Application Security

Scaling rapidly? Your application security strategies need to keep up

Application Security, Compliance, cybersecurity, ESG, Mend, News, remediation, report, strategy, survey, vulnerability management /

Scaling rapidly? Your application security strategies need to keep up 23/10/2023 at 07:01 By Help Net Security Modern application security strategies must support and enable modern software development, even as it rapidly scales, according to Mend.io. Just 52% of companies can effectively remediate critical vulnerabilities and only 41% are confident they can manage the security […]

Scaling rapidly? Your application security strategies need to keep up Read More »

Google Play Protect takes on malicious apps with code-level scanning

Android, app, Application Security, Don't miss, Google, Google Play, Hot stuff, Malware, News, scanning /

Google Play Protect takes on malicious apps with code-level scanning 19/10/2023 at 13:47 By Helga Labus Google is enhancing Google Play Protect’s real-time scanning to include code-level scanning, to keep Android devices safe from malicious and unwanted apps, especially those downloaded (or sideloaded) from outside of the Google Play app store – whether from third-party

Google Play Protect takes on malicious apps with code-level scanning Read More »

Strong Passwords and MFA: Two Easy Fixes to Enhance Your Cybersecurity Posture

Application Security /

Strong Passwords and MFA: Two Easy Fixes to Enhance Your Cybersecurity Posture 12/10/2023 at 16:01 By As 2023 Cybersecurity Awareness Month continues, let’s look at a couple of the areas the Cybersecurity and Infrastructure Security Agency (CISA) and National Cybersecurity Alliance (NCSA) are focusing on this year.  This article is an excerpt from Trustwave Blog

Strong Passwords and MFA: Two Easy Fixes to Enhance Your Cybersecurity Posture Read More »

Microsoft Fixes Exploited Zero-Days in WordPad, Skype for Business

Application Security, CVE-2023-36563, CVE-2023-41763, CVE-2023-44487, Malware & Threats, Microsoft, Patch Tuesday, Vulnerabilities /

Microsoft Fixes Exploited Zero-Days in WordPad, Skype for Business 10/10/2023 at 21:32 By Ryan Naraine Microsoft patches more than 100 vulnerabilities across the Windows ecosystem and warned that three are already being exploited in the wild. The post Microsoft Fixes Exploited Zero-Days in WordPad, Skype for Business appeared first on SecurityWeek. This article is an

Microsoft Fixes Exploited Zero-Days in WordPad, Skype for Business Read More »

Focus on these 3 Areas to Develop a Strong Cybersecurity Posture With Fewer Resources

Application Security /

Focus on these 3 Areas to Develop a Strong Cybersecurity Posture With Fewer Resources 05/10/2023 at 16:01 By By Jason Whyte, General Manager for Pacific, Trustwave Not every organization’s security apparatus is built or funded at the same level. For smaller organizations or those with other needs competing for budget, here are some points that

Focus on these 3 Areas to Develop a Strong Cybersecurity Posture With Fewer Resources Read More »

Atlassian Ships Urgent Patch for Exploited Confluence Zero-Day

Application Security, Atlassian, Confluence, Malware & Threats, Vulnerabilities, Zero-Day /

Atlassian Ships Urgent Patch for Exploited Confluence Zero-Day 04/10/2023 at 20:16 By Ryan Naraine Atlassian confirms that “a handful of customers” were hit by exploits targeting a remotely exploitable flaw in its Confluence Data Center and Server products. The post Atlassian Ships Urgent Patch for Exploited Confluence Zero-Day appeared first on SecurityWeek. This article is

Atlassian Ships Urgent Patch for Exploited Confluence Zero-Day Read More »

Stolen GitHub Credentials Used to Push Fake Dependabot Commits

Application Security, GitHub /

Stolen GitHub Credentials Used to Push Fake Dependabot Commits 27/09/2023 at 17:17 By Ionut Arghire Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions. The post Stolen GitHub Credentials Used to Push Fake Dependabot Commits appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Stolen GitHub Credentials Used to Push Fake Dependabot Commits Read More »

Google Open Sources Binary File Comparison Tool BinDiff

Application Security /

Google Open Sources Binary File Comparison Tool BinDiff 27/09/2023 at 15:30 By Ionut Arghire Google has released the source code of BinDiff, a binary file comparison tool popular within the security research community, on GitHub. The post Google Open Sources Binary File Comparison Tool BinDiff appeared first on SecurityWeek. This article is an excerpt from

Google Open Sources Binary File Comparison Tool BinDiff Read More »

High number of security flaws found in EMEA-developed apps

Application Security, cybercrime, cybercriminals, cybersecurity, exploit, generative AI, News, report, SCA, survey, third party compromise, Veracode, vulnerability /

High number of security flaws found in EMEA-developed apps 27/09/2023 at 07:47 By Help Net Security Applications developed by organizations in Europe, Middle East and Africa tend to contain more security flaws than those created by their US counterparts, according to Veracode. Across all regions analysed, EMEA also has the highest percentage of ‘high severity’

High number of security flaws found in EMEA-developed apps Read More »

Code alterations more prevalent in Android apps than iOS

Android, app, Application Security, Cryptocurrency, cybercrime, cybersecurity, Digital.ai, Don't miss, iOS, News, online gaming, Ransomware, report, survey /

Code alterations more prevalent in Android apps than iOS 22/09/2023 at 07:01 By Help Net Security 57% of all monitored apps are under attack, with gaming (63%) and FinServ (62%) apps facing the highest risk, according to Digital.ai. The study found no correlation between an app’s popularity and likelihood of being attacked but found Android

Code alterations more prevalent in Android apps than iOS Read More »

What AppSec and developers working in cloud-native environments need to know

Application Security, Backslash Security, cloud computing, containers, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, IaaS, microservices, News, opinion, serverless, software /

What AppSec and developers working in cloud-native environments need to know 20/09/2023 at 08:05 By Help Net Security All enterprise organizations are, in essence, software publishers, regardless of their industry. This is because every enterprise relies on custom software applications for managing internal processes, interacting with customers, or analyzing data, making them creators and distributors

What AppSec and developers working in cloud-native environments need to know Read More »

CrowdStrike to Acquire Application Intelligence Startup Bionic

Application Security, ASPM, Bionic, cloud security, CrowdStrike, Funding/M&A /

CrowdStrike to Acquire Application Intelligence Startup Bionic 19/09/2023 at 22:47 By Ryan Naraine The cash-and-stock transaction provides capabilities for CrowdStrike to beef up its enterprise cloud security portfolio. The post CrowdStrike to Acquire Application Intelligence Startup Bionic appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

CrowdStrike to Acquire Application Intelligence Startup Bionic Read More »

Generative AI lures DevOps and SecOps into risky territory

Application Security, Artificial Intelligence, cybersecurity, DevOps, generative AI, Government, News, open source, regulation, report, Sonatype, survey /

Generative AI lures DevOps and SecOps into risky territory 15/09/2023 at 06:36 By Help Net Security Application security leaders are more optimistic than developer leaders on generative AI, though both agree it will lead to more pervasive security vulnerabilities in software development, according to Sonatype. According to the surveyed DevOps and SecOps leaders, 97% are

Generative AI lures DevOps and SecOps into risky territory Read More »

CISA Releases Open Source Software Security Roadmap

Application Security, open source /

CISA Releases Open Source Software Security Roadmap 13/09/2023 at 16:47 By Ionut Arghire CISA details its plan to support the open source software ecosystem and secure the use of open source software within the federal government. The post CISA Releases Open Source Software Security Roadmap appeared first on SecurityWeek. This article is an excerpt from

CISA Releases Open Source Software Security Roadmap Read More »

Intel Capital Bets on Zenity for Low-Code/No-Code Security

Application Security, Compliance, low-code/no-code, Privacy & Compliance, Series A, venture capital, Zenity /

Intel Capital Bets on Zenity for Low-Code/No-Code Security 12/09/2023 at 21:02 By Ryan Naraine Israeli security startup Zenity banks $16.5 million in new venture capital funding to work on ‘low-code/no-code’ security technology. The post Intel Capital Bets on Zenity for Low-Code/No-Code Security appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

Intel Capital Bets on Zenity for Low-Code/No-Code Security Read More »

Baseline standards for BYOD access requirements

Application Security, BYOD, Compliance, cyber hygiene, cybersecurity, data, Europe, Jamf, mobile devices, News, operating system, patching, policy, Privacy, remote access, shadow IT, standards, survey /

Baseline standards for BYOD access requirements 07/09/2023 at 06:02 By Help Net Security 49% of enterprises across Europe currently have no formal Bring-Your-Own-Device (BYOD) policy in place, meaning they have no visibility into or control over if and how employees are connecting personal devices to corporate resources, according to a Jamf survey. With the summer

Baseline standards for BYOD access requirements Read More »

Thousands of Popular Websites Leaking Secrets

Application Security, Data Protection, secrets scanning, source code /

Thousands of Popular Websites Leaking Secrets 06/09/2023 at 18:16 By Ionut Arghire Truffle Security has discovered thousands of popular websites leaking their secrets, including .git directories and AWS and GitHub keys. The post Thousands of Popular Websites Leaking Secrets appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

Thousands of Popular Websites Leaking Secrets Read More »

GitHub Enterprise Server Gets New Security Capabilities

Application Security, GitHub /

GitHub Enterprise Server Gets New Security Capabilities 30/08/2023 at 15:31 By Ionut Arghire GitHub Enterprise Server 3.10 released with additional security capabilities, including support for custom deployment rules. The post GitHub Enterprise Server Gets New Security Capabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

GitHub Enterprise Server Gets New Security Capabilities Read More »

Signs of Malware Attack Targeting Rust Developers Found on Crates.io

Application Security, Malware & Threats /

Signs of Malware Attack Targeting Rust Developers Found on Crates.io 28/08/2023 at 17:16 By Eduard Kovacs The Crates.io Rust package registry was targeted in preparation of a malware attack aimed at developers, according to Phylum. The post Signs of Malware Attack Targeting Rust Developers Found on Crates.io appeared first on SecurityWeek. This article is an

Signs of Malware Attack Targeting Rust Developers Found on Crates.io Read More »

Google Brings AI Magic to Fuzz Testing With Eye-Opening Results

Application Security, Supply Chain Security, Vulnerabilities /

Google Brings AI Magic to Fuzz Testing With Eye-Opening Results 17/08/2023 at 20:46 By Ryan Naraine Google sprinkles magic of generative-AI into its open source fuzz testing infrastructure and finds immediate success with code coverage. The post Google Brings AI Magic to Fuzz Testing With Eye-Opening Results appeared first on SecurityWeek. This article is an

Google Brings AI Magic to Fuzz Testing With Eye-Opening Results Read More »

Scroll to Top