Application Security News and Articles
Nov 19, 2025 - Alan Fagan - Although microservices are widespread, they are often misunderstood by business leaders. While they present substantial benefits, they also have the potential to introduce new risks into the API environment. ...
Nov 19, 2025 - Alan Fagan - 1. Validating User Input
One of the cornerstones of API security is to validate user input. Failing to do so accurately can lead to a security issues such as injection attacks and Cross-Site Scripting. When users ...
-----------
SESSION
Session 3C: Mobile Security
-----------
-----------
Authors, Creators & Presenters: Yuqing Yang (The Ohio State University), Yue Zhang (Drexel University), Zhiqiang Lin (The Ohio State ...
One of the more surprising — and least visible — frontiers of artificial intelligence today is unfolding at the extreme edges of our hyper-connected systems.
Related: AI adoption outpacing controls
Think sensors in forests that detect illegal ...
Amazon threat intelligence experts have documented two cases in which Iran leveraged hacking to prepare for kinetic attacks.
The post Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes appeared ...
The cybersecurity company has launched Digital Security Teammate (DST), AI agents that investigate, triage, and escalate incidents when needed.
The post Secure.com Raises $4.5 Million for Agentic Security appeared first on SecurityWeek.
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroe’s XKCD ‘’Continents” appeared first on Security Boulevard.
Unlock new revenue streams from AI agents. Learn how DataDome + Skyfire’s KYA+Pay model turns verified agent traffic into secure, monetized interactions.
The post Beyond Pay-Per-Crawl: How to Turn AI Agent Traffic Into Revenue appeared first on ...
-----------
SESSION
Session 3C: Mobile Security
-----------
-----------
Authors, Creators & Presenters: Yizhe Shi (Fudan University), Zhemin Yang (Fudan University), Kangwei Zhong (Fudan University), Guangliang Yang (Fudan University), Yifan ...
Tel Aviv, Israel, 19th November 2025, CyberNewsWire
The post Seraphic Becomes the First and Only Secure Enterprise Browser Solution to Protect Electron-Based Applications appeared first on Security Boulevard.
Veeam Software launches Veeam Data Platform v13, delivering the resilience, flexibility, and intelligence needed for an AI-powered future. With a modern platform architecture, AI-powered intelligence, an expansive hypervisor integration model, ...
NHS England Digital, the technology arm of the publicly-funded health service for England, has issued a warning about a 7-Zip vulnerability (CVE-2025-11001) being exploited by attackers. “Active exploitation of CVE-2025-11001 has been ...
Immersive announced the general availability of Dynamic Threat Range, a new capability within its Immersive One platform that transforms how organizations validate and improve cyber readiness. Dynamic Threat Range runs authentic, full-chain, ...
Strata Identity announced the availability of the AI Identity Gateway, an enterprise-grade runtime identity and policy-enforcement control point for agentic behavior. As part of Maverics for Agentic Identity, the AI Identity Gateway provides ...
“The attackers are not waiting for you to make the decision. Attackers will continue to attack. And just because you are not able to see it doesn’t mean the attack has not happened.” That’s the reality ColorTokens CEO and ...
Palo Alto, California, 19th November 2025, CyberNewsWire
The post Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers appeared first on Security Boulevard.
Ready to get certified but not sure where to start? Get insider tips and tricks on what to do from day one to test day. Join ISC2-certified instructors and an audience of your peers for this live interactive webinar. Find out what to do in the ...
Tenable Research reveals an Active Directory anomaly: intra-forest trusts created under Windows 2000 lack a key identifying flag, even after domain and forest upgrades. Learn how to find this legacy behavior persisting to this day, and use ...
See how AppOmni AgentGuard defends ServiceNow AI agents from prompt injection and access risks, building trust and compliance across platforms.
The post AppOmni Expands AI Security with Agentic AI Security for ServiceNow appeared first on ...
The cybersecurity startup will use the funds to expand its engineering team, extend collaborations, and get ready for enterprise rollout.
The post Mate Emerges From Stealth Mode With $15.5 Million in Seed Funding appeared first on SecurityWeek.