Application Security | News, how-tos, features, reviews, and videos
The quickly fixed flaw could have allowed attackers to take over accounts in the CDE and perform remote code execution.
Regulatory mandates for software security like those in the Biden Administration's National Cybersecurity Strategy could cause more problems than they solve.
The PyPI package flood is just the latest in a string of attacks on public repositories with the intent to plant malicious code.
An Israeli startup targets open source code vulnerabilities with advanced agentless filtering technology.
Descope’s first product allows developers to build authentication and user management functions in applications.
Expel MDR for Kubernetes addresses three core layers of Kubernetes applications: configuration, control panel, and run-time security.
Atlassian has issued fixed versions of the software and described a workaround to the flaw that could make access tokens available to attackers.
The OSC&R Framework aims to help security professionals better understand and measure software supply chain risk.
New report shines light on application security challenges impacting global businesses.
Top API security tools can help hold the line against modern threats to the important and ubiquitous software development interfaces.