Application Security

Vibe Coding Tested: AI Agents Nail SQLi but Fail Miserably on Security Controls

AI, Application Security, Artificial Intelligence, vibe coding /

Vibe Coding Tested: AI Agents Nail SQLi but Fail Miserably on Security Controls 2026-01-15 at 19:38 By Kevin Townsend Vibe coding generates a curate’s egg program: good in parts, but the bad parts affect the whole program. The post Vibe Coding Tested: AI Agents Nail SQLi but Fail Miserably on Security Controls appeared first on […]

Vibe Coding Tested: AI Agents Nail SQLi but Fail Miserably on Security Controls Read More »

Aikido Security Raises $60 Million at $1 Billion Valuation

Aikido, Application Security, Cybersecurity Funding, funding /

Aikido Security Raises $60 Million at $1 Billion Valuation 2026-01-14 at 20:40 By Eduard Kovacs The developer security company has raised a total of more than $84 million in funding. The post Aikido Security Raises $60 Million at $1 Billion Valuation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Aikido Security Raises $60 Million at $1 Billion Valuation Read More »

How AI agents are turning security inside-out

Application Security, Artificial Intelligence, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, Nokod Security, opinion /

How AI agents are turning security inside-out 2026-01-09 at 09:30 By Help Net Security AppSec teams have spent the last decade hardening externally facing applications, API security, software supply chain risk, CI/CD controls, and cloud-native attack paths. But a growing class of security threats is emerging from a largely underestimated and undefended source: internally built […]

How AI agents are turning security inside-out Read More »

Shai-Hulud Supply Chain Attack Led to $8.5 Million Trust Wallet Heist

Application Security, cryptocurrency heist, Shai-Hulud, supply chain, supply chain attack, Supply Chain Security, Trust Wallet /

Shai-Hulud Supply Chain Attack Led to $8.5 Million Trust Wallet Heist 2025-12-31 at 14:09 By Ionut Arghire The worm exposed Trust Wallet’s Developer GitHub secrets, allowing attackers to publish a backdoor extension and steal funds from 2,520 wallets. The post Shai-Hulud Supply Chain Attack Led to $8.5 Million Trust Wallet Heist appeared first on SecurityWeek. […]

Shai-Hulud Supply Chain Attack Led to $8.5 Million Trust Wallet Heist Read More »

More than half of public vulnerabilities bypass leading WAFs

Application Security, cybersecurity, Don't miss, Hot stuff, Miggo Security, News, report, web application security, Whitepapers and webinars /

More than half of public vulnerabilities bypass leading WAFs 2025-12-18 at 13:42 By Help Net Security Miggo Security has released a new report that examines how web application firewalls are used across real-world security programs. The research outlines the role WAFs play as foundational infrastructure and evaluates their effectiveness against critical vulnerabilities, CVEs, and AI-driven […]

More than half of public vulnerabilities bypass leading WAFs Read More »

MITRE Releases 2025 List of Top 25 Most Dangerous Software Vulnerabilities

Application Security, CWE Top 25, MITRE, Vulnerabilities /

MITRE Releases 2025 List of Top 25 Most Dangerous Software Vulnerabilities 2025-12-12 at 14:04 By Ionut Arghire XSS remains the top software weakness, followed by SQL injection and CSRF. Buffer overflow issues and improper access control make it to top 25. The post MITRE Releases 2025 List of Top 25 Most Dangerous Software Vulnerabilities appeared […]

MITRE Releases 2025 List of Top 25 Most Dangerous Software Vulnerabilities Read More »

React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability

Application Security, Featured, React, Vulnerabilities, vulnerability /

React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability 2025-12-04 at 12:11 By Eduard Kovacs A researcher has pointed out that only instances using a newer feature are impacted by CVE-2025-55182. The post React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability Read More »

Clover Security Raises $36 Million to Secure Software by Design

Application Security, Clover Security, Cybersecurity Funding, funding /

Clover Security Raises $36 Million to Secure Software by Design 2025-11-26 at 16:30 By Ionut Arghire The cybersecurity startup embeds AI agents into widely used tools to identify design flaws and eliminate them early. The post Clover Security Raises $36 Million to Secure Software by Design appeared first on SecurityWeek. This article is an excerpt […]

Clover Security Raises $36 Million to Secure Software by Design Read More »

Amazon Detects 150,000 NPM Packages in Worm-Powered Campaign 

Amazon, Application Security, Big Red, IndonesianFoods, NPM, worm /

Amazon Detects 150,000 NPM Packages in Worm-Powered Campaign  2025-11-14 at 12:40 By Ionut Arghire A financially motivated threat actor automated the package publishing process in a coordinated tea.xyz token farming campaign. The post Amazon Detects 150,000 NPM Packages in Worm-Powered Campaign  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Amazon Detects 150,000 NPM Packages in Worm-Powered Campaign  Read More »

Two New Web Application Risk Categories Added to OWASP Top 10

Application Security, OWASP, OWASP Top 10, vulnerability, web application /

Two New Web Application Risk Categories Added to OWASP Top 10 2025-11-10 at 15:21 By Ionut Arghire OWASP has added two new categories to the revised version of its Top 10 list of the most critical risks to web applications. The post Two New Web Application Risk Categories Added to OWASP Top 10 appeared first […]

Two New Web Application Risk Categories Added to OWASP Top 10 Read More »

