Secure Coding News

Scroll down for all the latest news and information on secure coding.

Browse other Application Security topics

Don’t miss out!

Subscribe to our weekly newsletter for the latest in industry news, expert insights, dedicated information security content and online events.

Microsoft Azure MFA Flaw Allowed Easy Access Bypass

News11 Dec 2024

Hackers Exploit Misconfigurations in Public Websites With Improperly Exposed AWS Credentials

News10 Dec 2024

Compromised AI Library Delivers Cryptocurrency Miner via PyPI

News9 Dec 2024

The compromised ultralytics AI library delivered XMRig miner via GitHub Actions exploit

Solana Library Supply Chain Attack Exposes Cryptocurrency Wallets

News5 Dec 2024

A supply chain attack on the Solana library utilizing malicious npm versions has exposed private keys, putting crypto funds at risk

Corrupted Word Files Fuel Sophisticated Phishing Campaign

News2 Dec 2024

Malicious PyPI Package Exposes Crypto Wallets to Infostealer Code

News28 Nov 2024

GodLoader Malware Infects Thousands via Game Development Tools

News28 Nov 2024

New Bootkit “Bootkitty” Targets Linux Systems via UEFI

News27 Nov 2024

IoT Device Traffic Up 18% as Malware Attacks Surge 400%

News25 Nov 2024

npm Package Lottie-Player Compromised in Supply Chain Attack

News25 Nov 2024

npm package @lottiefiles/lottie-player hacked with malicious code, draining crypto wallets via web3 pop-ups

Don’t miss out!

Subscribe to our weekly newsletter for the latest in industry news, expert insights, dedicated information security content and online events.

White papers

Gcore Radar: DDoS Attack Trends Q3 to Q4, 2023

White Paper20 Mar 2024

Secure Coding Culture Playbook

White Paper9 Dec 2022

Web Application Security for Pharma and Healthcare

White Paper30 Jun 2022

On-demand webinars

Unpacking the Top Vulnerabilities Exploited by Sophisticated Attackers
26 Jun 2024 Webinar
Experiencing a DDoS Simulation to Enhance Defenses
2 May 2024 Webinar
Mastering Software Supply Chain Security with Strategic Defense Mechanisms
30 Nov 2023 Webinar
The Infosecurity Magazine End of Year Xmas Quiz (Feat. The Beer Farmers)
15 Dec 2022 Webinar
Updating Your Active Directory Security to the Modern Threat Environment
27 Oct 2022 Webinar
How to Secure Your Applications Against API Attacks
8 Sep 2022 Webinar
Why APIs will be the No. 1 Enterprise Attack Vector in 2022
8 Jun 2022 Webinar
Modernizing AppSec and Developer Security Programs
31 Mar 2022 Webinar
How Zero Trust Enables Remote Working and Builds to a SASE Vision
13 May 2021 Webinar
Hybrid Working Has Accelerated Cloud Application Adoption: What About Security?
4 Mar 2021 Webinar

What’s hot on Infosecurity Magazine?

New Malware Can Kill Engineering Processes in ICS Environments

News19 Dec 2024

Top 10 Cyber-Attacks of 2024

News Feature2 Dec 2024

US Organizations Still Using Kaspersky Products Despite Ban

News19 Dec 2024

Phishing Attacks Double in 2024

News18 Dec 2024

Crypto-Hackers Steal $2.2bn as North Koreans Dominate

News19 Dec 2024

Recorded Future CEO Calls Russia’s “Undesirable” Listing a “Compliment”

News19 Dec 2024

Cybercriminals Exploit Google Calendar to Spread Malicious Links

News17 Dec 2024

New APIs Discovered by Attackers in Just 29 Seconds

News17 Dec 2024

US Unveils New National Cyber Incident Response Plan

News17 Dec 2024

Texas Tech University Data Breach Impacts 1.4 Million

News17 Dec 2024

Top 10 Cyber-Attacks of 2024

News Feature2 Dec 2024

YouTube Creators Targeted in Global Phishing Campaign

News16 Dec 2024

Alert Fatigue: What Are You and Your Security Teams Missing?

Webinar5 Dec 2024

Dispelling the Myths of Defense-Grade Cybersecurity

Webinar4 Dec 2024

How to Manage Your Risks and Protect Your Financial Data

Webinar30 Oct 2024

New Cyber Regulations: What it Means for UK and EU Businesses

Webinar10 Oct 2024

Learn Key Strategies for Industrial Data Security

Webinar27 Jun 2024

The Future of Fraud: Defending Against Advanced Account Attacks

Webinar18 Jul 2024

Gatwick Airport's Cybersecurity Chief on Supply Chain Risks and CrowdStrike Outage

Interview21 Nov 2024

You're Hired! The Truth About Certifications in Cybersecurity Careers

News Feature2 Dec 2024

T-Mobile Claims Salt Typhoon Did Not Access Customer Data

News28 Nov 2024

Darknet Services Fuel Holiday Scams and E-Commerce Exploits

News26 Nov 2024

Top 10 Cyber-Attacks of 2024

News Feature2 Dec 2024

Google Deindexes Chinese Propaganda Network

News25 Nov 2024

Podcasts

IntoSecurity Chats Episode 1 - Katie Moussouris
3 Mar 2021 Podcast

MITRE Unveils Top 25 Most Critical Software Flaws

News22 Nov 2024

Google OSS-Fuzz Harnesses AI to Expose 26 Hidden Security Vulnerabilities

News21 Nov 2024

watchTowr Finds New Zero-Day Vulnerability in Fortinet Products

News15 Nov 2024

Microsoft Power Pages Misconfiguration Leads to Data Exposure

News14 Nov 2024

API Security in Peril as 83% of Firms Suffer Incidents

News14 Nov 2024

Over 80% of UK organizations suffered an API security incident in the past year, with each costing over £400,000

Lazarus Group Uses Extended Attributes for Code Smuggling in macOS

News13 Nov 2024

Microsoft Fixes Four More Zero-Days in November Patch Tuesday

News13 Nov 2024

New Citrix Zero-Day Vulnerability Allows Remote Code Execution

News12 Nov 2024

watchTowr has found a flaw in Citrix’s Session Recording Manager that can be exploited to enable unauthenticated RCE against Citrix Virtual Apps and Desktops

Defenders Outpace Attackers in AI Adoption

News7 Nov 2024

Trend Micro’s Robert McArdle says cybercriminals use of AI is far more limited than many realize, and pales in comparison to defenders' use of the technology

Winos4.0 Malware Found in Game Apps, Targets Windows Users

News6 Nov 2024

Events coming up

Infosecurity Europe 2025

Event3 – 5 Jun 2025

Next-gen infosec

How to Prevent Data Leakages

Next-Gen11 Aug 2023

Top Cloud Misconceptions that Could Damage Your Organization

Next-Gen4 Aug 2023

Improve Asset Visibility in OT Security With Hybrid AI-Cloud Approaches

Next-Gen21 Jul 2023