Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

Visual Studio Code logo under magnification
Application Security
Microsoft VS Code Undermined in Asian Spy AttackMicrosoft VS Code Undermined in Asian Spy Attack

A technique to abuse Microsoft's built-in source code editor has finally made it into the wild, thanks to China's Mustang Panda APT.

byNate Nelson, Contributing Writer
Sep 13, 2024
|
4 Min Read
A Selenium pill capsule
Application Security
Hackers Proxyjack & Cryptomine Selenium Grid ServersHackers Proxyjack & Cryptomine Selenium Grid Servers
byNate Nelson, Contributing Writer
Sep 12, 2024
4 Min Read
Visualization of the world from space, ringed by satellites
ICS/OT Security
India Needs Better Cybersecurity for Space, Critical InfrastructureIndia Needs Better Cybersecurity for Space, Critical Infrastructure
byRobert Lemos, Contributing Writer
Sep 11, 2024
5 Min Read
A cloud with 0 and 1 bursting out
Application Security
Wiz Launches Wiz Code Application Security ToolWiz Launches Wiz Code Application Security Tool
byJennifer Lawinski, Contributing Writer
Sep 10, 2024
1 Min Read
A hand over a keyboard with an Update progress bar imposed on top
Application Security
Microsoft Discloses 4 Zero-Days in September UpdateMicrosoft Discloses 4 Zero-Days in September Update
byJai Vijayan, Contributing Writer
Sep 10, 2024
5 Min Read
Red open lock, indicating a security problem, among closed blue locks
Application Security
Platform Engineering Is Security EngineeringPlatform Engineering Is Security Engineering
byMichelle Ensey
Sep 10, 2024
4 Min Read
Gallup Organization sign
Vulnerabilities & Threats
Gallup Addresses XSS Bugs in Website
Gallup Addresses XSS Bugs in Website
Sep 10, 2024
|
2 Min Read
byBecky Bracken, Senior Editor, Dark Reading
Pile of money in various currencies and denominations.
Application Security
FreeBSD Gets €686,400 to Boost Security Features
FreeBSD Gets New Funding to Boost Security
Sep 6, 2024
|
2 Min Read
byDark Reading Staff
Indian soldiers marching
Threat Intelligence
Indian Army Propaganda Spread by 1.4K AI-Powered Social Media Accounts
Indian Army Propaganda Spread by 1.4K AI-Powered Social Media Accounts
Sep 5, 2024
|
4 Min Read
byNate Nelson, Contributing Writer
Programming code abstract image
Application Security
'Revival Hijack' on PyPI Disguises Malware With Legitimate File Names
'Revival Hijack' on PyPI Disguises Malware With Legitimate File Names
Sep 4, 2024
|
4 Min Read
byJai Vijayan, Contributing Writer
Pavel Durov, CEO of Telegram
Threat Intelligence
CEO's Arrest Will Likely Not Dampen Cybercriminal Interest in Telegram
CEO's Arrest Will Likely Not Dampen Cybercriminal Interest in Telegram
Sep 4, 2024
|
4 Min Read
byJai Vijayan, Contributing Writer
Come up with cybersecurity-related caption for man standing at ATM holding can of bug spray and saying something to woman in front of him
Application Security
Name That Edge Toon: Bug Off
Name That Edge Toon: Bug Off
Sep 3, 2024
|
1 Min Read
byJohn Klossner, Cartoonist
WPS app on a smartphone screen
Vulnerabilities & Threats
South Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese Intel
South Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese Intel
Aug 29, 2024
|
4 Min Read
byNate Nelson, Contributing Writer
A brain with computer code beside it
Application Security
Hundreds of LLM Servers Expose Corporate, Health & Other Online Data
Hundreds of LLM Servers Expose Corporate, Health & Other Online Data
Aug 28, 2024
|
4 Min Read
byNate Nelson, Contributing Writer
Philippine military academy
Application Security
Hackers Use Rare Stealth Techniques to Down Asian Military, Gov't Orgs
Hackers Use Rare Stealth Techniques to Down Asian Military, Gov't Orgs
Aug 26, 2024
|
4 Min Read
byNate Nelson, Contributing Writer
Becky Bracken interviews Michael Bargury at Dark Reading News Desk.
Application Security
News Desk 2024: Hacking Microsoft Copilot Is Scary Easy
News Desk 2024: Hacking Microsoft Copilot Is Scary Easy
Aug 26, 2024
byBecky Bracken, Senior Editor, Dark Reading
A digital pink key surrounded by lights moving around it and code floating throughout the background
Cyber Risk
NIST Hands Off Post-Quantum Cryptography Work to Cyber Teams
NIST Hands Off Post-Quantum Cryptography Work to Cyber Teams
Aug 23, 2024
|
6 Min Read
byBecky Bracken, Senior Editor, Dark Reading
A woman, panicked, standing on an infected Macbook's keyboard
Threat Intelligence
Infostealers Waltz Through macOS to Grab Crypto Wallets, Browser Creds
Infostealers Waltz Through macOS to Grab Crypto Wallets, Browser Creds
Aug 22, 2024
|
5 Min Read
byNate Nelson, Contributing Writer
The words "APPLICATION SECURITY" on a monitor
Vulnerabilities & Threats
Why End of Life for Applications Is the Beginning of Life for Hackers
Why End of Life for Applications Is the Beginning of Life for Hackers
Aug 22, 2024
|
4 Min Read
byMatt Middleton-Leal
An undercase, lime green-colored 'u'
Threat Intelligence
Chinese Threat Actors Use MSI Files to Bypass Windows, VT Detection
