The relationship between the two software security initiatives promoted by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) can be misunderstood. Sometimes Secure by Design and Secure ...

Orca Security, the pioneer of agentless cloud security, today announced new application security capabilities that unify ...

CVE-2024-56161 exposes AMD SEV-SNP to malicious microcode attacks, risking VM data integrity. Discovered by Google, rated ...

In January 2025, outgoing CISA chief Jen Easterly called on IT buyers to demand better security standards from their software suppliers. The Security Think Tank considers what better means, and what ...

Another trend is of targeting perimeter-based products with vulnerability exploitation. The National Cyber Security Centre (NCSC) has warned of an uptick in such attacks, often involving zero-day ...

The rapid evolution of financial technology has transformed transaction methods while introducing significant digital ...

Some SAST tools provide better insight into all potential vulnerabilities and coding issues, while others offer a better ...

CISA has added CVE-2024-29059, a flaw affecting Microsoft .NET, to its Known Exploited Vulnerabilities catalog.

Hackers are using AI to craft smarter scams, automate attacks, and find security gaps. Learn how cybercriminals are ...

AMD has released mitigation and firmware updates to address a high-severity vulnerability that can be exploited to load ...

AMD has released patches for a microprocessor vulnerability that could allow an attacker to load malicious microcode.

AI-generated code should always be used with appropriate safeguards to minimize security risks. The adoption of secure ...