Application Security

Organizations that deploy updates only after a vulnerability is disclosed apply far fewer updates and do so at a lower cost than those that stay up to date on all of their software, university researchers say.

Revised policy means security analysts won't be charged under the Computer Fraud and Abuse Act.

Shadowserver Foundation researchers find 380,000 open Kubernetes API servers.

Mobile attacks have been going on for many years, but the threat is rapidly evolving as more sophisticated malware families with novel features enter the scene.

System of Trust includes data-driven metrics for evaluating the integrity of software, services, and suppliers.

Last month attackers quickly reverse-engineered VMware patches to launch RCE attacks. CISA warns it's going to happen again.

Publicly released proof-of-concept exploits are supercharging attacks against unpatched systems, CISA warns.

Build security in up front to secure open source code at the foundational level. Apply security controls, have engineering teams test, do code review, and use attacker-centric behavioral analytics to mitigate threats.

A critical VMware bug tracked as CVE-2022-22954 continues to draw cybercriminal moths to its remote code-execution flame, with recent attacks focused on botnets and Log4Shell.

The founders behind more than 90 cybersecurity firms have set up a $300 million investment fund.

A widespread attack is underway to exploit known RCE flaw in Tatsu Builder WordPress plug-in, according to a new report.

The online giant analyzes, patches, and maintains its own versions of open source software, and now the company plans to give others access to its libraries and components as a subscription.

RFT is expanding the Safe Place hospital market security system to include staff protection.

Maintainers of open source software (OSS) will gain additional security tools for their own projects, while the developers who use OSS — and about 97% of software does — will gain more data on security.

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.