Application Security

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security

AI, Anthropic, Application Security, Artificial Intelligence, ICS, ICS/OT, open source, OSS, OT, scanner /

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security 2026-10-09 at 11:19 By Eduard Kovacs OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in. The post Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security appeared first on SecurityWeek. This […]

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security Read More »

500,000 Active Credentials Left Exposed on GitHub

Application Security, Data leak, Data Protection, GitHub, Identity & Access, secrets scanning, secrets sprawl /

500,000 Active Credentials Left Exposed on GitHub 2026-10-01 at 12:43 By Ionut Arghire Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default. The post 500,000 Active Credentials Left Exposed on GitHub appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

500,000 Active Credentials Left Exposed on GitHub Read More »

Malicious B-tree NPM Package Accumulates Millions of Downloads

Application Security, NPM, supply chain attack, Supply Chain Security /

Malicious B-tree NPM Package Accumulates Millions of Downloads 2026-09-22 at 14:33 By Ionut Arghire Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method. The post Malicious B-tree NPM Package Accumulates Millions of Downloads appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Malicious B-tree NPM Package Accumulates Millions of Downloads Read More »

Abandoned IoT apps keep sending sensitive data to broken servers

Android, Application Security, cyber risk, Internet of Things, mobile apps, News, research /

Abandoned IoT apps keep sending sensitive data to broken servers 2026-09-18 at 09:00 By Sinisa Markovic Millions of people still run smart home and IoT companion apps, the apps used to control devices like smart plugs, cameras, and thermostats, that stopped receiving updates years ago. Researchers at the University of Massachusetts Amherst analyzed 61,500 abandoned […]

Abandoned IoT apps keep sending sensitive data to broken servers Read More »

Virtual Event Today: Attack Surface Management Summit

Application Security, attack surface management /

Virtual Event Today: Attack Surface Management Summit 2026-09-16 at 17:35 By SecurityWeek News Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces. The post Virtual Event Today: Attack Surface Management Summit appeared first on SecurityWeek. This article is an excerpt from […]

Virtual Event Today: Attack Surface Management Summit Read More »

This Key Will Self-Destruct: An Open Standard for Revocable API Keys

API, Application Security, credentials, Identity & Access /

This Key Will Self-Destruct: An Open Standard for Revocable API Keys 2026-09-09 at 13:00 By Matt Honea Every leaked credential should be dead, or dying, within sixty seconds of being found. Here’s a proposal to make that the default. The post This Key Will Self-Destruct: An Open Standard for Revocable API Keys appeared first on […]

This Key Will Self-Destruct: An Open Standard for Revocable API Keys Read More »

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

Application Security, Vulnerabilities, WordPress /

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites 2026-09-05 at 16:00 By Ionut Arghire Tracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles form submissions. The post Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites appeared first on SecurityWeek. This article […]

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites Read More »

AI AppSec tools agree on just 5% of security findings

AI, Application Security, Contrast Security, News, software /

AI AppSec tools agree on just 5% of security findings 2026-08-31 at 08:23 By Sinisa Markovic Software vulnerabilities are turning into exploits within hours, and application security teams carry patch backlogs that go back years. Top types of viable application attacks (Source: Contrast Security) Contrast Security’s AppSec Overflow 2026 report draws on telemetry collected from […]

AI AppSec tools agree on just 5% of security findings Read More »

Rethinking Application Security for the AI Era

AI, Application Security, appsec /

Rethinking Application Security for the AI Era 2026-08-24 at 13:00 By Joshua Goldfarb As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk. The post Rethinking Application Security for the AI Era appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Rethinking Application Security for the AI Era Read More »

Virtual Event Today: CodeSecCon – Secure Your Code and Applications

Application Security /

Virtual Event Today: CodeSecCon – Secure Your Code and Applications 2026-08-19 at 16:36 By SecurityWeek News CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained. The post Virtual Event Today: CodeSecCon – Secure Your Code and Applications appeared first on SecurityWeek. This […]

Virtual Event Today: CodeSecCon – Secure Your Code and Applications Read More »

Mozilla Issues New Firefox GPG Key Following Exposure

Application Security, Data Protection, exposed key, Firefox, GPG, Mozilla, signing key, supply chain, Thunderbird /

Mozilla Issues New Firefox GPG Key Following Exposure 2026-08-11 at 09:16 By Eduard Kovacs The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it. The post Mozilla Issues New Firefox GPG Key Following Exposure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Mozilla Issues New Firefox GPG Key Following Exposure Read More »

Stealthium Targets Security Blind Spots in AI Accelerators and Neo-Clouds

Application Security, Supply Chain Security /

Stealthium Targets Security Blind Spots in AI Accelerators and Neo-Clouds 2026-08-10 at 17:19 By Kevin Townsend The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure. The post Stealthium Targets Security Blind Spots in AI Accelerators and Neo-Clouds appeared first on SecurityWeek. This article is an […]

Stealthium Targets Security Blind Spots in AI Accelerators and Neo-Clouds Read More »

Chainloop: Open-source evidence store and policy engine for the software supply chain

Application Security, devsec, Don't miss, GitHub, News, open source, software, supply chain /

Chainloop: Open-source evidence store and policy engine for the software supply chain 2026-08-10 at 08:30 By Sinisa Markovic Chainloop is an open source evidence store for the software supply chain. A command line tool runs inside a GitHub Actions, GitLab, Jenkins, or Dagger pipeline, picks up what the build produced, uploads those files to content-addressable […]

Chainloop: Open-source evidence store and policy engine for the software supply chain Read More »

Obsidian Security Raises $85 Million at $1.1 Billion Valuation

AI, Application Security, Artificial Intelligence, Cybersecurity Funding, funding, Obsidian Security /

Obsidian Security Raises $85 Million at $1.1 Billion Valuation 2026-08-04 at 15:00 By SecurityWeek News Obsidian Security has developed a platform for governing AI agents across third-party applications. The post Obsidian Security Raises $85 Million at $1.1 Billion Valuation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Obsidian Security Raises $85 Million at $1.1 Billion Valuation Read More »

Qodana 2026.2 adds post-quantum crypto checks for JVM code

Application Security, code, JetBrains, News, software, update /

Qodana 2026.2 adds post-quantum crypto checks for JVM code 2026-08-03 at 14:21 By Anamarija Pogorelec Qodana 2026.2 shipped with new security inspections, published benchmark results, post-quantum cryptography checks, and coverage reporting that no longer has to be pointed at the reports. The security work sits in the .NET linter and runs by default. Qodana tracks […]

Qodana 2026.2 adds post-quantum crypto checks for JVM code Read More »

New GitHub, PyPI Policies Boost Supply Chain Security

Application Security, GitHub, PyPI, supply chain, Supply Chain Security /

New GitHub, PyPI Policies Boost Supply Chain Security 2026-07-27 at 17:26 By Ionut Arghire Dependabot gets a three-day cooldown window before opening pull requests, and PyPI rejects file uploads to releases older than 14 days. The post New GitHub, PyPI Policies Boost Supply Chain Security appeared first on SecurityWeek. This article is an excerpt from […]

New GitHub, PyPI Policies Boost Supply Chain Security Read More »

Vibe-Coded Apps Riddled With Exploitable Security Flaws

Application Security, Artificial Intelligence, vibe coding, Vulnerabilities /

Vibe-Coded Apps Riddled With Exploitable Security Flaws 2026-07-22 at 16:00 By Kevin Townsend Analysis found 434 exploitable flaws in AI-generated apps, with denial-of-service, authorization and secrets exposure risks among the most common issues. The post Vibe-Coded Apps Riddled With Exploitable Security Flaws appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Vibe-Coded Apps Riddled With Exploitable Security Flaws Read More »

20 open-source cybersecurity tools to keep your team ready for anything

agentic AI, AI, Application Security, containers, cybersecurity, Don't miss, Endpoint Security, Exabeam, firewall, GitHub, Hot stuff, LLMs, Microsoft, News, open source, OWASP, penetration testing, scanner, security telemetry, software, vulnerability assessment, Windows /

20 open-source cybersecurity tools to keep your team ready for anything 2026-07-08 at 08:30 By Anamarija Pogorelec AI is changing how security teams find vulnerabilities, analyze code, test applications, and protect infrastructure. Developers are building tools to secure AI systems themselves, from coding agents and memory protection to model exposure discovery. This roundup covers recent […]

20 open-source cybersecurity tools to keep your team ready for anything Read More »

Nika: Open-source code analysis tool

Application Security, code analysis, code review, Don't miss, GitHub, microservices, News, open source, scanner, software /

Nika: Open-source code analysis tool 2026-07-01 at 09:00 By Mirko Zorz Many serious security bugs in web applications sit across several files at once. Request data enters through a controller, moves through data objects and service layers, and turns dangerous only when it reaches a sensitive operation such as a database query or a file […]

Nika: Open-source code analysis tool Read More »

Scroll to Top