Application Security News and Articles


DHS Cancels $2.4 Billion Leidos Contract, Cites Changes at CISA

DHS cancelled a $2.4 billion contract to Leidos that was awarded last year for ACTS, a project aimed at supporting CISA. Rival Nightwing protested the award, but DHS said the contract was pulled in light of budgetary and mission changes at CISA ...

A Unified Approach to Exposure Management: Introducing Tenable One Connectors and Customized Risk Dashboards

Unified visibility and context are the keys to an effective exposure management program. Learn how the new Tenable One connectors and unified dashboards give you a comprehensive view of your attack surface, help you streamline decision-making and ...

Production at Steelmaker Nucor Disrupted by Cyberattack

American steel giant Nucor on Wednesday disclosed a cybersecurity incident that bears the hallmarks of a ransomware attack. The post Production at Steelmaker Nucor Disrupted by Cyberattack appeared first on SecurityWeek.

Small but Mighty: UX Design Tips for a Lean Team Environment

As a senior UX designer at Tidal Cyber, I often field questions from other designers and cybersecurity industry colleagues on how to work effectively in a lean team environment. Lean teams typically operate with a ratio of one designer for every ...

Castle for Cloudflare: Unified bot and fraud defense, from edge to in-app

Today, May 15, 2025, Castle extends its proven behavioral detection to the network edge through a no-code, fully managed Cloudflare integration. The rise of AI allows attackers to operate faster and better than ever, which means fraud and abuse ...

Proofpoint to Acquire Hornetsecurity in Reported $1 Billion Deal

Enterprise cybersecurity giant Proofpoint is buying Germany-based Microsoft 365 security solutions provider Hornetsecurity. The post Proofpoint to Acquire Hornetsecurity in Reported $1 Billion Deal appeared first on SecurityWeek.

PentestPad streamlines security testing workflows

PentestPad announced a major rollout of new features to its platform, built to transform how modern security teams deliver penetration testing and manage vulnerabilities, clients and deliverables. PentestPad is an all-in-one workspace designed ...

Chinese Hackers Hit Drone Sector in Supply Chain Attacks

The China-linked hacking group Earth Ammit has launched multi-wave attacks in Taiwan and South Korea to disrupt the drone sector. The post Chinese Hackers Hit Drone Sector in Supply Chain Attacks appeared first on SecurityWeek.

Samsung patches MagicINFO 9 Server vulnerability exploited by attackers

Companies running Samsung MagicINFO, a platform for managing content on Samsung commercial digital displays, should upgrade to the latest available version of its v9 branch to fix a vulnerability that’s reportedly being exploited by ...

Ransomware Groups, Chinese APTs Exploit Recent SAP NetWeaver Flaws

Two ransomware groups and several Chinese APTs have been exploiting two recent SAP NetWeaver vulnerabilities. The post Ransomware Groups, Chinese APTs Exploit Recent SAP NetWeaver Flaws appeared first on SecurityWeek.

CyberStrong May Product Update

The team at CyberSaint is thrilled to announce the latest additions and updates to the CyberStrong solution. To start, we’ve expanded Continuous Control Automation to help our clients streamline adoption and configuration, helping you assess ...

Canadian Electric Utility Lists Customer Information Stolen by Hackers

Nova Scotia Power says a wide range of personal and financial information was stolen in the recent cyberattack. The post Canadian Electric Utility Lists Customer Information Stolen by Hackers appeared first on SecurityWeek.

Russia-linked hackers target webmail servers in Ukraine-related espionage operation

ESET researchers have uncovered RoundPress, a Russia-aligned espionage operation targeting webmail servers via XSS vulnerabilities. Behind it is most likely the Russia-aligned Sednit (also known as Fancy Bear or APT28) cyberespionage group, ...

Australian Human Rights Commission Discloses Data Breach

The Australian Human Rights Commission says data submitted through the complaint form on its website was inadvertently exposed. The post Australian Human Rights Commission Discloses Data Breach appeared first on SecurityWeek.

Chrome 136 Update Patches Vulnerability With ‘Exploit in the Wild’

Google has rolled out a Chrome 136 update that resolves a high-severity vulnerability for which a public exploit exists. The post Chrome 136 Update Patches Vulnerability With ‘Exploit in the Wild’ appeared first on SecurityWeek.

LiongardIQ unifies asset inventory, network monitoring and AI insights

Liongard has launched LiongardIQ, a new product designed to address the complexities of cyber resilience. Available July 2025, LiongardIQ moves beyond the Liongard you once knew—introducing a next-generation platform powered by real-time ...

Google DeepMind’s AlphaEvolve: AI That Writes Code and Saves Costs

Google’s AlphaEvolve AI redefines algorithm creation, enhancing efficiency in data centers and revolutionizing real-world applications. Learn more! The post Google DeepMind’s AlphaEvolve: AI That Writes Code and Saves Costs appeared first on ...

China Launches First Satellites for AI Computing Constellation

China launches 12 satellites for its AI space computing constellation, marking a leap in satellite technology. Discover how this changes the landscape of space computing. The post China Launches First Satellites for AI Computing Constellation ...

Neon Serverless Postgres: Azure Native Integration Now Available

General availability of Neon Serverless Postgres on Azure, a scalable database solution for developers. Explore features and advantages now! The post Neon Serverless Postgres: Azure Native Integration Now Available appeared first on Security ...

LegoGPT: AI Transforms Text Prompts into Stable LEGO Structures

\LegoGPT, the AI system that crafts stable LEGO designs from natural language. Explore its innovative tech and creative potential today! The post LegoGPT: AI Transforms Text Prompts into Stable LEGO Structures appeared first on Security Boulevard.