Categoria: Application Security

Thousands of Popular Websites Leaking Secrets

thousands-of-popular-websites-leaking-secrets

Truffle Security has discovered thousands of popular websites leaking their secrets, including .git directories and AWS and GitHub keys.

The post Thousands of Popular Websites Leaking Secrets appeared first on SecurityWeek.

GitHub Enterprise Server Gets New Security Capabilities

github-enterprise-server-gets-new-security-capabilities

GitHub Enterprise Server 3.10 released with additional security capabilities, including support for custom deployment rules.

The post GitHub Enterprise Server Gets New Security Capabilities appeared first on SecurityWeek.

Signs of Malware Attack Targeting Rust Developers Found on Crates.io

signs-of-malware-attack-targeting-rust-developers-found-on-crates.io

The Crates.io Rust package registry was targeted in preparation of a malware attack aimed at developers, according to Phylum.

The post Signs of Malware Attack Targeting Rust Developers Found on Crates.io appeared first on SecurityWeek.

Google Brings AI Magic to Fuzz Testing With Eye-Opening Results

google-brings-ai-magic-to-fuzz-testing-with-eye-opening-results

Google sprinkles magic of generative-AI into its open source fuzz testing infrastructure and finds immediate success with code coverage.

The post Google Brings AI Magic to Fuzz Testing With Eye-Opening Results appeared first on SecurityWeek.

Patch Tuesday: Adobe Patches 30 Acrobat, Reader Vulns

patch-tuesday:-adobe-patches-30-acrobat,-reader-vulns

Adobe rolls out a big batch of security updates to fix at least 30 Acrobat and Reader vulnerabilities affecting Windows and macOS users.

The post Patch Tuesday: Adobe Patches 30 Acrobat, Reader Vulns appeared first on SecurityWeek.

Apple Lists APIs That Developers Can Only Use for Good Reason

apple-lists-apis-that-developers-can-only-use-for-good-reason

To boost user privacy, Apple is requiring app developers to declare a reason to use specific APIs.

The post Apple Lists APIs That Developers Can Only Use for Good Reason appeared first on SecurityWeek.

The Good, the Bad and the Ugly of Generative AI

the-good,-the-bad-and-the-ugly-of-generative-ai

Thinking through the good, the bad, and the ugly now is a process that affords us “the negative focus to survive, but a positive one to thrive.”

The post The Good, the Bad and the Ugly of Generative AI appeared first on SecurityWeek.

10 Steps to Help Secure Your APIs

10-steps-to-help-secure-your-apis

Securing APIs is a noble, though complex journey. Security teams can leverage these 10 steps to help secure their APIs.

The post 10 Steps to Help Secure Your APIs appeared first on SecurityWeek.

API Flaw in QuickBlox Framework Exposed PII of Millions of Users

api-flaw-in-quickblox-framework-exposed-pii-of-millions-of-users

QuickBlox SDK and API vulnerabilities impact chat and video applications used by industries including telemedicine, smart IoT, and finance.

The post API Flaw in QuickBlox Framework Exposed PII of Millions of Users appeared first on SecurityWeek.

Adobe Patch Tuesday: Critical Flaws Haunt InDesign, ColdFusion

adobe-patch-tuesday:-critical-flaws-haunt-indesign,-coldfusion

Software maker calls special attention to CVE-2023-29300, a deserialization of untrusted data bug with a CVSS severity score of 9.8/10.

The post Adobe Patch Tuesday: Critical Flaws Haunt InDesign, ColdFusion appeared first on SecurityWeek.