Application Security News and Articles


Sectigo’s Certificate as a Service: redefining industry leadership in certificate management

SSL/TLS certificate management developments are evolving rapidly, placing increasing pressure on businesses to maintain security, compliance, and operational efficiency. Sectigo’s Certificate as a Service (CaaS) model is a game-changer, ...

What is the Model Context Protocol (MCP) and How It Works

An amazing post The post What is the Model Context Protocol (MCP) and How It Works appeared first on Security Boulevard.

BSides Exeter 2024 – Purple Track – Cedar, An Open Source Project To Help You Decouple Your Authorisation Logic

Author/Presenter: Ricardo Sueiras Our thanks to Bsides Exeter, and the Presenters/Authors for publishing their timely Bsides Exeter Conference content. All brought to you via the organizations YouTube channel. Permalink The post BSides Exeter ...

Beyond Patching: Why a Risk-Based Approach to Vulnerability Management Is Essential 

The cybersecurity industry has long treated patching as the gold standard for vulnerability management. It is the cornerstone of compliance frameworks, a key metric for security performance, and often the first response to a newly discovered ...

Sony Removes 75,000 Deepfake Items, Highlighting a Growing Problem

Sony Music told UK regulators that it had to remove more than 75,000 deepfake songs and other material, the latest example of the burgeoning problem of AI-generated false videos, images, and sound that threaten everything from national security ...

Xitter Hit by Major Cyberattack

On March 10, 2025, Xitter experienced major service disruptions throughout the day. Users couldn’t access the platform on both mobile apps and the website. Here’s what happened and why it matters. What Happened? X suffered multiple waves of ...

New York Sues Insurance Giant Over Data Breaches

The New York Attorney General sued National General and its parent company Allstate over two data breaches. The post New York Sues Insurance Giant Over Data Breaches appeared first on SecurityWeek.

Announcing SonarQube Advanced Security

SonarQube Advanced Security includes Software Composition Analysis (SCA) and advanced Static Application Security Testing (SAST) extending SonarQube's core security capability. The post Announcing SonarQube Advanced Security appeared first on ...

SAP Patches High-Severity Vulnerabilities in Commerce, NetWeaver

SAP released 21 new security notes and updated three security notes on March 2025 security patch day. The post SAP Patches High-Severity Vulnerabilities in Commerce, NetWeaver appeared first on SecurityWeek.

Edimax Says No Patches Coming for Zero-Day Exploited by Botnets

Edimax is aware that CVE-2025-1316 has been exploited in the wild, but the impacted devices were discontinued over a decade ago. The post Edimax Says No Patches Coming for Zero-Day Exploited by Botnets appeared first on SecurityWeek.

Generative AI software development boosts productivity — and risk

The use of AI coding assistants is on the rise, and while they can juice a developer's productivity, they also threaten the quality and security of software development, a recent study analyzing millions of lines of code has found. The post ...

News alert: 360 Privacy secures $36M to deliver turnkey digital executive protection platform

Nashville, TN – Mar. 11, 2025 – 360 Privacy, a leading digital executive protection platform, today announced that it has secured a $36 million growth equity investment from FTV Capital, a sector-focused growth equity firm with a ...

GitGuardian Report: 70% of Leaked Secrets Remain Active for Two Years, Urging Immediate Remediation

Boston, USA, 11th March 2025, CyberNewsWire The post GitGuardian Report: 70% of Leaked Secrets Remain Active for Two Years, Urging Immediate Remediation appeared first on Security Boulevard.

Sola Security Deposits Hefty $30M Seed Funding

The financing was provided by S Capital and investor Mike Moritz, S32, Glilot Capital Partners, and several angel investors. The post Sola Security Deposits Hefty $30M Seed Funding appeared first on SecurityWeek.

1,600 Victims Hit by South American APT’s Malware

South American cyberespionage group Blind Eagle has infected over 1,600 organizations in Colombia in a recent campaign. The post 1,600 Victims Hit by South American APT’s Malware appeared first on SecurityWeek.

CISA Warns of Ivanti EPM Vulnerability Exploitation

CISA has added three critical-severity flaws in Ivanti EPM to its Known Exploited Vulnerabilities catalog. The post CISA Warns of Ivanti EPM Vulnerability Exploitation appeared first on SecurityWeek.

Hackers Take Credit for X Cyberattack

Information is coming to light on the cyberattack that caused X outages, but it should be taken with a pinch of salt. The post Hackers Take Credit for X Cyberattack appeared first on SecurityWeek.

AuditBoard unveils AI-powered audit capabilities

AuditBoard announced new AI-powered audit capabilities, further integrating AI into the product, boosting efficiency, and enabling auditors to focus on more strategic tasks. Internal audit teams are increasingly integrating AI into their work ...

Alloy Fraud Attack Radar provides intelligence on fraud threats

Alloy launched Fraud Attack Radar, a machine learning-powered solution that provides financial institutions (FIs) and fintechs with actionable intelligence on fraud threats targeting new account creation. The new solution helps organizations ...

Rambus introduces CryptoManager Security IP solutions

Rambus announced its next-generation CryptoManager Security IP solutions including Root of Trust, Hub and Core families. The CryptoManager Security IP offerings deliver progressively higher levels of functional integration and security, enabling ...