Application Security News and Articles


Closing security gaps in multi-cloud and SaaS environments

In this Help Net Security interview, Kunal Modasiya, SVP, Product Management, GTM, and Growth at Qualys, discusses recent Qualys research on the state of cloud and SaaS security. He talks about how siloed visibility, fragmented tools, and a lack ...

Containers are just processes: The illusion of namespace security

In the early days of commercial open source, major vendors cast doubt on its security, claiming transparency was a flaw. In fact, that openness fueled strong communities and faster security improvements, making OSS often more secure than ...

Why legal must lead on AI governance before it’s too late

In this Help Net Security interview, Brooke Johnson, Chief Legal Counsel and SVP of HR and Security, Ivanti, explores the legal responsibilities in AI governance, highlighting how cross-functional collaboration enables safe, ethical AI use while ...

Your Data, Your Responsibility: Securing Your Organization’s Future in the Cloud

Your Data, Your Responsibility: Securing Your Organization's Future in the Cloud madhav Tue, 05/20/2025 - 04:37 Cloud adoption has fundamentally changed the way businesses operate, offering scalability, agility, and cost efficiencies that ...

AI voice hijacking: How well can you trust your ears?

How sure are you that you can recognize an AI-cloned voice? If you think you’re completely certain, you might be wrong. Why it’s a growing threat With only three seconds of audio, criminals can now clone a person’s voice, which can ...

Cybersecurity jobs available right now: May 20, 2025

The post Cybersecurity jobs available right now: May 20, 2025 appeared first on Help Net Security.

The role of governance in modern secrets management

Without strong governance, secrets management becomes chaotic, increasing security risks and compliance violations. Read how access control, auditability, and automated policies help organizations enforce best practices at scale. The post The ...

Feeling Relieved with Solid Secrets Management

Feeling Overwhelmed By the Complexity of Cybersecurity? Are you one of the many professionals struggling to stay ahead of increasingly complex and evolving cybersecurity threats? If so, you’re not alone. The task of securing data and ...

Relaxing the Burden of Compliance with Automation

Does your Organization Struggle with Compliance? If so, you’re not alone. Compliance with cybersecurity regulations often involves navigating a complex web of rules, many of which are constantly changing. This can be a burdensome task for any ...

Getting Better at Preventing Identity Theft

Why is Identity Theft Prevention a Vital Component of Good Security? Have you ever considered the potential cost of a security breach and the resulting identity theft? According to the Federal Trade Commission (FTC), identity theft affected 4.8 ...

Adapting to New Security Challenges in the Cloud

Understanding the Realm of Non-Human Identities in Cloud Security Is your organization fully prepared to confront the new wave of cloud security challenges? If your answer is uncertain or negative, have you considered transforming your ...

10 SaaS Security Risks Most Organizations Miss | Grip

Learn the 10 most overlooked SaaS security risks, including shadow tenants, unmanaged identities, and risky OAuth scopes, and how to detect and reduce them. The post 10 SaaS Security Risks Most Organizations Miss | Grip appeared first on Security ...

BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software

San Francisco incident response coordination startup banks $15 million in a Series A funding round led by Ballistic Ventures. The post BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software appeared first on SecurityWeek.

Revenue Risk Hidden in Fly by Night New eSkimming Tools

by Source Defense Don’t Trust Your Online Revenue Channel to Sub-par Solutions for eSkimming Security (Beware the big box “me too” solutions) As PCI DSS 4.0.1 enforcement has driven demand for eSkimming security and compliance controls ...

ADR Blocks Spike in Cyber Attacks and Sharp Rise in Path Traversal Attacks | April Attack Data | Contrast Security

Customers using Application Detection and Response (ADR) technology blocked a remarkable number of attacks over the past month. For the second time since we began writing this monthly report, we’ve seen a massive escalation of attacks against a ...

Randall Munroe’s XKCD ‘Modern’

via the inimitable Daniel Stori at Turnoff.US! Permalink The post Randall Munroe’s XKCD ‘Modern’ appeared first on Security Boulevard.

Printer Company Procolored Served Infected Software for Months

Procolored’s public website served dozens of software downloads containing information stealer malware and a backdoor. The post Printer Company Procolored Served Infected Software for Months appeared first on SecurityWeek.

Developing with Docker and Sonatype: Building secure software at scale

Docker remains a cornerstone of modern development environments, helping teams containerize applications, speed up delivery pipelines, and standardize across systems. But as container usage grows, so do concerns about software supply chain ...

MY TAKE: Semantics aside, “agentic AI” is already reshaping how we work, think, envision what’s next

Stephen Klein didn’t just stir the pot. He lit a fire. Related: Klein’s LinkedIn debate In a sharply worded post that quickly went viral on LinkedIn, the technologist and academic took direct aim at what he called the “hype-as-a-service” ...

Beyond Auth0: A Comprehensive Guide to Authentication Alternatives in 2025

Struggling with Auth0's pricing or technical limitations? This comprehensive guide analyzes the top commercial and open-source authentication alternatives for 2025, helping you select the perfect solution based on your specific technical ...