Application Security News and Articles


Secrets leaks increase — and expand beyond the codebase

Organizations that assume secrets protection is solely about scanning public repositories and codebases for API keys, passwords, and tokens may be overlooking a major blind spot. The post Secrets leaks increase — and expand beyond the codebase ...

RSA Conference 2025 Announcement Summary (Day 2) 

Hundreds of companies are showcasing their products and services this week at the 2025 edition of the RSA Conference in San Francisco. The post RSA Conference 2025 Announcement Summary (Day 2)  appeared first on SecurityWeek.

Property renters targeted in simple BEC scam

Emails purportedly sent by rental property management firms are being used to steal money from people in France and Canada, Proofpoint researchers have warned. A BEC scam preying on renters “Most campaigns are sent from compromised ...

Microsoft Sender Requirements Enforced — How to Avoid 550 5.7.15 Rejections

Starting May 5, 2025, Microsoft enforces strict sender requirements. Emails from domains sending over 5,000 messages per day must pass SPF, DKIM, and DMARC checks.—or face the 550 5.7.15 Access Denied error. The post Microsoft Sender ...

Meta Releases Llama AI Open Source Protection Tools

Meta has released new Llama protection tools to help the open source AI community build more secure applications. The post Meta Releases Llama AI Open Source Protection Tools appeared first on SecurityWeek.

France Blames Russia for Cyberattacks on Dozen Entities

France says the Russian state-sponsored group APT28 is responsible for targeting or compromising a dozen French entities. The post France Blames Russia for Cyberattacks on Dozen Entities appeared first on SecurityWeek.

Legit leverages AI in ASPM platform to find, fix, and prevent vulnerabilities

Legit Security has unveiled new functionalities that leverage AI to help security teams more quickly shore up gaps in their AppSec programs. Specifically, Legit now leverages AI to drive advanced discovery for code-to-cloud correlation, increased ...

Frontegg releases identity management platform for AI agent builders

Frontegg launched Frontegg.ai, an identity management platform purpose-built for developers building AI agents. As AI agents move beyond experiments to becoming critical internal and market-facing enterprise products, secure, scalable identity ...

Link11 brings three brands together on one platform with new branding

Frankfurt am Main, Germany, 30th April 2025, CyberNewsWire The post Link11 brings three brands together on one platform with new branding appeared first on Security Boulevard.

Earn sAST Easily: Step-by-Step Guide

Discover how to get and use sAST efficiently.Continue reading on Medium »

Enhancing Security and Compliance With AI-Powered Monitoring in Billing Systems 

AI-powered monitoring provides a proactive, intelligent and scalable way to secure modern billing systems, especially for any company leveraging a billing platform for subscription pricing model.  The post Enhancing Security and Compliance With ...

BigID AI Data Lineage delivers transparency and control for AI

BigID launched AI Data Lineage, a new solution that provides organizations with visibility into how AI models access, process, and utilize data. As organizations increasingly integrate AI into their workflows, understanding the data lineage of AI ...

HPE strengthens hybrid cloud and connectivity with Aruba Networking and GreenLake security upgrades

Hewlett Packard Enterprise has announced expansions of HPE Aruba Networking and HPE GreenLake cloud to help enterprises modernize secure connectivity and hybrid cloud operations by blending multi-layered and zero trust approaches to protect ...

Skyhigh Security adds data protection solutions for Microsoft Copilot and ChatGPT Enterprise

Skyhigh Security announced the expansion of its Skyhigh AI offering to include additional data protection solutions for Copilot for Microsoft 365 and ChatGPT Enterprise. This development follows the company’s earlier introduction of Skyhigh ...

AirPlay Vulnerabilities Expose Apple Devices to Zero-Click Takeover

Vulnerabilities in Apple’s AirPlay protocol could have allowed attackers to execute code remotely without user interaction. The post AirPlay Vulnerabilities Expose Apple Devices to Zero-Click Takeover appeared first on SecurityWeek.

Securonix brings autonomous decision-making to security operations

Securonix announced the next phase of Securonix EON, introducing modular GenAI Agents. These specialized, decision-capable agents are designed to perform high-impact jobs to be done (JTBD) across the threat detection, investigation, and response ...

Arkose Labs launches Edge and Scraping Protection to secure enterprise digital borders

Arkose Labs has announced the expansion of its security portfolio with two new offerings: Arkose Edge and Arkose Scraping Protection. These innovations address the growing challenges large enterprises face in securing their complex digital ...

Chrome 136, Firefox 138 Patch High-Severity Vulnerabilities

Chrome 136 and Firefox 138 were released in the stable channel with patches for multiple high-severity vulnerabilities. The post Chrome 136, Firefox 138 Patch High-Severity Vulnerabilities appeared first on SecurityWeek.

Torii launches agentic SaaS Management Platform

Torii unveiled Torii Eko, an agentic SaaS Management Platform, ushering in a new era of AI-powered execution for modern software management. Torii Eko includes three intelligent in-platform agents: Eko Assist, available now; and Eko Insight and ...

Saviynt ISPM provides insights into an organization’s identity and access posture

Saviynt launched AI-powered Identity Security Posture Management (ISPM) as part of its converged Identity Cloud platform. Saviynt’s ISPM provides actionable insights into an organization’s identity and access posture, offering an intelligent ...