Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

Cloud with lock in center, blue background
Application Security
Sloppy Entra ID Credentials Attract Hybrid Cloud RansomwareSloppy Entra ID Credentials Attract Hybrid Cloud Ransomware

Microsoft warns that ransomware group Storm-0501 has shifted from buying initial access to leveraging weak credentials to gain on-premises access before moving laterally to the cloud.

byBecky Bracken, Senior Editor, Dark Reading
Sep 30, 2024
|
1 Min Read
Google Android figure standing on laptop keyboard with code onscreen
Application Security
Memory-Safe Code Adoption Has Made Android SaferMemory-Safe Code Adoption Has Made Android Safer
byJai Vijayan, Contributing Writer
Sep 26, 2024
1 Min Read
Concept illustration of AI, with a microchip with "AI" written on it and code snippets fading out
Application Security
Congress Advances Bill to Add AI to National Vulnerability DatabaseCongress Advances Bill to Add AI to NVD
byJennifer Lawinski
Sep 26, 2024
1 Min Read
code security attack surface area visualization for devops; code in various colors floating in a curved black space
Application Security
Moving DevOps Security Out of 'the Stone Age'Moving DevOps Security Out of 'the Stone Age'
byRobert Lemos, Contributing Writer
Sep 26, 2024
1 Min Read
Ivanti logo on a beige building with blue windows
Vulnerabilities & Threats
Third Ivanti Bug Comes Under Active Exploit, CISA WarnsThird Ivanti Bug Comes Under Active Exploit, CISA Warns
byDark Reading Staff
Sep 25, 2024
1 Min Read
Concept art, computer code and camera lenses in glowing light green arcs on black background
Application Security
Keep Tier-One Applications Out of Virtual EnvironmentsKeep Tier-One Applications Out of Virtual Environments
byMorey Haber
Sep 25, 2024
1 Min Read
Microsoft logo on side of building
Сloud Security
Microsoft Trims Cloud Cyberattack Surface in Security Push
Microsoft Trims Cloud Cyberattack Surface in Security Push
Sep 23, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Green Kaspersky logo and motto on a lit-up sign
Application Security
Kaspersky Rolls Back for US Customers, Makes Way for UltraAV
Kaspersky Rolls Back for US Customers, Makes Way for UltraAV
Sep 23, 2024
|
1 Min Read
byKristina Beek, Associate Editor, Dark Reading
A drawing of the Pisces constellation
Threat Intelligence
Citrine Sleet Poisons PyPI Packages With Mac & Linux Malware
Citrine Sleet Poisons PyPI Packages With Mac & Linux Malware
Sep 20, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Smartphone with business logo of GitLab on screen in front of company website
Application Security
GitLab Warns of Max Severity Authentication Bypass Bug
GitLab Warns of Max Severity Authentication Bypass Bug
Sep 19, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
A magnifying glass showing a closeup of the Veeam logo on a laptop screen
Application Security
1 PoC Exploit for Critical RCE Flaw, but 2 Patches From Veeam
1 PoC Exploit for Critical RCE Flaw, but 2 Patches From Veeam
Sep 19, 2024
|
1 Min Read
byDark Reading Staff, Dark Reading
Three men in reflective jackets standing around a laptop
Application Security
Contractor Software Targeted via Microsoft SQL Server Loophole
Contractor Software Targeted via Microsoft SQL Server Loophole
Sep 18, 2024
|
1 Min Read
byDark Reading Staff, Dark Reading
Digital flowchart abstract blue background. Computer software algorithm conceptual illustration.
Application Security
CISA Urges Software Makers to Eliminate XSS Flaws
CISA Urges Software Makers to Eliminate XSS
Sep 17, 2024
|
1 Min Read
byEdge Editors, Dark Reading
"Zero day exploit" and Alert icon on computer display
Application Security
'Void Banshee' Exploits Second Microsoft Zero-Day
'Void Banshee' Exploits Second Microsoft Zero-Day
Sep 16, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Visual Studio Code logo under magnification
Application Security
Microsoft VS Code Undermined in Asian Spy Attack
Microsoft VS Code Undermined in Asian Spy Attack
Sep 13, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
A Selenium pill capsule
Application Security
Hackers Proxyjack & Cryptomine Selenium Grid Servers
Hackers Proxyjack & Cryptomine Selenium Grid Servers
Sep 12, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Visualization of the world from space, ringed by satellites
ICS/OT Security
India Needs Better Cybersecurity for Space, Critical Infrastructure
India Needs Better Cybersecurity for Space, Critical Infrastructure
Sep 11, 2024
|
1 Min Read
byRobert Lemos, Contributing Writer
A cloud with 0 and 1 bursting out
Application Security
Wiz Launches Wiz Code Application Security Tool
Wiz Launches Wiz Code Application Security Tool
Sep 10, 2024
|
1 Min Read
byJennifer Lawinski, Contributing Writer
A hand over a keyboard with an Update progress bar imposed on top
Application Security
Microsoft Discloses 4 Zero-Days in September Update
Microsoft Discloses 4 Zero-Days in September Update
Sep 10, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Red open lock, indicating a security problem, among closed blue locks
Application Security
Platform Engineering Is Security Engineering
Platform Engineering Is Security Engineering
Sep 10, 2024
|
1 Min Read
byMichelle Ensey, Senior Manager of Product Management, NGINX
Gallup Organization sign
Vulnerabilities & Threats
Gallup Addresses XSS Bugs in Website
Gallup Addresses XSS Bugs in Website
Sep 10, 2024
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
Pile of money in various currencies and denominations.
Application Security
FreeBSD Gets €686,400 to Boost Security Features
FreeBSD Gets New Funding to Boost Security
Sep 6, 2024
|
1 Min Read
byDark Reading Staff, Dark Reading
Indian soldiers marching
Threat Intelligence
Indian Army Propaganda Spread by 1.4K AI-Powered Social Media Accounts
Indian Army Propaganda Spread by 1.4K AI-Powered Social Media Accounts
Sep 5, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Programming code abstract image
Application Security
'Revival Hijack' on PyPI Disguises Malware With Legitimate File Names
'Revival Hijack' on PyPI Disguises Malware With Legitimate File Names
Sep 4, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Pavel Durov, CEO of Telegram
Threat Intelligence
CEO's Arrest Will Likely Not Dampen Cybercriminal Interest in Telegram
CEO's Arrest Will Likely Not Dampen Cybercriminal Interest in Telegram
Sep 4, 2024
|
1 Min Read
byJai Vijayan, Contributing Writer
Come up with cybersecurity-related caption for man standing at ATM holding can of bug spray and saying something to woman in front of him
Application Security
Name That Edge Toon: Bug Off
Name That Edge Toon: Bug Off
Sep 3, 2024
|
1 Min Read
byJohn Klossner, Cartoonist
WPS app on a smartphone screen
Vulnerabilities & Threats
South Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese Intel
South Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese Intel
Aug 29, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
A brain with computer code beside it
Application Security
Hundreds of LLM Servers Expose Corporate, Health & Other Online Data
Hundreds of LLM Servers Expose Corporate, Health & Other Online Data
Aug 28, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Philippine military academy
Application Security
Hackers Use Rare Stealth Techniques to Down Asian Military, Gov't Orgs
Hackers Use Rare Stealth Techniques to Down Asian Military, Gov't Orgs
Aug 26, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
Becky Bracken interviews Michael Bargury at Dark Reading News Desk.
Application Security
News Desk 2024: Hacking Microsoft Copilot Is Scary Easy
News Desk 2024: Hacking Microsoft Copilot Is Scary Easy
Aug 26, 2024
byBecky Bracken, Senior Editor, Dark Reading
A digital pink key surrounded by lights moving around it and code floating throughout the background
Cyber Risk
NIST Hands Off Post-Quantum Cryptography Work to Cyber Teams
NIST Hands Off Post-Quantum Cryptography Work to Cyber Teams
Aug 23, 2024
|
1 Min Read
byBecky Bracken, Senior Editor, Dark Reading
A woman, panicked, standing on an infected Macbook's keyboard
Threat Intelligence
Infostealers Waltz Through macOS to Grab Crypto Wallets, Browser Creds
Infostealers Waltz Through macOS to Grab Crypto Wallets, Browser Creds
Aug 22, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
The words "APPLICATION SECURITY" on a monitor
Vulnerabilities & Threats
Why End of Life for Applications Is the Beginning of Life for Hackers
Why End of Life for Applications Is the Beginning of Life for Hackers
Aug 22, 2024
|
1 Min Read
byMatt Middleton-Leal, Managing Director for EMEA North, Qualys
An undercase, lime green-colored 'u'
Threat Intelligence
Chinese Threat Actors Use MSI Files to Bypass Windows, VT Detection
Chinese Threat Actors Use MSI Files to Bypass Windows, VT Detection
Aug 22, 2024
|
1 Min Read
byNate Nelson, Contributing Writer
A wall of 0 and 1 and a silhouette of a person
Application Security
Gartner Spotlights AI, Security in 2024 Hype Cycle for Emerging Tech
Gartner Spotlights AI, Security in 2024 Hype Cycle for Emerging Tech
Aug 21, 2024
|
1 Min Read
byJennifer Lawinski, Contributing Writer

Editor's Choice

Binary code in blue and orange colors
Vulnerabilities & Threats
Emerging Threats & Vulnerabilities to Prepare for in 2025Emerging Threats & Vulnerabilities to Prepare for in 2025
byKristina Beek, Associate Editor, Dark Reading
Dec 26, 2024
11 Min Read
Trump signing cybersecurity order creating CISA in 2018
Cybersecurity Operations
Trump 2.0 Portends Big Shift in Cybersecurity PoliciesTrump 2.0 Portends Big Shift in Cybersecurity Policies
byBecky Bracken, Senior Editor, Dark Reading
Dec 24, 2024
7 Min Read
People shaking hands imposed over a photo of China and a globe
Endpoint Security
US Ban on TP-Link Routers More About Politics Than Exploitation RiskTP-Link Router Ban Is Mostly About Politics
byRobert Lemos, Contributing Writer
Dec 20, 2024
6 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe