Application Security News and Articles


APIs, Microservices and Risk Management – FireTail Blog

Nov 19, 2025 - Alan Fagan - Although microservices are widespread, they are often misunderstood by business leaders. While they present substantial benefits, they also have the potential to introduce new risks into the API environment. ...

API Security Essentials: A Comprehensive Checklist for Securing your API – FireTail Blog

Nov 19, 2025 - Alan Fagan - 1.  Validating User Input One of the cornerstones of API security is to validate user input. Failing to do so accurately can lead to a security issues such as injection attacks and Cross-Site Scripting. When users ...

NDSS 2025 – Understanding Miniapp Malware: Identification, Dissection, And Characterization

----------- SESSION Session 3C: Mobile Security ----------- ----------- Authors, Creators & Presenters: Yuqing Yang (The Ohio State University), Yue Zhang (Drexel University), Zhiqiang Lin (The Ohio State ...

FIRESIDE CHAT: Edge AI moves onto the silicon layer, redefining how connected systems run

One of the more surprising — and least visible — frontiers of artificial intelligence today is unfolding at the extreme edges of our hyper-connected systems. Related: AI adoption outpacing controls Think sensors in forests that detect illegal ...

Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes

Amazon threat intelligence experts have documented two cases in which Iran leveraged hacking to prepare for kinetic attacks. The post Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes appeared ...

Secure.com Raises $4.5 Million for Agentic Security

The cybersecurity company has launched Digital Security Teammate (DST), AI agents that investigate, triage, and escalate incidents when needed. The post Secure.com Raises $4.5 Million for Agentic Security appeared first on SecurityWeek.

Randall Munroe’s XKCD ‘’Continents”

via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘’Continents” appeared first on Security Boulevard.

Beyond Pay-Per-Crawl: How to Turn AI Agent Traffic Into Revenue

Unlock new revenue streams from AI agents. Learn how DataDome + Skyfire’s KYA+Pay model turns verified agent traffic into secure, monetized interactions. The post Beyond Pay-Per-Crawl: How to Turn AI Agent Traffic Into Revenue appeared first on ...

NDSS 2025 – The Skeleton Keys: A Large Scale Analysis Of Credential Leakage In Mini-Apps

----------- SESSION Session 3C: Mobile Security ----------- ----------- Authors, Creators & Presenters: Yizhe Shi (Fudan University), Zhemin Yang (Fudan University), Kangwei Zhong (Fudan University), Guangliang Yang (Fudan University), Yifan ...

Seraphic Becomes the First and Only Secure Enterprise Browser Solution to Protect Electron-Based Applications

Tel Aviv, Israel, 19th November 2025, CyberNewsWire The post Seraphic Becomes the First and Only Secure Enterprise Browser Solution to Protect Electron-Based Applications appeared first on Security Boulevard.

Veeam Data Platform v13 strengthens AI-driven analysis

Veeam Software launches Veeam Data Platform v13, delivering the resilience, flexibility, and intelligence needed for an AI-powered future. With a modern platform architecture, AI-powered intelligence, an expansive hypervisor integration model, ...

7-Zip vulnerability is being actively exploited, NHS England warns (CVE-2025-11001)

NHS England Digital, the technology arm of the publicly-funded health service for England, has issued a warning about a 7-Zip vulnerability (CVE-2025-11001) being exploited by attackers. “Active exploitation of CVE-2025-11001 has been ...

Immersive unveils Dynamic Threat Range to transform cyber readiness testing

Immersive announced the general availability of Dynamic Threat Range, a new capability within its Immersive One platform that transforms how organizations validate and improve cyber readiness. Dynamic Threat Range runs authentic, full-chain, ...

Strata introduces AI Identity Gateway to secure and govern agentic systems

Strata Identity announced the availability of the AI Identity Gateway, an enterprise-grade runtime identity and policy-enforcement control point for agentic behavior. As part of Maverics for Agentic Identity, the AI Identity Gateway provides ...

How Microsegmentation Powers Breach Readiness and Cyber Resilience

“The attackers are not waiting for you to make the decision. Attackers will continue to attack. And just because you are not able to see it doesn’t mean the attack has not happened.” That’s the reality ColorTokens CEO and ...

Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers

Palo Alto, California, 19th November 2025, CyberNewsWire The post Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers appeared first on Security Boulevard.

Exam prep hacked: Study tips and tricks that really work

Ready to get certified but not sure where to start? Get insider tips and tricks on what to do from day one to test day. Join ISC2-certified instructors and an audience of your peers for this live interactive webinar. Find out what to do in the ...

Active Directory Trust Misclassification: Why Old Trusts Look Like Insecure External Trusts

Tenable Research reveals an Active Directory anomaly: intra-forest trusts created under Windows 2000 lack a key identifying flag, even after domain and forest upgrades. Learn how to find this legacy behavior persisting to this day, and use ...

AppOmni Expands AI Security with Agentic AI Security for ServiceNow

See how AppOmni AgentGuard defends ServiceNow AI agents from prompt injection and access risks, building trust and compliance across platforms. The post AppOmni Expands AI Security with Agentic AI Security for ServiceNow appeared first on ...

Mate Emerges From Stealth Mode With $15.5 Million in Seed Funding

The cybersecurity startup will use the funds to expand its engineering team, extend collaborations, and get ready for enterprise rollout. The post Mate Emerges From Stealth Mode With $15.5 Million in Seed Funding appeared first on SecurityWeek.