Technology ❯ Software Development

Application Security

Vulnerabilities Vulnerability Management Static Application Security Testing User Authentication Sandboxing Code Signing Compliance Permissions Management Runtime Integrity Third-Party Applications AI in Development Error Management Showcase.apk User Privacy Threat Modeling Software Testing Integration Risks Data Protection OAuth Tokens User Notifications Testing and Hacking Kernel Security Data Handling Practices Code Analysis Authentication Methods File Upload Vulnerabilities Botnets Ethical Hacking Bug Fixes Malicious Applications AI-Powered Security Security Flaws Cryptographic Protocols Authorization Management Authentication Issues React Server Components Risk Management Runtime Protection Third-Party Integrations Malware Protection Policy Enforcement Points Frontend Development User Settings macOS Applications Access Control Pricing Models Misconfiguration Application Logic Threat Analysis Auto Blocker App Security Patches Data Exposure Security Fixes Malware Threats Snap Applications Security Tools Threat Detection Memory Corruption AI in Software Development Container Security

Cybersecurity Vulnerabilities Exposed

Rovo prompt injection, Metabase SQL exploit, and data security risks

Atlassian Fixes Rovo One-Click Prompt Injection as Upload Attack Path Remains Public

The disclosure highlights how an AI assistant with wide app access can turn a signed-in user’s account into a channel for leaking internal data.

Metabase Zero‑Day SQL Injection Exploited to Steal Customer Data

Stories older than 24h

Red Teams Demonstrate Agentic AI Can Leak Secrets and Point to Fixes

Zilliqa Suspends Native ZIL Transfers After Ledger App Flaw Exposes Keys

Race-Condition Bug in snap-confine Lets Local Users Gain Root on Ubuntu Desktop

HalluSquatting Lets Attackers Pre-Register AI Hallucinations to Seed Malicious Packages

Icarus Extortion Group Used Klue OAuth Breach to Steal Salesforce CRM Data

AppSec Pushes Verification Upstream as AI Code Swells Reviews

73 Cloned OpenVSX Extensions Linked to GlassWorm Act as Malware Loaders

GrafanaGhost Vulnerability Lets AI Features Leak Data From Grafana

Leak Points to Memory Tagging in Samsung’s One UI 9 With Possible Speed Hit

CrowdStrike Centers AI Security on the Endpoint With New Falcon Controls for Cloud and Data

Escape Raises $18 Million to Scale AI Agents That Automate Pentesting

PayPal Loan-App Error Exposed SSNs for Six Months, About 100 Customers Notified

PayPal Says Loan-App Bug Exposed Customer Data for Six Months

Microsoft Patches High-Severity Notepad Markdown Flaw as Store Update Rolls Out

Microsoft Details Windows Baseline Security Mode for Default Signed-Only Runtime

Microsoft Overhauls Windows Security With Mobile-Style Permissions and Default Runtime Integrity

NSA Issues Phase One and Two Zero Trust Implementation Guidelines

Researchers Expose Gemini Calendar Data Leak via Malicious Invites as Google Rolls Out Mitigations