Application Security News and Articles


RidgeSphere streamlines security validation operations

Ridge Security announced RidgeSphere, a centralized management platform designed to simplify the orchestration of multiple RidgeBot , the AI-powered automated security validation platform, across client environments. Built for Managed Security ...

Photos: RSAC 2025

RSAC 2025 Conference is taking place at the Moscone Center in San Francisco. Help Net Security is on-site, and this gallery takes you inside the event. The featured vendors are: PowerDMARC, Skyhawk Security, ThreatLocker, Stellar Cyber, Center ...

Meet Doug McLaughlin: HYPR’s New SVP of Worldwide Sales

You've been at HYPR for six years. Why is now the right time for this expanded role and for HYPR's next chapter? Doug: Timing is everything. It's the one thing you can't manufacture in this industry. You’re either too early, too late, or you ...

Airplay-enabled devices open to attack via “AirBorne” vulnerabilities

Vulnerabilities in Apple’s AirPlay Protocol, AirPlay Software Development Kits (SDKs), and the CarPlay Communication Plug-in could allow attackers to compromise AirPlay-enabled devices developed and sold by Apple and by other companies. ...

Download: Edgescan 2025 Vulnerability Statistics Report

Edgescan’s 2025 Vulnerability Statistics Report explores risk density patterns across network/device and application layers, uncovers complex vulnerabilities that automated tools consistently miss, and evaluates the real-world effectiveness ...

The Future of Cloud Access Management: How Tenable Cloud Security Redefines Just-in-Time Access

Traditional approaches to cloud access rely on static, permanent permissions that are often overprivileged. Learn how just-in-time access completely changes the game. The access challenge in modern cloud environments As cloud adoption ...

Top Data Breaches in April 2025 That Made The Headlines

As April 2025 drew to a close, it left a string of high-profile data breaches in its wake, rattling major organizations. Yale New Haven Health saw 5.5 million patient records... The post Top Data Breaches in April 2025 That Made The Headlines ...

Secrets leaks increase — and expand beyond the codebase

Organizations that assume secrets protection is solely about scanning public repositories and codebases for API keys, passwords, and tokens may be overlooking a major blind spot. The post Secrets leaks increase — and expand beyond the codebase ...

RSA Conference 2025 Announcement Summary (Day 2) 

Hundreds of companies are showcasing their products and services this week at the 2025 edition of the RSA Conference in San Francisco. The post RSA Conference 2025 Announcement Summary (Day 2)  appeared first on SecurityWeek.

Property renters targeted in simple BEC scam

Emails purportedly sent by rental property management firms are being used to steal money from people in France and Canada, Proofpoint researchers have warned. A BEC scam preying on renters “Most campaigns are sent from compromised ...

Microsoft Sender Requirements Enforced — How to Avoid 550 5.7.15 Rejections

Starting May 5, 2025, Microsoft enforces strict sender requirements. Emails from domains sending over 5,000 messages per day must pass SPF, DKIM, and DMARC checks.—or face the 550 5.7.15 Access Denied error. The post Microsoft Sender ...

Meta Releases Llama AI Open Source Protection Tools

Meta has released new Llama protection tools to help the open source AI community build more secure applications. The post Meta Releases Llama AI Open Source Protection Tools appeared first on SecurityWeek.

France Blames Russia for Cyberattacks on Dozen Entities

France says the Russian state-sponsored group APT28 is responsible for targeting or compromising a dozen French entities. The post France Blames Russia for Cyberattacks on Dozen Entities appeared first on SecurityWeek.

Legit leverages AI in ASPM platform to find, fix, and prevent vulnerabilities

Legit Security has unveiled new functionalities that leverage AI to help security teams more quickly shore up gaps in their AppSec programs. Specifically, Legit now leverages AI to drive advanced discovery for code-to-cloud correlation, increased ...

Frontegg releases identity management platform for AI agent builders

Frontegg launched Frontegg.ai, an identity management platform purpose-built for developers building AI agents. As AI agents move beyond experiments to becoming critical internal and market-facing enterprise products, secure, scalable identity ...

Link11 brings three brands together on one platform with new branding

Frankfurt am Main, Germany, 30th April 2025, CyberNewsWire The post Link11 brings three brands together on one platform with new branding appeared first on Security Boulevard.

Earn sAST Easily: Step-by-Step Guide

Discover how to get and use sAST efficiently.Continue reading on Medium »

Enhancing Security and Compliance With AI-Powered Monitoring in Billing Systems 

AI-powered monitoring provides a proactive, intelligent and scalable way to secure modern billing systems, especially for any company leveraging a billing platform for subscription pricing model.  The post Enhancing Security and Compliance With ...

BigID AI Data Lineage delivers transparency and control for AI

BigID launched AI Data Lineage, a new solution that provides organizations with visibility into how AI models access, process, and utilize data. As organizations increasingly integrate AI into their workflows, understanding the data lineage of AI ...

HPE strengthens hybrid cloud and connectivity with Aruba Networking and GreenLake security upgrades

Hewlett Packard Enterprise has announced expansions of HPE Aruba Networking and HPE GreenLake cloud to help enterprises modernize secure connectivity and hybrid cloud operations by blending multi-layered and zero trust approaches to protect ...