Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

WordPress logo on mobile app and on the screen of a smartphone.

Application Security

WP Engine Accuses WordPress of 'Forcibly' Taking Over Its Plug-in WP Engine Accuses WordPress of 'Forcibly' Taking Over Its Plug-in

WordPress moves could have security implications for sites using Advanced Custom Fields plug-in.

byJai Vijayan, Contributing Writer

Oct 15, 2024

|

4 Min Read

Ivanti sign on building

Cyberattacks & Data Breaches

Serious Adversaries Circle Ivanti CSA Zero-Day Flaws Serious Adversaries Circle Ivanti CSA Zero-Day Flaws

byDark Reading Staff

Oct 14, 2024

2 Min Read

Pokémon characters huddled together

Cyberattacks & Data Breaches

Pokémon Gaming Company Employee Info Leaked in Hack Pokémon Gaming Company Employee Info Leaked in Hack

byDark Reading Staff

Oct 14, 2024

1 Min Read

Application Security

Certificate Authority Market Size to Surpass $485M by 2033 Certificate Authority Market Size to Surpass $485M by 2033

Oct 11, 2024

4 Min Read

Application Security

Relyance AI Raises $32M Series B Funding to Safeguard AI Innovation in the Enterprise Relyance AI Raises $32M Series B Funding to Safeguard AI Innovation in the Enterprise

Oct 11, 2024

4 Min Read

A close-up of the Firefox application next to the Internet Explorer application

Cyberattacks & Data Breaches

Critical Mozilla Firefox Zero-Day Allows Code Execution Critical Mozilla Firefox Zero-Day Allows Code Execution

byDark Reading Staff

Oct 10, 2024

1 Min Read

Application Security

Introducing Mayhem: ForAllSecure Unveils New Name and Company Focus

Introducing Mayhem: ForAllSecure Unveils New Name and Company Focus

Application Security

OpenGradient Raises $8.5M to Decentralize AI Infrastructure and Accelerate Secure, Open-Source AI

OpenGradient Raises $8.5M to Decentralize AI Infrastructure and Accelerate Secure, Open-Source AI

A cloud hologram projecting from a microchip

Cyberattacks & Data Breaches

3 More Ivanti Cloud Vulns Exploited in the Wild

3 More Ivanti Cloud Vulns Exploited in the Wild

byDark Reading Staff

A laptop on the table with software update progress bar on screen

Vulnerabilities & Threats

5 Zero-Days in Microsoft's October Update to Patch Immediately

5 Zero-Days in Microsoft's October Update to Patch Immediately

byJai Vijayan, Contributing Writer

Malicious Chrome Extensions Skate Past Google's Updated Security

Malicious Chrome Extensions Skate Past Google's Updated Security

byJai Vijayan, Contributing Writer

Endpoint Security

Single HTTP Request Can Exploit 6M WordPress Sites

Single HTTP Request Can Exploit 6M WordPress Sites

byElizabeth Montalbano, Contributing Writer

Threat Intelligence

CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog

CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog

byDark Reading Staff

Chinese flag draped over surveillance camera

Cyberattacks & Data Breaches

China-Backed APT Group Culling Thai Government Data

China-Backed APT Group Culling Thai Government Data

byDark Reading Staff

A stylized crystal-looking judge's gavel with the letters AI standing behind it

Application Security

Calif. Gov. Vetoes AI Safety Bill Aimed at Big Tech Players

Calif. Gov. Vetoes AI Safety Bill Aimed at Big Tech Players

byJai Vijayan, Contributing Writer

A web of circles with the word Update and icons for networks, a person, and gears.

Application Security

Reachability Analysis Pares Down Static Security-Testing Overload

Reachability Analysis Pares Down Static Security-Testing Overload

byRobert Lemos, Contributing Writer

Cloud with lock in center, blue background

Application Security

Sloppy Entra ID Credentials Attract Hybrid Cloud Ransomware

Sloppy Entra ID Credentials Attract Hybrid Cloud Ransomware

byBecky Bracken, Senior Editor, Dark Reading

Google Android figure standing on laptop keyboard with code onscreen

Application Security

Memory-Safe Code Adoption Has Made Android Safer

Memory-Safe Code Adoption Has Made Android Safer

byJai Vijayan, Contributing Writer

Concept illustration of AI, with a microchip with "AI" written on it and code snippets fading out

Application Security

Congress Advances Bill to Add AI to National Vulnerability Database

Congress Advances Bill to Add AI to NVD

byJennifer Lawinski, Contributing Writer

code security attack surface area visualization for devops; code in various colors floating in a curved black space

Application Security

Moving DevOps Security Out of 'the Stone Age'

Moving DevOps Security Out of 'the Stone Age'

byRobert Lemos, Contributing Writer

Vulnerabilities & Threats

Third Ivanti Bug Comes Under Active Exploit, CISA Warns

Third Ivanti Bug Comes Under Active Exploit, CISA Warns

byDark Reading Staff

Concept art, computer code and camera lenses in glowing light green arcs on black background

Application Security

Keep Tier-One Applications Out of Virtual Environments

Keep Tier-One Applications Out of Virtual Environments

Сloud Security

Microsoft Trims Cloud Cyberattack Surface in Security Push

Microsoft Trims Cloud Cyberattack Surface in Security Push

byJai Vijayan, Contributing Writer

Application Security

Kaspersky Rolls Back for US Customers, Makes Way for UltraAV

Kaspersky Rolls Back for US Customers, Makes Way for UltraAV

byKristina Beek, Associate Editor, Dark Reading

A drawing of the Pisces constellation

Threat Intelligence

Citrine Sleet Poisons PyPI Packages With Mac & Linux Malware

Citrine Sleet Poisons PyPI Packages With Mac & Linux Malware

byNate Nelson, Contributing Writer

Application Security

GitLab Warns of Max Severity Authentication Bypass Bug

GitLab Warns of Max Severity Authentication Bypass Bug

byJai Vijayan, Contributing Writer

Application Security

1 PoC Exploit for Critical RCE Flaw, but 2 Patches From Veeam

1 PoC Exploit for Critical RCE Flaw, but 2 Patches From Veeam

byDark Reading Staff

Three men in reflective jackets standing around a laptop

Application Security

Contractor Software Targeted via Microsoft SQL Server Loophole

Contractor Software Targeted via Microsoft SQL Server Loophole

byDark Reading Staff

Digital flowchart abstract blue background. Computer software algorithm conceptual illustration.

Application Security

CISA Urges Software Makers to Eliminate XSS Flaws

CISA Urges Software Makers to Eliminate XSS

"Zero day exploit" and Alert icon on computer display

Application Security

'Void Banshee' Exploits Second Microsoft Zero-Day

'Void Banshee' Exploits Second Microsoft Zero-Day

byJai Vijayan, Contributing Writer

Application Security

Microsoft VS Code Undermined in Asian Spy Attack

Microsoft VS Code Undermined in Asian Spy Attack

byNate Nelson, Contributing Writer

A Selenium pill capsule

Application Security

Hackers Proxyjack & Cryptomine Selenium Grid Servers

Hackers Proxyjack & Cryptomine Selenium Grid Servers

byNate Nelson, Contributing Writer

Visualization of the world from space, ringed by satellites

ICS/OT Security

India Needs Better Cybersecurity for Space, Critical Infrastructure

India Needs Better Cybersecurity for Space, Critical Infrastructure

byRobert Lemos, Contributing Writer

A cloud with 0 and 1 bursting out

Application Security

Wiz Launches Wiz Code Application Security Tool

Wiz Launches Wiz Code Application Security Tool

byJennifer Lawinski, Contributing Writer

A hand over a keyboard with an Update progress bar imposed on top

Application Security

Microsoft Discloses 4 Zero-Days in September Update

Microsoft Discloses 4 Zero-Days in September Update

byJai Vijayan, Contributing Writer

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.