Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

A close-up of the Firefox application next to the Internet Explorer application

Cyberattacks & Data Breaches

Critical Mozilla Firefox Zero-Day Allows Code Execution Critical Mozilla Firefox Zero-Day Allows Code Execution

The bug is already being exploited in the wild, but Firefox has provided patches for those who may be vulnerable.

byDark Reading Staff

Oct 10, 2024

|

1 Min Read

Application Security

Introducing Mayhem: ForAllSecure Unveils New Name and Company Focus Introducing Mayhem: ForAllSecure Unveils New Name and Company Focus

Oct 9, 2024

2 Min Read

Application Security

OpenGradient Raises $8.5M to Decentralize AI Infrastructure and Accelerate Secure, Open-Source AI OpenGradient Raises $8.5M to Decentralize AI Infrastructure and Accelerate Secure, Open-Source AI

Oct 9, 2024

2 Min Read

A cloud hologram projecting from a microchip

Cyberattacks & Data Breaches

3 More Ivanti Cloud Vulns Exploited in the Wild 3 More Ivanti Cloud Vulns Exploited in the Wild

byDark Reading Staff

Oct 9, 2024

1 Min Read

A laptop on the table with software update progress bar on screen

Vulnerabilities & Threats

5 Zero-Days in Microsoft's October Update to Patch Immediately 5 Zero-Days in Microsoft's October Update to Patch Immediately

byJai Vijayan, Contributing Writer

Oct 8, 2024

4 Min Read

Silhouette of a hand holding a magnifying glass in front of the Google Chrome logo

Malicious Chrome Extensions Skate Past Google's Updated Security Malicious Chrome Extensions Skate Past Google's Updated Security

byJai Vijayan, Contributing Writer

Oct 7, 2024

5 Min Read

Endpoint Security

Single HTTP Request Can Exploit 6M WordPress Sites

Single HTTP Request Can Exploit 6M WordPress Sites

byElizabeth Montalbano, Contributing Writer

Threat Intelligence

CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog

CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog

byDark Reading Staff

Chinese flag draped over surveillance camera

Cyberattacks & Data Breaches

China-Backed APT Group Culling Thai Government Data

China-Backed APT Group Culling Thai Government Data

byDark Reading Staff

A stylized crystal-looking judge's gavel with the letters AI standing behind it

Application Security

Calif. Gov. Vetoes AI Safety Bill Aimed at Big Tech Players

Calif. Gov. Vetoes AI Safety Bill Aimed at Big Tech Players

byJai Vijayan, Contributing Writer

A web of circles with the word Update and icons for networks, a person, and gears.

Application Security

Reachability Analysis Pares Down Static Security-Testing Overload

Reachability Analysis Pares Down Static Security-Testing Overload

byRobert Lemos, Contributing Writer

Cloud with lock in center, blue background

Application Security

Sloppy Entra ID Credentials Attract Hybrid Cloud Ransomware

Sloppy Entra ID Credentials Attract Hybrid Cloud Ransomware

byBecky Bracken, Senior Editor, Dark Reading

Google Android figure standing on laptop keyboard with code onscreen

Application Security

Memory-Safe Code Adoption Has Made Android Safer

Memory-Safe Code Adoption Has Made Android Safer

byJai Vijayan, Contributing Writer

Concept illustration of AI, with a microchip with "AI" written on it and code snippets fading out

Application Security

Congress Advances Bill to Add AI to National Vulnerability Database

Congress Advances Bill to Add AI to NVD

byJennifer Lawinski, Contributing Writer

code security attack surface area visualization for devops; code in various colors floating in a curved black space

Application Security

Moving DevOps Security Out of 'the Stone Age'

Moving DevOps Security Out of 'the Stone Age'

byRobert Lemos, Contributing Writer

Vulnerabilities & Threats

Third Ivanti Bug Comes Under Active Exploit, CISA Warns

Third Ivanti Bug Comes Under Active Exploit, CISA Warns

byDark Reading Staff

Concept art, computer code and camera lenses in glowing light green arcs on black background

Application Security

Keep Tier-One Applications Out of Virtual Environments

Keep Tier-One Applications Out of Virtual Environments

Сloud Security

Microsoft Trims Cloud Cyberattack Surface in Security Push

Microsoft Trims Cloud Cyberattack Surface in Security Push

byJai Vijayan, Contributing Writer

Application Security

Kaspersky Rolls Back for US Customers, Makes Way for UltraAV

Kaspersky Rolls Back for US Customers, Makes Way for UltraAV

byKristina Beek, Associate Editor, Dark Reading

A drawing of the Pisces constellation

Threat Intelligence

Citrine Sleet Poisons PyPI Packages With Mac & Linux Malware

Citrine Sleet Poisons PyPI Packages With Mac & Linux Malware

byNate Nelson, Contributing Writer

Application Security

GitLab Warns of Max Severity Authentication Bypass Bug

GitLab Warns of Max Severity Authentication Bypass Bug

byJai Vijayan, Contributing Writer

Application Security

1 PoC Exploit for Critical RCE Flaw, but 2 Patches From Veeam

1 PoC Exploit for Critical RCE Flaw, but 2 Patches From Veeam

byDark Reading Staff

Three men in reflective jackets standing around a laptop

Application Security

Contractor Software Targeted via Microsoft SQL Server Loophole

Contractor Software Targeted via Microsoft SQL Server Loophole

byDark Reading Staff

Digital flowchart abstract blue background. Computer software algorithm conceptual illustration.

Application Security

CISA Urges Software Makers to Eliminate XSS Flaws

CISA Urges Software Makers to Eliminate XSS

"Zero day exploit" and Alert icon on computer display

Application Security

'Void Banshee' Exploits Second Microsoft Zero-Day

'Void Banshee' Exploits Second Microsoft Zero-Day

byJai Vijayan, Contributing Writer

Application Security

Microsoft VS Code Undermined in Asian Spy Attack

Microsoft VS Code Undermined in Asian Spy Attack

byNate Nelson, Contributing Writer

A Selenium pill capsule

Application Security

Hackers Proxyjack & Cryptomine Selenium Grid Servers

Hackers Proxyjack & Cryptomine Selenium Grid Servers

byNate Nelson, Contributing Writer

Visualization of the world from space, ringed by satellites

ICS/OT Security

India Needs Better Cybersecurity for Space, Critical Infrastructure

India Needs Better Cybersecurity for Space, Critical Infrastructure

byRobert Lemos, Contributing Writer

A cloud with 0 and 1 bursting out

Application Security

Wiz Launches Wiz Code Application Security Tool

Wiz Launches Wiz Code Application Security Tool

byJennifer Lawinski, Contributing Writer

A hand over a keyboard with an Update progress bar imposed on top

Application Security

Microsoft Discloses 4 Zero-Days in September Update

Microsoft Discloses 4 Zero-Days in September Update

byJai Vijayan, Contributing Writer

Red open lock, indicating a security problem, among closed blue locks

Application Security

Platform Engineering Is Security Engineering

Platform Engineering Is Security Engineering

byMichelle Ensey

Gallup Organization sign

Vulnerabilities & Threats

Gallup Addresses XSS Bugs in Website

Gallup Addresses XSS Bugs in Website

byBecky Bracken, Senior Editor, Dark Reading

Pile of money in various currencies and denominations.

Application Security

FreeBSD Gets €686,400 to Boost Security Features

FreeBSD Gets New Funding to Boost Security

byDark Reading Staff

Indian soldiers marching

Threat Intelligence

Indian Army Propaganda Spread by 1.4K AI-Powered Social Media Accounts

Indian Army Propaganda Spread by 1.4K AI-Powered Social Media Accounts

byNate Nelson, Contributing Writer

Programming code abstract image

Application Security

'Revival Hijack' on PyPI Disguises Malware With Legitimate File Names

'Revival Hijack' on PyPI Disguises Malware With Legitimate File Names

byJai Vijayan, Contributing Writer

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.