Application Security News and Articles


Behind the Baseline: Reflecting on the launch of the Open Source Project Security Baseline

It's been a while since I've shared an update on the work Sonatype is doing in the open source ecosystem, so I'm excited to share an update on a few things we're doing in the space — and how it led to the creation of a new security standard in ...

News alert: INE secures spot in G2’s 2025 Top 50 education software rankings

Cary, NC, Feb. 25, 2025, CyberNewswire — INE, the leading provider of networking and cybersecurity training and certifications, today announced its recognition as an enterprise and small business leader in online course providers and ...

GhostGPT: An Uncensored AI Chatbot Empowering Cybercriminals

GhostGPT is revolutionizing cybercrime by providing hackers with an AI tool that bypasses ethical guardrails found in mainstream models. Available as little as $150, it enables even novice attackers to generate malicious code, craft phishing ...

DeepSeek Lure Using CAPTCHAs To Spread Malware

IntroductionThe rapid rise of generative AI tools has created opportunities and challenges for cybercriminals. In an instant, industries are being reshaped while new attack surfaces are being exposed. DeepSeek AI chatbot that launched on January ...

China-based Silver Fox spoofs healthcare app to deliver malware

Silver Fox, a China-based threat actor that may or may not be backed by the Chinese government, has been delivering the ValleyRAT backdoor to unsuspecting users by disguising the malware as legitimate healthcare app (the Philips DICOM viewer), a ...

Seceon’s AI-Driven Cybersecurity: Insights from Bhabani Prasad, Deeptesh Chandra, and German Moreno

At Seceon’s 2025 Q1 Innovation and Certification Days, Seceon’s Bhabani Prasad engaged in a conversation with cybersecurity experts Deeptesh Chandra and German Moreno about the evolving threat landscape and how Seceon’s AI-powered platform ...

Skybox Security Shuts Down, Lays off Entire Workforce 

The sudden shutdown follows the sale of Skybox Security’s business and technology assets to rival Israeli cybersecurity firm Tufin.  The post Skybox Security Shuts Down, Lays off Entire Workforce  appeared first on SecurityWeek.

Cybersecurity needs a leader, so let’s stop debating and start deciding

Have you ever heard anyone earnestly ask in a business, “Who owns legal?” or “Who sets the financial strategy?” Probably not – it should be obvious, right? Yet, when it comes to cybersecurity, the question of ownership still seems to ...

DEF CON 32 – Doors, Cameras & Mantraps: Oh My!

Author/Presenter: The Magician Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the ...

Understanding deliberate delayed revocation: a threat to trust

Deliberate delayed revocation—the intentional postponement of revoking compromised certificates—poses a severe risk to internet security and trust. This practice creates vulnerabilities, erodes confidence in the web PKI, and weakens industry ...

5 Essential Email Security Tips for Businesses

2024 was a year of increasing email security risks for businesses. Email is the number one attack vector for cybercriminals, and phishing attacks remain the top threat to email users. The 2024 Mimecast State of Email & Collaboration Security ...

Edera Banks $15M for Kubernetes Workload Isolation Tech

Seattle startup building technology to mitigate lateral movement and block “living off the land” techniques wins interest from investors. The post Edera Banks $15M for Kubernetes Workload Isolation Tech appeared first on SecurityWeek.

Halcyon RDR boosts ransomware protection for organizations

Halcyon announced Halcyon Ransomware Detection and Recovery (RDR), a no-cost integrated service that is now included with every deployment of the Halcyon Anti-Ransomware Platform. Most 24/7 threat monitoring and response services are not included ...

Are False Positives Killing Your Cloud Security? Veriti Research Reveals 

Veriti’s latest research identifies key false positive triggers in cloud environments, their underlying causes, and their impact on businesses. By understanding these issues, security teams can refine their defenses and reduce unnecessary ...

Untangling AWS Networks with Cloud WAN

As organizations grow so does their infrastructure, often without a well-designed underlying infrastructure to support this growth. At GuidePoint Security […] The post Untangling AWS Networks with Cloud WAN appeared first on Security Boulevard.

Leader of North Korean Hackers Sanctioned by EU

The EU has announced new sanctions against entities aiding Russia’s war against Ukraine, including an individual who leads North Korean hackers. The post Leader of North Korean Hackers Sanctioned by EU appeared first on SecurityWeek.

Netskope One Enterprise Browser enhancements secure access for unmanaged devices

Netskope announced enhancements to its Netskope One Enterprise Browser. By delivering Enterprise Browser fully integrated with the Netskope One platform’s Security Service Edge (SSE) capabilities, Netskope enables organizations to increase ...

5 Ways AI Is Making Software Testing Smarter (and Faster) in 2025

The Day Software Testing Saved Millions—And Why It Matters Let me start with a story that still sends shivers down the spines of software engineers...Read More The post 5 Ways AI Is Making Software Testing Smarter (and Faster) in 2025 appeared ...

Open source strikes back: Nextcloud Hub 10 challenges Big Tech’s monopoly on AI and privacy

Hyperscalers have perpetuated the narrative that open-source solutions cannot compete at scale. This perception has influenced funding priorities, shaped policy discussions, and reinforced organizational reliance on Big Tech. With the launch of ...

Nine Threat Groups Active in OT Operations in 2024: Dragos

Dragos has published its 2025 OT/ICS Cybersecurity Report, which provides information on the threats and trends observed in 2024.  The post Nine Threat Groups Active in OT Operations in 2024: Dragos appeared first on SecurityWeek.