GlassWorm Malware Returns to Open VSX, Emerges on GitHub

Application Security, GlassWorm, Malware, Open VSX, VS Code /

GlassWorm Malware Returns to Open VSX, Emerges on GitHub 2025-11-10 at 14:46 By Ionut Arghire Three more VS Code extensions were infected last week and the malware has emerged in GitHub repositories as well. The post GlassWorm Malware Returns to Open VSX, Emerges on GitHub appeared first on SecurityWeek. This article is an excerpt from […]

GlassWorm Malware Returns to Open VSX, Emerges on GitHub Read More »

Critical Flaw in Popular React Native NPM Package Exposes Developers to Attacks

Application Security, NPM, React Native, vulnerability /

Critical Flaw in Popular React Native NPM Package Exposes Developers to Attacks 2025-11-04 at 18:39 By Eduard Kovacs Arbitrary command/code execution has been demonstrated through the exploitation of CVE-2025-11953 on Windows, macOS and Linux.  The post Critical Flaw in Popular React Native NPM Package Exposes Developers to Attacks appeared first on SecurityWeek. This article is […]

Critical Flaw in Popular React Native NPM Package Exposes Developers to Attacks Read More »

Bugcrowd Acquires Application Security Firm Mayhem

Acquisition, Application Security, Bugcrowd, M&A, M&A Tracker, Mayhem Security /

Bugcrowd Acquires Application Security Firm Mayhem 2025-11-04 at 15:32 By Eduard Kovacs Bugcrowd said the acquisition of Mayhem has nearly doubled its valuation — previously reported at over $1 billion. The post Bugcrowd Acquires Application Security Firm Mayhem appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Bugcrowd Acquires Application Security Firm Mayhem Read More »

Financial services can’t shake security debt

Application Security, cybersecurity, financial industry, News, open source, remediation, report, Veracode /

Financial services can’t shake security debt 2025-11-04 at 07:30 By Anamarija Pogorelec In financial services, application security risk is becoming a long game. Fewer flaws appear in new code, but old ones linger longer, creating a kind of software “interest” that keeps growing, according to Veracode’s 2025 State of Software Security report. Researchers analyzed data […]

Financial services can’t shake security debt Read More »

Who is Zico Kolter? A Professor Leads OpenAI Safety Panel With Power to Halt Unsafe AI Releases

Application Security, OpenAI, Zico Kolter /

Who is Zico Kolter? A Professor Leads OpenAI Safety Panel With Power to Halt Unsafe AI Releases 2025-11-03 at 16:23 By Associated Press Kolter leads a panel at OpenAI that has the authority to halt the ChatGPT maker’s release of new AI systems if it finds them unsafe. The post Who is Zico Kolter? A […]

Who is Zico Kolter? A Professor Leads OpenAI Safety Panel With Power to Halt Unsafe AI Releases Read More »

Webinar Today: Fact vs. Fiction – The Truth About API Security

Application Security, Webinar /

Webinar Today: Fact vs. Fiction – The Truth About API Security 2025-10-15 at 17:37 By SecurityWeek News Get practical guidance to protect APIs against the threats attackers are using right now. The post Webinar Today: Fact vs. Fiction – The Truth About API Security appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Webinar Today: Fact vs. Fiction – The Truth About API Security Read More »

The diagnosis is in: Mobile health apps are bad for your privacy

Android, Application Security, cybersecurity, data security, healthcare, medical data, News /

The diagnosis is in: Mobile health apps are bad for your privacy 2025-10-15 at 07:40 By Sinisa Markovic Sensitive data is moving through Android healthcare apps without adequate protection. Researchers found that many transmit information without encryption, store files without safeguards, or share it through third-party components. Study design showing data collection, static security analysis […]

The diagnosis is in: Mobile health apps are bad for your privacy Read More »

GitHub Boosting Security in Response to NPM Supply Chain Attacks 

2FA, Application Security, authentication, GitHub, NPM, supply chain, Supply Chain Security /

GitHub Boosting Security in Response to NPM Supply Chain Attacks  2025-09-24 at 13:18 By Ionut Arghire GitHub will implement local publishing with mandatory 2FA, granular tokens that expire after seven days, and trusted publishing. The post GitHub Boosting Security in Response to NPM Supply Chain Attacks  appeared first on SecurityWeek. This article is an excerpt […]

GitHub Boosting Security in Response to NPM Supply Chain Attacks  Read More »

Shai-Hulud Supply Chain Attack: Worm Used to Steal Secrets, 180+ NPM Packages Hit

Application Security, Featured, NPM, Shai-Hulud, supply chain, Supply Chain Security, worm /

Shai-Hulud Supply Chain Attack: Worm Used to Steal Secrets, 180+ NPM Packages Hit 2025-09-17 at 16:04 By Ionut Arghire The packages were injected with malicious code to harvest secrets, dump them to a public repository, and make private repositories public. The post Shai-Hulud Supply Chain Attack: Worm Used to Steal Secrets, 180+ NPM Packages Hit […]

Shai-Hulud Supply Chain Attack: Worm Used to Steal Secrets, 180+ NPM Packages Hit Read More »

Highly Popular NPM Packages Poisoned in New Supply Chain Attack

Application Security, Cryptocurrency, cryptojacking, Featured, NPM, supply chain, Supply Chain Security /

Highly Popular NPM Packages Poisoned in New Supply Chain Attack 2025-09-10 at 11:45 By Ionut Arghire Designed to intercept cryptocurrency transactions, the malicious code reached 10% of cloud environments. The post Highly Popular NPM Packages Poisoned in New Supply Chain Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Highly Popular NPM Packages Poisoned in New Supply Chain Attack Read More »

Scroll to Top