Concluding a two-day OSS security summit, CISA details key actions to help improve open source security.
The post CISA Outlines Efforts to Secure Open Source Software appeared first on SecurityWeek.
Cyber Insights 2024: APIs – A Clear, Present, and Future Danger
The API attack surface is expanding and API vulnerabilities are growing. AI will help attackers find and exploit API vulnerabilities at scale.
The post Cyber Insights 2024: APIs – A Clear, Present, and Future Danger appeared first on SecurityWeek.
No Security Scrutiny for Half of Major Code Changes: AppSec Survey
Only 54% of major code changes go through a full security review, a new CrowdStrike State of Application Security report reveals.
The post No Security Scrutiny for Half of Major Code Changes: AppSec Survey appeared first on SecurityWeek.
Google Contributes $1 Million to Rust, Says It Prevented Hundreds of Android Vulnerabilities
Google announces $1 million investment in improving Rust’s interoperability with legacy C++ codebases.
The post Google Contributes $1 Million to Rust, Says It Prevented Hundreds of Android Vulnerabilities appeared first on SecurityWeek.
Google Open Sources AI-Aided Fuzzing Framework
Google has released its fuzzing framework in open source to boost the ability of developers and researchers to identify vulnerabilities.
The post Google Open Sources AI-Aided Fuzzing Framework appeared first on SecurityWeek.
Tor Code Audit Finds 17 Vulnerabilities
Over a dozen vulnerabilities discovered in Tor audit, including a high-risk flaw that can be exploited to inject arbitrary bridges.
The post Tor Code Audit Finds 17 Vulnerabilities appeared first on SecurityWeek.
New Class of CI/CD Attacks Could Have Led to PyTorch Supply Chain Compromise
Researchers detail a CI/CD attack leading to PyTorch releases compromise via GitHub Actions self-hosted runners.
The post New Class of CI/CD Attacks Could Have Led to PyTorch Supply Chain Compromise appeared first on SecurityWeek.
Aqua Security Scores $60M Series E Funding
Late-stage player in the CNAPP space secures a $60 million extended Series E funding round at a valuation north of $1 billion.
The post Aqua Security Scores $60M Series E Funding appeared first on SecurityWeek.
SentinelOne Snaps up Seed-Stage CNAPP Startup PingSafe
SentinelOne plans to acquire PingSafe in a cash-and-stock deal that adds cloud native application protection platform (CNAPP) technologies.
The post SentinelOne Snaps up Seed-Stage CNAPP Startup PingSafe appeared first on SecurityWeek.
NSA Issues Guidance on Incorporating SBOMs to Improve Cybersecurity
NSA has published guidance to help organizations incorporate SBOM to mitigate supply chain risks.
The post NSA Issues Guidance on Incorporating SBOMs to Improve Cybersecurity appeared first on SecurityWeek.
