The Ultimate Guide to Application Security
A curated American edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Application Security.
What to know about Application Security
Application Security focuses on protecting software applications from vulnerabilities and cyber threats throughout their development and operational life cycles. This critical field addresses challenges such as runtime protection, secure coding practices, DevSecOps integration, API security, cloud-native environments, and mitigating attacks like DDoS, supply chain risks, and malicious bot traffic.
Exploring the latest stories in Application Security reveals how advancements like AI and automation are enhancing threat detection, vulnerability management, and developer workflows, while highlighting ongoing risks found in mobile apps, open source components, and cloud deployments. Readers can gain insights into best practices, emerging technologies, and strategies to safeguard applications against evolving cyber threats.
Whether you’re a developer, security professional, or business leader, staying informed about Application Security developments helps in building resilient software, maintaining compliance, and protecting user data in an increasingly complex digital landscape.
American Application Security News
Regional stories with direct local relevance
Reco to brief Black Hat on AI agent security risks
Security teams face new exposure as AI agents inherit permissions and move data across business systems, Reco says.
Appdome launches remote management for live mobile apps
Mobile teams can now alter protections in published apps without a rebuild, speeding responses to fraud and other threats.
AI models breach live systems in cybersecurity tests
Security teams face faster, stealthier intrusions after AI agents managed to breach live systems in controlled tests by Anthropic and OpenAI.
Novee to reveal AI agent & Java flaws at Black Hat
Security gaps in AI workflows and enterprise Java could expose secrets, trigger remote code execution and disrupt supply chains.
NetRise adds package trust tools to Provenance platform
Open source package attacks can now be blocked earlier, as NetRise brings trust checks into editors, command lines and AI coding tools.
Sweet Security launches AI blocking for rogue agents
The new controls aim to stop unauthorised tool calls, data leaks and prompt injection as firms deploy more autonomous software.
Analyst Insights
Research and market analysis connected to Application Security
Netskope named leader in Gartner SASE & SSE reports
QuSecure lands Gartner nod for crypto-agility tools
Contrast launches CVE Shield to block exploit attacks
Check Point launches AI Network Firewall in R82.20
Qualys adds governance to TotalAI for AI risk control
Featured News
Humanoid robots, 0-day defence among Info-Tech trends for '27
Agentic AI, zero-day surge, sovereign cloud, and humanoid robots will define IT strategy in 2027, Info-Tech Research Group warns.
Exabeam: Ruthless efficiency can make agentic AI malicious
Behavioural analytics is becoming essential as AI agents can pursue tasks so efficiently that they may cause damage without any malicious intent.
Check Point Technologies: On vigilance, Mythos and beyond
AI-driven vulnerability scanning is forcing firms to rethink complacency as Check Point says existing defences still help against Mythos.
Exclusive: Reco COO on securing the AI inside your SaaS stack
Reco COO Zoe Hillenmeyer says enterprises typically underestimate their AI agent exposure by a factor of ten and that gap is widening.
Expert Columns
A strategic blueprint for governing AI-enabled software development
Why ERP is not just another platform you can rebuild with AI code
As agentic development accelerates, workflow auditability becomes a bottleneck
The evolving role of the CSO: From technical guardian to business strategist
Secure by default: Moving beyond secure by design
Why the next endpoint and SASE disruption will not come from a security vendor
The security challenges in AI-assisted software development
AI surge exposes cloud security gaps, report warns
Agentic AI double agents expose dangerous security gaps
Why auto update is the most underrated security feature on your firewall
Interviews
Interviews and video coverage from the network
Recent Application Security News
Sygnia finds AI onboarding flaw exposing client data
A faulty token check let low-privilege users view other applicants' identities, payment details and Social Security numbers in a financial onboarding app.
Cycode launches agentic workflows for security teams
Security teams can now automate triage and remediation as risks emerge, with early access to AI agents that still require human oversight.
NCC Group says human testers still vital in AI security
AI tools are speeding routine checks, but hidden business logic flaws and context-specific risks still need human testers to spot them.
Cobalt launches autonomous pentest for continuous testing
Security teams may get findings within 24 hours as Cobalt targets faster testing across sprawling software estates.
Synack study finds major blind spots in security testing
Fast-moving corporate systems are outpacing scheduled checks, leaving many firms with security gaps that can persist for days or weeks.
CISA uses Anthropic AI to hunt flaws in federal code
The pilot could speed up vulnerability hunting across government systems, but it also leaves human teams to verify and fix each AI flag.
RapidFort & ReversingLabs add security checks to libraries
Enterprises can now vet open-source dependencies before build time, as the catalogue adds independent malware and vulnerability checks for Python and Java.
Baz launches Planner with USD $9 million seed raise
The new planning tool aims to cut bugs and security flaws before code is written, as the startup's seed funding reaches USD $17 million.
Straiker raises USD $64 million to secure AI agents
Enterprise customers face growing risks as autonomous software gains access to internal systems, prompting fresh demand for agent security tools.
Cobalt study says automated AI tests miss key flaws
False negatives from automated scanning tools are fuelling a shift towards human-led AI security testing across large organisations.
Minimus opens full image catalogue without registration
Developers can now pull thousands of hardened container images for free, as the company drops registration and expands access across its library.
DevOps breaches hit tech firms in trust chain attacks
Tech and software groups are most at risk as breaches, supplier access and stale credentials let attackers reach source code and customer data.
QuSecure appoints ex-CIA officer to advisory board
The move comes as US agencies shift from planning to implementation of post-quantum cryptography, exposing legacy systems to future quantum attacks.
White House AI order draws fresh cybersecurity scrutiny
Voluntary model reviews may leave gaps as advanced AI systems move closer to critical infrastructure and enterprise data.
UltraViolet Cyber launches Solstice AI pentesting platform
The platform aims to speed application security reviews by about 20% while keeping expert testers in charge of final findings.
Token Security launches Enzo AI builder for identity teams
Security teams are getting a way to automate access reviews and remediation as AI agents and machine accounts widen identity risks.
Geordie appoints Courtney Broadwell as Channel Chief
The hire bolsters Geordie's push to help enterprises govern AI agents, as it expands after a USD $30 million funding round.
Sonatype expands Firewall to block malicious packages
Malicious open source packages are increasingly slipping past spelling checks, exposing developer data and build systems to supply-chain attacks.
Zapier security chain exposed package publishing risk
A free account could have let attackers alter Zapier-maintained packages and hijack logged-in users' browser sessions, researchers said.
CodeHunter appoints Anurag Jain as Engineering Chief
The hire signals CodeHunter's push to scale pre-execution software security as threats mount across supply chains and development environments.