Chinese Threat Actors Use MSI Files to Bypass Windows, VT Detection
Aug 22, 2024
|
4 Min Read
byNate Nelson, Contributing Writer
A wall of 0 and 1 and a silhouette of a person
Application Security
Gartner Spotlights AI, Security in 2024 Hype Cycle for Emerging Tech
Gartner Spotlights AI, Security in 2024 Hype Cycle for Emerging Tech
Aug 21, 2024
|
3 Min Read
byJennifer Lawinski, Contributing Writer
code AI
Application Security
Researchers Highlight How Poisoned LLMs Can Suggest Vulnerable Code
Researchers Highlight How Poisoned LLMs Can Suggest Vulnerable Code
Aug 20, 2024
|
5 Min Read
byRobert Lemos, Contributing Writer
Laptop computer with landing page for Microsoft Azure
Application Security
Azure Kubernetes Bug Lays Open Cluster Secrets
Azure Kubernetes Bug Lays Open Cluster Secrets
Aug 20, 2024
|
3 Min Read
byJai Vijayan, Contributing Writer
Fire Bug pyrrhocoris apterus
Vulnerabilities & Threats
Critical, Actively Exploited Jenkins RCE Bug Suffers Patch Lag
Critical, Actively Exploited Jenkins RCE Bug Suffers Patch Lag
Aug 20, 2024
|
3 Min Read
byNate Nelson, Contributing Writer
person in a dark suit and beard breaking out of a white wall
Application Security
Assume Breach When Building AI Apps
Assume Breach When Building AI Apps
Aug 19, 2024
|
4 Min Read
byMichael Bargury
A screen showing technology icons such as keys, 0 and 1, and wireless signal, in hexagons.
Sponsored Content
Why CISOs Need Application Detection and Response
Why CISOs Need Application Detection and Response
Aug 19, 2024
|
4 Min Read
A leaky outside faucet
Application Security
Thousands of Oracle NetSuite E-Commerce Sites Expose Sensitive Customer Data
Thousands of Oracle NetSuite E-Commerce Sites Expose Sensitive Customer Data
Aug 16, 2024
|
3 Min Read
byNathan Eddy, Contributing Writer
Two people looking at something on paper and on the screen. The text is blurry.
Application Security
White House Pledges $10 Million for Open Source Initiative
White House Pledges $10 Million for Open Source Initiative
Aug 15, 2024
|
1 Min Read
byJennifer Lawinski, Contributing Writer
a race car on a track against a blurred background
Application Security
DARPA Announces AI Cyber Challenge Finalists
DARPA Announces AI Cyber Challenge Finalists
Aug 15, 2024
|
2 Min Read
byJennifer Lawinski, Contributing Writer
Icon with shield and keyhole, over a digital background
Application Security
Unfixed Microsoft Entra ID Authentication Bypass Threatens Hybrid IDs
Unfixed Microsoft Entra ID Authentication Bypass Threatens Hybrid IDs
Aug 15, 2024
|
4 Min Read
byJai Vijayan, Contributing Writer
Two people talking at a news desk against a dark backdrop with "Dark Reading" written on it.
Sponsored Content
Black Hat 2024: Organizations Are Giving Offensive Security a Fresh Look
Black Hat 2024: Organizations Are Giving Offensive Security a Fresh Look
Aug 14, 2024
|
11 Min View
byTerry Sweeney, Contributing Editor
Two people talking at a news desk against a dark backdrop with "Dark Reading" written on it.
Sponsored Content
Black Hat 2024: How AI Fits into Today's DevSecOps Requirements
Black Hat 2024: How AI Fits into Today's DevSecOps Requirements
Aug 13, 2024
|
11 Min View
byTerry Sweeney, Contributing Editor
A Windows security update onscreen
Vulnerabilities & Threats
Microsoft Discloses 10 Zero-Day Bugs in Patch Tuesday Update
Microsoft Discloses 10 Zero-Day Bugs in Patch Tuesday Update
Aug 13, 2024
|
5 Min Read
byJai Vijayan, Contributing Writer
A line of ants; white background
Remote Workforce
Critical Ivanti vTM Bug Allows Unauthorized Admin Access
Critical Ivanti vTM Bug Allows Unauthorized Admin Access
Aug 13, 2024
|
2 Min Read
byNate Nelson, Contributing Writer
Healthcare chatbot conversation with smartphone screen app interface and artificial intelligence
Application Security
Microsoft Azure AI Health Bot Infected With Critical Vulnerabilities
Microsoft Azure AI Health Bot Infected With Critical Vulnerabilities
Aug 13, 2024
|
3 Min Read
byNathan Eddy, Contributing Writer

Editor's Choice

A hand over a keyboard with an Update progress bar imposed on top
Application Security
Microsoft Discloses 4 Zero-Days in September UpdateMicrosoft Discloses 4 Zero-Days in September Update
byJai Vijayan, Contributing Writer
Sep 10, 2024
5 Min Read
Black background and white text saying Dark Reading Confidential
Vulnerabilities & Threats
Dark Reading Confidential: Pen Test Arrests, Five Years LaterDark Reading Confidential: Pen Test Arrests, Five Years Later
byDark Reading Staff
Sep 10, 2024
42 Min Listen
The silhouette of audience members watching a cybersecurity panel
Cybersecurity Operations
Cyber Staffing Shortages Remain CISOs' Biggest ChallengeCyber Staffing Shortages Remain CISOs' Biggest Challenge
byKristina Beek, Associate Editor, Dark Reading
Sep 10, 2024
4 Min Read
Reports
More Reports
Webinars
More Webinars
White Papers
More Whitepapers
Events
More Events
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe