Application Security

Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

WPS app on a smartphone screen
Vulnerabilities & Threats
South Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese IntelSouth Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese Intel

The most popular office software suite in China actually has two critical vulnerabilities, which allowed hackers the opportunity for remote code execution. Time to patch.

byNate Nelson, Contributing Writer
Aug 29, 2024
|
4 Min Read
A brain with computer code beside it
Application Security
Hundreds of LLM Servers Expose Corporate, Health & Other Online DataHundreds of LLM Servers Expose Corporate, Health & Other Online Data
byNate Nelson, Contributing Writer
Aug 28, 2024
4 Min Read
Philippine military academy
Application Security
Hackers Use Rare Stealth Techniques to Down Asian Military, Gov't OrgsHackers Use Rare Stealth Techniques to Down Asian Military, Gov't Orgs
byNate Nelson, Contributing Writer
Aug 26, 2024
4 Min Read
Becky Bracken interviews Michael Bargury at Dark Reading News Desk.
Application Security
News Desk 2024: Hacking Microsoft Copilot Is Scary EasyNews Desk 2024: Hacking Microsoft Copilot Is Scary Easy
byBecky Bracken, Senior Editor, Dark Reading
Aug 26, 2024
A digital pink key surrounded by lights moving around it and code floating throughout the background
Cyber Risk
NIST Hands Off Post-Quantum Cryptography Work to Cyber TeamsNIST Hands Off Post-Quantum Cryptography Work to Cyber Teams
byBecky Bracken, Senior Editor, Dark Reading
Aug 23, 2024
6 Min Read
A woman, panicked, standing on an infected Macbook's keyboard
Threat Intelligence
Infostealers Waltz Through macOS to Grab Crypto Wallets, Browser CredsInfostealers Waltz Through macOS to Grab Crypto Wallets, Browser Creds
byNate Nelson, Contributing Writer
Aug 22, 2024
5 Min Read
The words "APPLICATION SECURITY" on a monitor
Vulnerabilities & Threats
Why End of Life for Applications Is the Beginning of Life for Hackers
Why End of Life for Applications Is the Beginning of Life for Hackers
Aug 22, 2024
|
4 Min Read
byMatt Middleton-Leal
An undercase, lime green-colored 'u'
Threat Intelligence
Chinese Threat Actors Use MSI Files to Bypass Windows, VT Detection
Chinese Threat Actors Use MSI Files to Bypass Windows, VT Detection
Aug 22, 2024
|
4 Min Read
byNate Nelson, Contributing Writer
A wall of 0 and 1 and a silhouette of a person
Application Security
Gartner Spotlights AI, Security in 2024 Hype Cycle for Emerging Tech
Gartner Spotlights AI, Security in 2024 Hype Cycle for Emerging Tech
Aug 21, 2024
|
3 Min Read
byJennifer Lawinski, Contributing Writer
code AI
Application Security
Researchers Highlight How Poisoned LLMs Can Suggest Vulnerable Code
Researchers Highlight How Poisoned LLMs Can Suggest Vulnerable Code
Aug 20, 2024
|
5 Min Read
byRobert Lemos, Contributing Writer
Laptop computer with landing page for Microsoft Azure
Application Security
Azure Kubernetes Bug Lays Open Cluster Secrets
Azure Kubernetes Bug Lays Open Cluster Secrets
Aug 20, 2024
|
3 Min Read
byJai Vijayan, Contributing Writer
Fire Bug pyrrhocoris apterus
Vulnerabilities & Threats
Critical, Actively Exploited Jenkins RCE Bug Suffers Patch Lag
Critical, Actively Exploited Jenkins RCE Bug Suffers Patch Lag
Aug 20, 2024
|
3 Min Read
byNate Nelson, Contributing Writer
person in a dark suit and beard breaking out of a white wall
Application Security
Assume Breach When Building AI Apps
Assume Breach When Building AI Apps
Aug 19, 2024
|
4 Min Read
byMichael Bargury
A screen showing technology icons such as keys, 0 and 1, and wireless signal, in hexagons.
Sponsored Content
Why CISOs Need Application Detection and Response
Why CISOs Need Application Detection and Response
Aug 19, 2024
|
4 Min Read
A leaky outside faucet
Application Security
Thousands of Oracle NetSuite E-Commerce Sites Expose Sensitive Customer Data
Thousands of Oracle NetSuite E-Commerce Sites Expose Sensitive Customer Data
Aug 16, 2024
|
3 Min Read
byNathan Eddy, Contributing Writer
Two people looking at something on paper and on the screen. The text is blurry.
Application Security
White House Pledges $10 Million for Open Source Initiative
White House Pledges $10 Million for Open Source Initiative
Aug 15, 2024
|
1 Min Read
byJennifer Lawinski, Contributing Writer
a race car on a track against a blurred background
Application Security
DARPA Announces AI Cyber Challenge Finalists
DARPA Announces AI Cyber Challenge Finalists
Aug 15, 2024
|
2 Min Read
byJennifer Lawinski, Contributing Writer
Icon with shield and keyhole, over a digital background
Application Security
Unfixed Microsoft Entra ID Authentication Bypass Threatens Hybrid IDs
Unfixed Microsoft Entra ID Authentication Bypass Threatens Hybrid IDs
Aug 15, 2024
|
4 Min Read
byJai Vijayan, Contributing Writer
Two people talking at a news desk against a dark backdrop with "Dark Reading" written on it.
Sponsored Content
Black Hat 2024: Organizations Are Giving Offensive Security a Fresh Look
Black Hat 2024: Organizations Are Giving Offensive Security a Fresh Look
Aug 14, 2024
|
11 Min View
byTerry Sweeney, Contributing Editor
Two people talking at a news desk against a dark backdrop with "Dark Reading" written on it.
Sponsored Content
Black Hat 2024: How AI Fits into Today's DevSecOps Requirements
Black Hat 2024: How AI Fits into Today's DevSecOps Requirements
Aug 13, 2024
|
11 Min View
byTerry Sweeney, Contributing Editor
A Windows security update onscreen
Vulnerabilities & Threats
Microsoft Discloses 10 Zero-Day Bugs in Patch Tuesday Update
Microsoft Discloses 10 Zero-Day Bugs in Patch Tuesday Update
Aug 13, 2024
|
5 Min Read
byJai Vijayan, Contributing Writer
A line of ants; white background
Remote Workforce
Critical Ivanti vTM Bug Allows Unauthorized Admin Access
Critical Ivanti vTM Bug Allows Unauthorized Admin Access
Aug 13, 2024
|
2 Min Read
byNate Nelson, Contributing Writer
Healthcare chatbot conversation with smartphone screen app interface and artificial intelligence
Application Security
Microsoft Azure AI Health Bot Infected With Critical Vulnerabilities
Microsoft Azure AI Health Bot Infected With Critical Vulnerabilities
Aug 13, 2024
|
3 Min Read
byNathan Eddy, Contributing Writer
Glowing computer imagery indicating artificial intelligence
Application Security
The Changing Expectations for Developers in an AI-Coding Future
The Changing Expectations for Developers in an AI-Coding Future
Aug 13, 2024
|
5 Min Read
byMatias Madou
AI code with 0s and 1s
Application Security
DARPA Aims to Ditch C Code, Move to Rust
DARPA Aims to Ditch C Code, Move to Rust
Aug 13, 2024
|
5 Min Read
byRobert Lemos, Contributing Writer
Cybersecurity Operations
CrowdStrike Tries to Patch Things Up With Cybersecurity Industry
CrowdStrike Tries to Patch Things Up With Cybersecurity Industry
Aug 12, 2024
|
3 Min Read
byDark Reading Staff
CrowdStrike logo on a phone screen with the website on a computer screen blurred out in the background
Cyber Risk
CrowdStrike's Legal Pressures Mount, Could Blaze Path to Liability
CrowdStrike's Legal Pressures Mount, Could Blaze Path to Liability
Aug 8, 2024
|
6 Min Read
byRobert Lemos, Contributing Writer
A digital brain schematic
Application Security
How to Weaponize Microsoft Copilot for Cyberattackers
How to Weaponize Microsoft Copilot for Cyberattackers
Aug 8, 2024
|
6 Min Read
byJeffrey Schwartz, Contributing Writer
Ann Johnson, Corporate Vice President and Deputy CISO at Microsoft, and Sherrod DeGrippo, Dir. of Threat Intelligence Strategy at Microsoft, on stage
Cybersecurity Operations
Microsoft on CISOs: Thriving Community Means Stronger Security
Microsoft on CISOs: Thriving Community Means Stronger Security
Aug 8, 2024
|
4 Min Read
byKristina Beek, Associate Editor, Dark Reading
Hand pointing at icon labeled SaaS; various other icons surround it
Application Security
SaaS Apps Present an Abbreviated Kill Chain for Attackers
SaaS Apps Present an Abbreviated Kill Chain for Attackers
Aug 8, 2024
|
4 Min Read
byJai Vijayan, Contributing Writer
A hand with a tiny Earth hanging from a string
Application Security
Hazy Issue in Entra ID Allows Privileged Users to Become Global Admins
Hazy Issue in Entra ID Allows Privileged Users to Become Global Admins
Aug 7, 2024
|
4 Min Read
byNate Nelson, Contributing Writer
Founder and CTO of Knostic, Sounil Yu, collecting his award onstage
Cybersecurity Operations
Knostic Wins 2024 Black Hat Startup Spotlight Competition
Knostic Wins 2024 Black Hat Startup Spotlight Competition
Aug 7, 2024
|
4 Min Read
byKristina Beek, Associate Editor, Dark Reading
Heads representing AI; blues and greens on a digital background with 1s and 0s
Application Security
Creating Insecure AI Assistants With Microsoft Copilot Studio Is Easy
Creating Insecure AI Assistants With Microsoft Copilot Studio Is Easy
Aug 7, 2024
|
4 Min Read
byJeffrey Schwartz, Contributing Writer
A hooded figure sitting at a laptop
Application Security
Attackers Use Multiple Techniques to Bypass Reputation-Based Security
Attackers Use Multiple Techniques to Bypass Reputation-Based Security
Aug 6, 2024
|
3 Min Read
byJai Vijayan, Contributing Writer
A close up of mobile screen with the TikTok app on display, with a pair of wired earbuds beside it
Сloud Security
FTC Slams TikTok With Lawsuit After Continued COPPA Violations
FTC Slams TikTok With Lawsuit After Continued COPPA Violations
Aug 5, 2024
|
1 Min Read
byDark Reading Staff

Editor's Choice

A person's finger about to click on a screen that says Windows 11 with a blue abstract background behind it
Vulnerabilities & Threats
PoC Exploit for Zero-Click Vulnerability Made Available to the MassesPoC Exploit for Zero-Click Vulnerability Made Available to the Masses
byDark Reading Staff
Aug 27, 2024
1 Min Read
Person holding a cellphone; black background
Vulnerabilities & Threats
How Telecom Vulnerabilities Can Be a Threat to Cybersecurity PostureHow Telecom Vulnerabilities Can Be a Threat to Cybersecurity Posture
byAyan Halder
Aug 29, 2024
5 Min Read
CCTV control room
ICS/OT Security
CCTV Zero-Day Exposes Critical Infrastructure to Mirai BotnetCCTV Zero-Day Exposes Critical Infrastructure to Mirai Botnet
byBecky Bracken, Senior Editor, Dark Reading
Aug 28, 2024
1 Min Read
Reports
More Reports
White Papers
More Whitepapers
Events
More Events
Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe