Security researchers SecurityBridge, who notified SAP after finding the flaw, described as a “missing input sanitation” ...

When top-level enterprise executives think of cybersecurity threats, they tend to picture things like malware, ransomware, ...

Nov 11, 2025 - Jeremy Snyder - Over the last few years, web application attacks have become one of the leading causes of data breaches, making web application security increasingly important for ...

Nov 11, 2025 - Jeremy Snyder - In mid-2023, a software vulnerability was discovered in a file transfer application known as moveIT. Because of the application's popularity, numerous companies and ...

OWASP has released a revised version of its Top 10 list of critical risks to web applications, adding two new categories.

Fortinet has silently patched a critical zero-day vulnerability in its FortiWeb web application firewall, which is now being ...

Also of importance are a Kerberos vulnerability in Active Directory, a Visual Studio Copilot extension, and a Microsoft ...

With access to the credentials stored in your password manager, threat actors could hijack your accounts to commit identity ...

Cybercriminals have named the NHS as one of the victims of the recent data theft and extortion campaign targeting Oracle EBS.

Applications built by citizen developers using no-code platforms expand the attack surface without the same checks and balances as traditional development.

Microsoft is publishing 66 new vulnerabilities, which is far fewer than we’ve come to expect in recent months. There’s a lone exploited-in-the-wild zero-day vulnerability, which Microsoft assesses as ...

The Open Worldwide Application Security Project (OWASP) just published its top 10 categories of application risks for 2025, its first list since 2021. It found that while broken access control remains ...