Application Security | News, how-tos, features, reviews, and videos
As Washington and Beijing meet this week, the gap between American and Chinese AI is narrowing — and the technology that could destabilize the world’s digital infrastructure is leaking out with potential cyber Cold War implications.
Hundreds of software packages are affected, once again threatening enterprise credentials on coders’ machines.
A North Korean APT has crafted malicious software packages to appeal to AI coding agents, while ‘slopsquatting’ shows the security risks of hallucinated dependencies.
Oracle will follow SAP, Microsoft and other software vendors in issuing security patches monthly — but a week later than everyone else.
Learn how AppSec has evolved and where it’s headed
Connecting an LLM to your proprietary data via RAG is a massive liability; without document-level access controls, your AI is just one prompt away from exfiltrating your IP.
Accelerated use of AI in software development is rapidly altering the scope, skills, and strategies involved in securing code as it is created.
The move would allow civilian agencies to access a modified version of Anthropic’s powerful vulnerability‑hunting AI, under safeguards designed to limit misuse.
Unsafe defaults in MCP configs open servers to possible remote code execution, as evidenced by several commercial services and open-source projects.
A 10-year-old issue involving Docker Engine and the AuthZ authorization plug-in lives again to enable attackers to gain root-level access to host systems.