing Editor, News, Dark Reading
Developer coding secure software
Application Security
Vulnerabilities, AI Compete for Software Developers' Attention
Vulnerabilities, AI Compete for Software Developers' Attention
Oct 18, 2024
|
1 Min Read
byRobert Lemos, Contributing Writer
A hand pointing to a large computer chip with the words "quantum computing" on it
Application Security
Chinese Researchers Tap Quantum to Break Encryption
Chinese Researchers Tap Quantum to Break Encryption
Oct 16, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
WordPress logo on mobile app and on the screen of a smartphone.
Application Security
WP Engine Accuses WordPress of 'Forcibly' Taking Over Its Plug-in
WP Engine Accuses WordPress of 'Forcibly' Taking Over Its Plug-in
Oct 15, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Ivanti sign on building
Cyberattacks & Data Breaches
Serious Adversaries Circle Ivanti CSA Zero-Day Flaws
Serious Adversaries Circle Ivanti CSA Zero-Day Flaws
Oct 14, 2024
|
1 Min Read
byDark Reading Staff, Dark Reading
Pokémon characters huddled together
Cyberattacks & Data Breaches
Pokémon Gaming Company Employee Info Leaked in Hack
Pokémon Gaming Company Employee Info Leaked in Hack
Oct 14, 2024
|
1 Min Read
byDark Reading Staff, Dark Reading
PR Logo
Application Security
Certificate Authority Market Size to Surpass $485M by 2033
Certificate Authority Market Size to Surpass $485M by 2033
Oct 11, 2024
|
1 Min Read
PR Logo
Application Security
Relyance AI Raises $32M Series B Funding to Safeguard AI Innovation in the Enterprise
Relyance AI Raises $32M Series B Funding to Safeguard AI Innovation in the Enterprise
Oct 11, 2024
|
1 Min Read
A close-up of the Firefox application next to the Internet Explorer application
Cyberattacks & Data Breaches
Critical Mozilla Firefox Zero-Day Allows Code Execution
Critical Mozilla Firefox Zero-Day Allows Code Execution
Oct 10, 2024
|
1 Min Read
byDark Reading Staff, Dark Reading
PR Logo
Application Security
Introducing Mayhem: ForAllSecure Unveils New Name and Company Focus
Introducing Mayhem: ForAllSecure Unveils New Name and Company Focus
Oct 9, 2024
|
1 Min Read
PR Logo
Application Security
OpenGradient Raises $8.5M to Decentralize AI Infrastructure and Accelerate Secure, Open-Source AI
OpenGradient Raises $8.5M to Decentralize AI Infrastructure and Accelerate Secure, Open-Source AI
Oct 9, 2024
|
1 Min Read
A cloud hologram projecting from a microchip
Cyberattacks & Data Breaches
3 More Ivanti Cloud Vulns Exploited in the Wild
3 More Ivanti Cloud Vulns Exploited in the Wild
Oct 9, 2024
|
1 Min Read
byDark Reading Staff, Dark Reading
A laptop on the table with software update progress bar on screen
Vulnerabilities & Threats
5 Zero-Days in Microsoft's October Update to Patch Immediately
5 Zero-Days in Microsoft's October Update to Patch Immediately
Oct 8, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Silhouette of a hand holding a magnifying glass in front of the Google Chrome logo
Cyber Risk
Malicious Chrome Extensions Skate Past Google's Updated Security
Malicious Chrome Extensions Skate Past Google's Updated Security
Oct 7, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
WordPress logo on a device screen beside a computer screen showing the WordPress homepage
Endpoint Security
Single HTTP Request Can Exploit 6M WordPress Sites
Single HTTP Request Can Exploit 6M WordPress Sites
Oct 7, 2024
|
1 Min Read
byElizabeth Montalbano, Contributing Writer
Ivanti logo on the side of a beige building with blue windows
Threat Intelligence
CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog
CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog
Oct 3, 2024
|
1 Min Read
byDark Reading Staff, Dark Reading
Chinese flag draped over surveillance camera
Cyberattacks & Data Breaches
China-Backed APT Group Culling Thai Government Data
China-Backed APT Group Culling Thai Government Data
Oct 3, 2024
|
1 Min Read
byDark Reading Staff, Dark Reading
A stylized crystal-looking judge's gavel with the letters AI standing behind it
Application Security
Calif. Gov. Vetoes AI Safety Bill Aimed at Big Tech Players
Calif. Gov. Vetoes AI Safety Bill Aimed at Big Tech Players
Sep 30, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
A web of circles with the word Update and icons for networks, a person, and gears.
Application Security
Reachability Analysis Pares Down Static Security-Testing Overload
Reachability Analysis Pares Down Static Security-Testing Overload
Sep 30, 2024
|
1 Min Read
byRobert Lemos, Contributing Writer
Cloud with lock in center, blue background
Application Security
Sloppy Entra ID Credentials Attract Hybrid Cloud Ransomware
Sloppy Entra ID Credentials Attract Hybrid Cloud Ransomware
Sep 30, 2024
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading

Editor's Choice

Apache's logo on a mobile phone screen
Application Security
Orgs Scramble to Fix Actively Exploited Bug in Apache Struts 2Orgs Scramble to Fix Actively Exploited Bug in Struts 2
byNate Nelson, Contributing Writer
Dec 19, 2024
5 Min Read
Cute bug on a leaf
Vulnerabilities & Threats
Fortinet Addresses Unpatched Critical RCE VectorFortinet Addresses Unpatched Critical RCE Vector
byTara Seals, Managing Editor, News, Dark Reading
Dec 19, 2024
2 Min Read
Pipes in an industrial setting
Vulnerabilities & Threats
OT/ICS Engineering Workstations Face Barrage of Fresh MalwareOT/ICS Engineering Workstations Face Fresh Malware Barrage
byBecky Bracken, Senior Editor, Dark Reading
Dec 19, 2024
1 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe