Application Security - Security Ticks

Watch Now: CodeSecCon – Where Software Security’s Next Chapter Unfolds (Virtual Event)

Application Security, Featured, Vulnerabilities, vulnerability / SecurityTicks

Watch Now: CodeSecCon – Where Software Security’s Next Chapter Unfolds (Virtual Event) 2025-08-16 at 16:58 By SecurityWeek News CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained. The post Watch Now: CodeSecCon – Where Software Security’s Next Chapter Unfolds (Virtual Event) appeared […]

React to this headline:

Watch Now: CodeSecCon – Where Software Security’s Next Chapter Unfolds (Virtual Event) Read More »

CodeSecCon Is Today: Where Software Security’s Next Chapter Unfolds (Virtual Event)

Application Security, Featured, Vulnerabilities, vulnerability / SecurityTicks

CodeSecCon Is Today: Where Software Security’s Next Chapter Unfolds (Virtual Event) 2025-08-12 at 15:35 By SecurityWeek News Taking place August 12-13, CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained. The post CodeSecCon Is Today: Where Software Security’s Next Chapter Unfolds (Virtual

React to this headline:

CodeSecCon Is Today: Where Software Security’s Next Chapter Unfolds (Virtual Event) Read More »

CodeSecCon 2025: Where Software Security’s Next Chapter Unfolds

Application Security, Featured, Vulnerabilities, vulnerability / SecurityTicks

CodeSecCon 2025: Where Software Security’s Next Chapter Unfolds 2025-08-08 at 19:52 By SecurityWeek News Taking place August 12-13, CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained. The post CodeSecCon 2025: Where Software Security’s Next Chapter Unfolds appeared first on SecurityWeek. This

React to this headline:

CodeSecCon 2025: Where Software Security’s Next Chapter Unfolds Read More »

Flaw in Vibe Coding Platform Base44 Exposed Private Enterprise Applications

AI, Application Security, Artificial Intelligence, Authentication Bypass, Base44, vibe coding, vulnerability, Wix / SecurityTicks

Flaw in Vibe Coding Platform Base44 Exposed Private Enterprise Applications 2025-07-30 at 14:18 By Eduard Kovacs Base44 owner Wix quickly patched a critical authentication bypass vulnerability discovered by researchers at Wiz. The post Flaw in Vibe Coding Platform Base44 Exposed Private Enterprise Applications appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

Flaw in Vibe Coding Platform Base44 Exposed Private Enterprise Applications Read More »

Inside the application security crisis no one wants to talk about

Application Security, Cypress Data Defense, News, report, survey / SecurityTicks

Inside the application security crisis no one wants to talk about 2025-07-29 at 07:50 By Anamarija Pogorelec Despite knowing the risks, most organizations are still shipping insecure software. That’s one of the stark findings from Cypress Data Defense’s 2025 State of Application Security report, which reveals a worsening crisis in software security. According to the

React to this headline:

Inside the application security crisis no one wants to talk about Read More »

HeroDevs Raises $125 Million to Secure Deprecated OSS

Application Security, Cybersecurity Funding, funding, HeroDevs, open source, OSS / SecurityTicks

HeroDevs Raises $125 Million to Secure Deprecated OSS 2025-07-24 at 16:45 By Ionut Arghire HeroDevs has received a $125 million strategic growth investment from PSG to secure enterprise security stacks. The post HeroDevs Raises $125 Million to Secure Deprecated OSS appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React

React to this headline:

HeroDevs Raises $125 Million to Secure Deprecated OSS Read More »

Your app is under attack every 3 minutes

Application Security, attacks, Contrast Security, cybersecurity, News, report / SecurityTicks

Your app is under attack every 3 minutes 2025-07-24 at 11:57 By Help Net Security Application-layer attacks have become one of the most common and consequential methods adversaries use to gain access and compromise organizations, according to Contrast Security. These attacks target the custom code, APIs, and logic that power applications, often slipping past detection

React to this headline:

Your app is under attack every 3 minutes Read More »

AI built it, but can you trust it?

Application Security, Artificial Intelligence, CISO, cybersecurity, DevSecOps, Don't miss, Features, Hot stuff, Minimus, News, software development / SecurityTicks

AI built it, but can you trust it? 2025-07-07 at 09:02 By Mirko Zorz In this Help Net Security interview, John Morello, CTO at Minimus, discusses the security risks in AI-driven development, where many dependencies are pulled in quickly. He explains why it’s hard to secure software stacks that no one fully understands. He also

React to this headline:

AI built it, but can you trust it? Read More »

RevEng.ai Raises $4.15 Million to Secure Software Supply Chain

Application Security, Cybersecurity Funding, funding, supply chain / SecurityTicks

RevEng.ai Raises $4.15 Million to Secure Software Supply Chain 2025-06-27 at 13:17 By Ionut Arghire RevEng.ai has raised $4.15 million in seed funding for an AI platform that automatically detects malicious code and vulnerabilities in software. The post RevEng.ai Raises $4.15 Million to Secure Software Supply Chain appeared first on SecurityWeek. This article is an

React to this headline:

RevEng.ai Raises $4.15 Million to Secure Software Supply Chain Read More »

Thousands of SaaS Apps Could Still Be Susceptible to nOAuth

Application Security, EntraID, Identity & Access, noAuth, SaaS / SecurityTicks

Thousands of SaaS Apps Could Still Be Susceptible to nOAuth 2025-06-25 at 17:26 By Kevin Townsend New research suggests more than 10,000 SaaS apps could remain vulnerable to a nOAuth variant despite the basic issue being disclosed in June 2023. The post Thousands of SaaS Apps Could Still Be Susceptible to nOAuth appeared first on

React to this headline:

Thousands of SaaS Apps Could Still Be Susceptible to nOAuth Read More »

91% noise: A look at what’s wrong with traditional SAST tools

Application Security, automation, cybersecurity, Don't miss, Ghost Security, News, report, scanning / SecurityTicks

91% noise: A look at what’s wrong with traditional SAST tools 2025-06-19 at 07:32 By Mirko Zorz Traditional static application security testing (SAST) tools are falling short. That’s the key takeaway from a recent report that tested these tools against nearly 3,000 open-source code repositories. The results: more than 91% of flagged vulnerabilities were false

React to this headline:

91% noise: A look at what’s wrong with traditional SAST tools Read More »

Before scaling GenAI, map your LLM usage and risk zones

Application Security, ArmorCode, Artificial Intelligence, cybersecurity, Don't miss, Features, generative AI, Hot stuff, Lakera, LLMs, News, OWASP, policy, Straiker, The Motley Fool / SecurityTicks

Before scaling GenAI, map your LLM usage and risk zones 2025-06-17 at 08:46 By Mirko Zorz In this Help Net Security interview, Paolo del Mundo, Director of Application and Cloud Security at The Motley Fool, discusses how organizations can scale their AI usage by implementing guardrails to mitigate GenAI-specific risks like prompt injection, insecure outputs,

React to this headline:

Before scaling GenAI, map your LLM usage and risk zones Read More »

Unpacking the security complexity of no-code development platforms

Application Security, code, cybersecurity, Don't miss, Features, Hot stuff, News, Nokod Security, software development / SecurityTicks

Unpacking the security complexity of no-code development platforms 2025-06-13 at 09:02 By Mirko Zorz In this Help Net Security interview, Amichai Shulman, CTO at Nokod Security, discusses how the abstraction layer in no-code environments complicates security by obscuring data flow, identity propagation, and control logic. Shulman also addresses why vulnerabilities in no-code applications go far

React to this headline:

Unpacking the security complexity of no-code development platforms Read More »

