Application Security News and Articles


SpyCloud Unveils Top 10 Cybersecurity Predictions Poised to Disrupt Identity Security in 2026

Austin, TX/USA, 18th November 2025, CyberNewsWire The post SpyCloud Unveils Top 10 Cybersecurity Predictions Poised to Disrupt Identity Security in 2026 appeared first on Security Boulevard.

Apono Raises $34 Million for Cloud Identity Management Platform

The company will use the investment to accelerate product development, expand go-to-market operations, and hire new talent. The post Apono Raises $34 Million for Cloud Identity Management Platform appeared first on SecurityWeek.

Nudge Security Raises $22.5 Million in Series A Funding

The fresh investment will be used to accelerate product innovation and to expand the company’s go-to-market efforts. The post Nudge Security Raises $22.5 Million in Series A Funding appeared first on SecurityWeek.

AppSec metrics fail, Mend.io’s Risk Reduction Dashboard fixes it

See how Mend.io's Risk Reduction Dashboard works. The post AppSec metrics fail, Mend.io’s Risk Reduction Dashboard fixes it appeared first on Security Boulevard.

Kentik AI Advisor brings intelligence and automation to network design and operations

Kentik has launched the Kentik AI Advisor, an agentic AI solution that understands enterprise and service provider networks, thinks critically, and offers guidance for designing, operating, and protecting infrastructure at scale. “We’ve been ...

Tenable Cloud Vulnerability Management: Reducing Vulnerability Risk in the Cloud Era

Tenable has launched Tenable Cloud Vulnerability Management — a powerful new offering within Tenable One — to help vulnerability management leaders identify, prioritize, and remediate exposures across multi-cloud and hybrid ...

Pennsylvania Attorney General Confirms Data Breach After Ransomware Attack

The Inc Ransom group has taken credit for the hack, claiming to have stolen several terabytes of data.  The post Pennsylvania Attorney General Confirms Data Breach After Ransomware Attack appeared first on SecurityWeek.

Princeton University Data Breach Impacts Alumni, Students, Employees

Hackers accessed a database containing information about alumni, donors, faculty, students, parents, and other individuals. The post Princeton University Data Breach Impacts Alumni, Students, Employees appeared first on SecurityWeek.

Richland County CUSD Finds “More Bang for the Buck” with ManagedMethods

Choosing Cloud Monitor Provides Stronger Safety Alerts, Cybersecurity Protection, and Peace of Mind—All Within Budget At Richland County Community Unit School District #1 in Illinois, Technology Coordinator Ryan Roark has spent 17 years ...

Data Stolen in Eurofiber France Hack

A threat actor exploited a vulnerability, exfiltrated data, and attempted to extort Eurofiber. The post Data Stolen in Eurofiber France Hack appeared first on SecurityWeek.

AI and Voter Engagement

Social media has been a familiar, even mundane, part of life for nearly two decades. It can be easy to forget it was not always that way. In 2008, social media was just emerging into the mainstream. Facebook reached 100 million users that summer. ...

Google patches yet another exploited Chrome zero-day (CVE-2025-13223)

Google has shipped an emergency fix for a Chrome vulnerability (CVE-2025-13223) reported as actively exploited in the wild by its Threat Analysis Group (TAG). About CVE-2025-13223 CVE-2025-13223 is a type confusion vulnerability in V8, the ...

AI Application Vulnerability Remediation: Why AI Vulnerability Fixes Fail Without Runtime Context

TL;DR AI-powered vulnerability remediation often fails because it lacks context about how your applications actually work. Runtime intelligence solves this by providing AI with real-world application behavior data, architecture insights, and ...

What is PKI Automation? Benefits and Role of Certificate Lifecycle Automation 

Introduction PKI is one of the most important facets of current data protection and the foundation of secure communication and data exchange. Just like any other Information Technology (IT) asset, PKI poses a management headache in large ...

What the DoD’s Missteps Teach Us About Cybersecurity Fundamentals for 2026 

As organizations enter 2026, the real threat isn’t novel exploits but blind spots in supply chain security, proximity attack surfaces, and cross-functional accountability. This piece explains why fundamentals must become continuous, operational ...

Governing the Unseen Risks of GenAI: Why Bias Mitigation and Human Oversight Matter Most  

From prompt injection to cascading agent failures, GenAI expands the enterprise attack surface. A governance-first, security-focused approach—rooted in trusted data, guardrails, and ongoing oversight—is now critical for responsible AI ...

330 custom email domains, and what this tells us about how attackers build infrastructure for fake account creation

We recently detected and blocked a large-scale fake account creation campaign. The attacker attempted to register tens of thousands of accounts using bots, automating the entire signup process through a modified version of Chrome. To evade ...

Master how to report a breach for fast and effective cyber incident response

For every organization, no matter the size or industry, the integrity and security of data is more crucial than ever as it faces the possibility of a cyber breach everyday. But what separates a company that bounces back quickly from one that ...

The Battle Over The Search of a Cell Phone – Feds v. Locals

As state and federal authorities seek broad access to a seized phone, a Virginia prosecutor argues for narrowly tailored digital searches — a clash that could redefine Fourth Amendment protections for modern devices. The post The Battle Over ...

Chrome 142 Update Patches Exploited Zero-Day

The flaw was reported by Google's Threat Analysis Group and was likely exploited by a commercial spyware vendor. The post Chrome 142 Update Patches Exploited Zero-Day appeared first on SecurityWeek.