Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

Silhouette of a hand holding a magnifying glass in front of the Google Chrome logo

Malicious Chrome Extensions Skate Past Google's Updated Security Malicious Chrome Extensions Skate Past Google's Updated Security

Google's Manifest V3 offers better privacy and security controls for browser extensions than the previous M2, but too many lax permissions and gaps remain.

byJai Vijayan, Contributing Writer

Oct 7, 2024

|

5 Min Read

WordPress logo on a device screen beside a computer screen showing the WordPress homepage

Endpoint Security

Single HTTP Request Can Exploit 6M WordPress Sites Single HTTP Request Can Exploit 6M WordPress Sites

byElizabeth Montalbano, Contributing Writer

Oct 7, 2024

4 Min Read

Ivanti logo on the side of a beige building with blue windows

Threat Intelligence

CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog

byDark Reading Staff

Oct 3, 2024

1 Min Read

Chinese flag draped over surveillance camera

Cyberattacks & Data Breaches

China-Backed APT Group Culling Thai Government Data China-Backed APT Group Culling Thai Government Data

byDark Reading Staff

Oct 3, 2024

1 Min Read

A stylized crystal-looking judge's gavel with the letters AI standing behind it

Application Security

Calif. Gov. Vetoes AI Safety Bill Aimed at Big Tech Players Calif. Gov. Vetoes AI Safety Bill Aimed at Big Tech Players

byJai Vijayan, Contributing Writer

Sep 30, 2024

5 Min Read

A web of circles with the word Update and icons for networks, a person, and gears.

Application Security

Reachability Analysis Pares Down Static Security-Testing Overload Reachability Analysis Pares Down Static Security-Testing Overload

byRobert Lemos, Contributing Writer

Sep 30, 2024

4 Min Read

Cloud with lock in center, blue background

Application Security

Sloppy Entra ID Credentials Attract Hybrid Cloud Ransomware

Sloppy Entra ID Credentials Attract Hybrid Cloud Ransomware

byBecky Bracken, Senior Editor, Dark Reading

Google Android figure standing on laptop keyboard with code onscreen

Application Security

Memory-Safe Code Adoption Has Made Android Safer

Memory-Safe Code Adoption Has Made Android Safer

byJai Vijayan, Contributing Writer

Concept illustration of AI, with a microchip with "AI" written on it and code snippets fading out

Application Security

Congress Advances Bill to Add AI to National Vulnerability Database

Congress Advances Bill to Add AI to NVD

byJennifer Lawinski, Contributing Writer

code security attack surface area visualization for devops; code in various colors floating in a curved black space

Application Security

Moving DevOps Security Out of 'the Stone Age'

Moving DevOps Security Out of 'the Stone Age'

byRobert Lemos, Contributing Writer

Vulnerabilities & Threats

Third Ivanti Bug Comes Under Active Exploit, CISA Warns

Third Ivanti Bug Comes Under Active Exploit, CISA Warns

byDark Reading Staff

Concept art, computer code and camera lenses in glowing light green arcs on black background

Application Security

Keep Tier-One Applications Out of Virtual Environments

Keep Tier-One Applications Out of Virtual Environments

Сloud Security

Microsoft Trims Cloud Cyberattack Surface in Security Push

Microsoft Trims Cloud Cyberattack Surface in Security Push

byJai Vijayan, Contributing Writer

Application Security

Kaspersky Rolls Back for US Customers, Makes Way for UltraAV

Kaspersky Rolls Back for US Customers, Makes Way for UltraAV

byKristina Beek, Associate Editor, Dark Reading

A drawing of the Pisces constellation

Threat Intelligence

Citrine Sleet Poisons PyPI Packages With Mac & Linux Malware

Citrine Sleet Poisons PyPI Packages With Mac & Linux Malware

byNate Nelson, Contributing Writer

Application Security

GitLab Warns of Max Severity Authentication Bypass Bug

GitLab Warns of Max Severity Authentication Bypass Bug

byJai Vijayan, Contributing Writer

Application Security

1 PoC Exploit for Critical RCE Flaw, but 2 Patches From Veeam

1 PoC Exploit for Critical RCE Flaw, but 2 Patches From Veeam

byDark Reading Staff

Three men in reflective jackets standing around a laptop

Application Security

Contractor Software Targeted via Microsoft SQL Server Loophole

Contractor Software Targeted via Microsoft SQL Server Loophole

byDark Reading Staff

Digital flowchart abstract blue background. Computer software algorithm conceptual illustration.

Application Security

CISA Urges Software Makers to Eliminate XSS Flaws

CISA Urges Software Makers to Eliminate XSS

"Zero day exploit" and Alert icon on computer display

Application Security

'Void Banshee' Exploits Second Microsoft Zero-Day

'Void Banshee' Exploits Second Microsoft Zero-Day

byJai Vijayan, Contributing Writer

Application Security

Microsoft VS Code Undermined in Asian Spy Attack

Microsoft VS Code Undermined in Asian Spy Attack

byNate Nelson, Contributing Writer

A Selenium pill capsule

Application Security

Hackers Proxyjack & Cryptomine Selenium Grid Servers

Hackers Proxyjack & Cryptomine Selenium Grid Servers

byNate Nelson, Contributing Writer

Visualization of the world from space, ringed by satellites

ICS/OT Security

India Needs Better Cybersecurity for Space, Critical Infrastructure

India Needs Better Cybersecurity for Space, Critical Infrastructure

byRobert Lemos, Contributing Writer

A cloud with 0 and 1 bursting out

Application Security

Wiz Launches Wiz Code Application Security Tool

Wiz Launches Wiz Code Application Security Tool

byJennifer Lawinski, Contributing Writer

A hand over a keyboard with an Update progress bar imposed on top

Application Security

Microsoft Discloses 4 Zero-Days in September Update

Microsoft Discloses 4 Zero-Days in September Update

byJai Vijayan, Contributing Writer

Red open lock, indicating a security problem, among closed blue locks

Application Security

Platform Engineering Is Security Engineering

Platform Engineering Is Security Engineering

byMichelle Ensey

Gallup Organization sign

Vulnerabilities & Threats

Gallup Addresses XSS Bugs in Website

Gallup Addresses XSS Bugs in Website

byBecky Bracken, Senior Editor, Dark Reading

Pile of money in various currencies and denominations.

Application Security

FreeBSD Gets €686,400 to Boost Security Features

FreeBSD Gets New Funding to Boost Security

byDark Reading Staff

Indian soldiers marching

Threat Intelligence

Indian Army Propaganda Spread by 1.4K AI-Powered Social Media Accounts

Indian Army Propaganda Spread by 1.4K AI-Powered Social Media Accounts

byNate Nelson, Contributing Writer

Programming code abstract image

Application Security

'Revival Hijack' on PyPI Disguises Malware With Legitimate File Names

'Revival Hijack' on PyPI Disguises Malware With Legitimate File Names

byJai Vijayan, Contributing Writer

Pavel Durov, CEO of Telegram

Threat Intelligence

CEO's Arrest Will Likely Not Dampen Cybercriminal Interest in Telegram

CEO's Arrest Will Likely Not Dampen Cybercriminal Interest in Telegram

byJai Vijayan, Contributing Writer

Come up with cybersecurity-related caption for man standing at ATM holding can of bug spray and saying something to woman in front of him

Application Security

Name That Edge Toon: Bug Off

Name That Edge Toon: Bug Off

byJohn Klossner, Cartoonist

WPS app on a smartphone screen

Vulnerabilities & Threats

South Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese Intel

South Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese Intel

byNate Nelson, Contributing Writer

A brain with computer code beside it

Application Security

Hundreds of LLM Servers Expose Corporate, Health & Other Online Data

Hundreds of LLM Servers Expose Corporate, Health & Other Online Data

byNate Nelson, Contributing Writer

Philippine military academy

Application Security

Hackers Use Rare Stealth Techniques to Down Asian Military, Gov't Orgs

Hackers Use Rare Stealth Techniques to Down Asian Military, Gov't Orgs

byNate Nelson, Contributing Writer

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.