Security flaws in government apps go unpatched for years

Application Security, cybersecurity, News, report, software, survey, Veracode / SecurityTicks

Security flaws in government apps go unpatched for years 2025-06-13 at 08:02 By Help Net Security 78% of public sector organizations are operating with significant security debt, flaws left unaddressed for more than a year, according to Veracode. 55% are burdened with ‘critical’ security debt, representing long-standing vulnerabilities with severe risk potential. Public sector flaw

React to this headline:

Security flaws in government apps go unpatched for years Read More »

Five Zero-Days, 15 Misconfigurations Found in Salesforce Industry Cloud

Application Security, Cloud, cloud security, Salesforce, Vulnerabilities / SecurityTicks

Five Zero-Days, 15 Misconfigurations Found in Salesforce Industry Cloud 2025-06-10 at 15:03 By Kevin Townsend Security researchers uncover critical flaws and widespread misconfigurations in Salesforce’s industry-specific CRM solutions. The post Five Zero-Days, 15 Misconfigurations Found in Salesforce Industry Cloud appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

Five Zero-Days, 15 Misconfigurations Found in Salesforce Industry Cloud Read More »

Development vs. security: The friction threatening your code

Application Security, cybersecurity, DevSecOps, Endor Labs, GitLab, News, software, Sonatype, strategy / SecurityTicks

Development vs. security: The friction threatening your code 2025-06-03 at 07:32 By Sinisa Markovic Developers are driven to deliver new features quickly, while security teams prioritize risk mitigation, which often puts the two at odds. 61% of developers said that it’s critical that security doesn’t block or decelerate the development process or become a barrier

React to this headline:

Development vs. security: The friction threatening your code Read More »

Webinar Today: Why Context is a Secret Weapon in Application Security Posture Management

Application Security, appsec, Webinar / SecurityTicks

Webinar Today: Why Context is a Secret Weapon in Application Security Posture Management 2025-05-29 at 13:48 By SecurityWeek News Join the live webinar to understand why data in itself is not enough to make informed decisions for prioritization. The post Webinar Today: Why Context is a Secret Weapon in Application Security Posture Management appeared first on SecurityWeek.

React to this headline:

Webinar Today: Why Context is a Secret Weapon in Application Security Posture Management Read More »

OneDrive Gives Web Apps Full Read Access to All Files

Application Security, cloud security, Data Protection, Featured, Microsoft, OneDrive / SecurityTicks

OneDrive Gives Web Apps Full Read Access to All Files 2025-05-28 at 15:02 By Kevin Townsend Security researchers warn that OneDrive’s file sharing tool may grant third-party web apps access to all your files—not just the one you choose to upload. The post OneDrive Gives Web Apps Full Read Access to All Files appeared first

React to this headline:

OneDrive Gives Web Apps Full Read Access to All Files Read More »

Why app modernization can leave you less secure

Application Security, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, identity management, News, opinion, Strata Identity, strategy / SecurityTicks

Why app modernization can leave you less secure 2025-05-27 at 09:09 By Help Net Security Enterprises typically “modernize” access patterns for an application by enabling industry standard protocols like OIDC or SAML to provide single sign-on (SSO) for legacy apps via a cloud identity provider (IDP). That’s a major step towards better user experience, improved

React to this headline:

Why app modernization can leave you less secure Read More »

CodeAnt AI Raises $2 Million for Code Quality and Application Security Platform

Application Security, CodeAnt, Cybersecurity Funding, funding, seed funding / SecurityTicks

CodeAnt AI Raises $2 Million for Code Quality and Application Security Platform 2025-05-07 at 19:23 By Eduard Kovacs Code quality and security firm CodeAnt has secured $2 million in seed funding and it has been valued at $20 million. The post CodeAnt AI Raises $2 Million for Code Quality and Application Security Platform appeared first

React to this headline:

CodeAnt AI Raises $2 Million for Code Quality and Application Security Platform Read More »