Application Security News and Articles


Governing the Unseen Risks of GenAI: Why Bias Mitigation and Human Oversight Matter Most  

From prompt injection to cascading agent failures, GenAI expands the enterprise attack surface. A governance-first, security-focused approach—rooted in trusted data, guardrails, and ongoing oversight—is now critical for responsible AI ...

330 custom email domains, and what this tells us about how attackers build infrastructure for fake account creation

We recently detected and blocked a large-scale fake account creation campaign. The attacker attempted to register tens of thousands of accounts using bots, automating the entire signup process through a modified version of Chrome. To evade ...

Master how to report a breach for fast and effective cyber incident response

For every organization, no matter the size or industry, the integrity and security of data is more crucial than ever as it faces the possibility of a cyber breach everyday. But what separates a company that bounces back quickly from one that ...

The Battle Over The Search of a Cell Phone – Feds v. Locals

As state and federal authorities seek broad access to a seized phone, a Virginia prosecutor argues for narrowly tailored digital searches — a clash that could redefine Fourth Amendment protections for modern devices. The post The Battle Over ...

Chrome 142 Update Patches Exploited Zero-Day

The flaw was reported by Google's Threat Analysis Group and was likely exploited by a commercial spyware vendor. The post Chrome 142 Update Patches Exploited Zero-Day appeared first on SecurityWeek.

Understanding India’s Digital Personal Data Potection Act 2025: A Complete Overview

India’s Digital Personal Data Protection Act (DPDP), 2023, signaled the country’s commitment to building a modern and globally aligned privacy framework. But as with any legislation, the true operational impact becomes clear only when ...

Dr. Richard Zhao from NSFOCUS Selected into 2025 Top 10 Cybersecurity Professionals by Leading Consulting Company

SANTA CLARA, Calif., Nov 18, 2025 — International Data Corporation (IDC) officially released the “2025 IDC China Top 10 Cybersecurity Professionals” at the 10th IDC China CIO Summit last month. This honor is intended to recognize ...

Boost your cyber defense with unified cybersecurity and GRC strategies

Cybersecurity is no longer just an IT issue; it is a strategic imperative that touches every aspect of modern business. In today’s digital landscape, organizations face increasingly sophisticated threats that can disrupt operations, tarnish ...

What security pros should know about insurance coverage for AI chatbot wiretapping claims

AI-powered chatbots raise profound concerns under federal and state wiretapping and eavesdropping statutes that is being tested by recent litigation, creating greater exposure to the companies and developers that use this technology. Security ...

How attackers use patience to push past AI guardrails

Most CISOs already assume that prompt injection is a known risk. What may come as a surprise is how quickly those risks grow once an attacker is allowed to stay in the conversation. A new study from Cisco AI Defense shows how open weight models ...

Agentic AI puts defenders on a tighter timeline to adapt

Security teams know that attackers rarely wait for defenders to be ready. The latest AI Maturity in Cybersecurity Report from Arkose Labs shows how quickly the threat landscape is shifting and how slowly organizations can respond in comparison. ...

The privacy panic around machine learning is overblown

We often hear warnings about how machine learning (ML) models may expose sensitive information tied to their training data. The concern is understandable. If a model was trained on personal records, it may seem reasonable to assume that releasing ...

Cybersecurity jobs available right now: November 18, 2025

Application Security Engineer Vim | Israel | Hybrid – View job details As an Application Security Engineer, you will conduct internal penetration testing against Vim’s applications and APIs. Design, build, and implement the ...

From Snapshots to Signals: The End of Point-in-Time Compliance

Why static audits fail in today’s fast-changing threat environment If you’ve ever been through an annual compliance audit, you know the feeling. The weeks of preparation, the spreadsheets, the endless evidence gathering. Then, finally, ...

What future innovations excite leaders in Agentic AI security

How Are Non-Human Identities Transforming the Landscape of Cybersecurity? Have you ever considered what constitutes the “identity” of a machine where technology evolves at breakneck speed? The concept of Non-Human Identities (NHIs) is ...

What makes an effective Secret Scanning solution

How Can Organizations Achieve Robust Cybersecurity with Effective Secret Scanning Solutions? Where cyber threats consistently challenge organizations, the focus on securing Non-Human Identities (NHIs) has become critical. NHIs, essentially ...

Are current IAM solutions capable of handling NHIs effectively

Can Your IAM Solutions Handle Non-Human Identities Efficiently? Where organizations are increasingly relying on digital frameworks, the role of Non-Human Identities (NHIs) has become pivotal, especially in cloud environments. But how can we ...

How adaptable are AI-driven security systems to new threats

How Do AI-Driven Security Systems Keep Up with New Threats? How can organizations ensure their AI-driven security systems remain adaptable to new threats? With cyber threats grow in sophistication and frequency, the ability of security systems to ...

When Machines Attack Machines: The New Reality of AI Security

Unlike conventional IT systems—with bounded entry points, predictable patch cycles, and known vulnerabilities—large language models (LLMs) and next-generation AI agents create an attack surface so broad, dynamic, and interconnected that ...