Tag: application-security
-
Black Duck launches AI agent to fix vulnerabilities as fast as attackers exploit them
Application security vendor Black Duck has launched Signal Agentic Fix, a new AI agent designed to shrink the gap between vulnerability discovery and a validated fix reaching production. The agent is the latest addition to Black Duck Signal, the company’s collection of AI agents aimed at removing the human workflow bottlenecks that stop security teams…
-
The Harness Is the Hard Part of Agentic Pentesting
An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those attacks safe to run against production and worth acting on afterward lives in the harness around the model. The harness is where the…
-
Bearer CLI: Free, source-available code security scanning tool (SAST)
Bearer CLI is a free static application security testing (SAST) tool that scans source code for vulnerabilities and prioritizes them by the sensitive data they touch. SAST … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/19/bearer-cli-free-code-security-scanning-tool-sast/
-
12 Best Mobile Application Security Testing Tools Compared (2026): Features Pricing
NowSecure and Data Theorem mobile security lead automated mobile testing, Guardsquare owns shielding/obfuscation, and Corellium’s virtual devices changed what deep mobile research costs. Twelve options across testing, shielding, virtualization, and runtime lanes mapped to MASVS so the acronyms mean something. Quick Verdict: Best Mobile AppSec at a Glance “¢ Best automated testing: NowSecure (pipeline MAST)…
-
12 Best DAST Tools Compared (2026): Features Pricing
PortSwigger’s Burp Suite anchors practitioner testing at published prices, Invicti leads proof-based fleet automation, and Bright Security heads the developer-CI insurgents. Twelve options across five lanes priced in their own units, with API/SPA capability treated as the bar that disqualifies legacy Dynamic Application Security Testing (DAST) configurations. Quick Verdict: Best DAST at a Glance “¢…
-
Ship fast, verify independently: keeping application security in step with AI-written code
AI coding assistants have transformed how quickly software can be built, but they have also intensified a long-running tension between development speed and security assurance. “There’s an awkward reality coming to light in the cybersecurity world: developers are being told to ship faster at the exact moment security teams need more scrutiny over what gets…
-
OpenAI Launches Codex Security Cloud for Always-On Application Security Scanning
OpenAI has expanded its Codex platform with Codex Security Cloud, a cloud-hosted application security feature that continuously analyzes GitHub repositories, investigates potential vulnerabilities, and prepares remediation patches for human review. Announced as part of the company’s latest Codex updates, this service is designed to operate security workflows beyond a developer’s local machine. It can run…
-
The Cyber Express Weekly Roundup: ShinyHunters’ FBI Breach Claim, North Korea’s WaterPlum Campaign, and the EU KIDS Act
Tags: access, advisory, ai, application-security, breach, crypto, cyber, korea, malware, north-koreaThis weekly roundup covers a brazen breach claim against the FBI’s recruitment portal, a multinational advisory exposing North Korea’s fake-recruiter malware operation, a sweeping EU proposal to reshape children’s access to social media, a conversation on application security in the age of AI agents, a short-lived Discord ban in the Philippines, and a multimillion-dollar hot-wallet…
-
The Next Evolution of Identity: Extending IAM Across People, Machines, and AI
Services Services Tailored consulting, engineering and managed security services to meet your unique needs. Application Security Ensure all software releases are secure Ensure all software releases are secure — www.guidepointsecurity.com/application-security/ Application Security Confidently use AI to fuel organizational success. –… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-next-evolution-of-identity-extending-iam-across-people-machines-and-ai/
-
Common web application security risks every SME should understand
For many UK SMEs, a web application is not just a website. It is the place customers log in, place orders, book services, submit forms, or access account information. That means a weakness in the application can quickly become a… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/common-web-application-security-risks-every-sme-should-understand/
-
Detection scaled. The loop did not.
Findings got cheap. Verified closure did not. That AppSec remediation gap is the actual problem.AppSec spent a decade winning the wrong race. We got very good at finding things. Scanners in CI. SCA on every manifest. SAST on every pull… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/detection-scaled-the-loop-did-not/
-
AI Is the Star of the Show. Identity Security Is Still the Stage.
Services Services Tailored consulting, engineering and managed security services to meet your unique needs. Application Security Ensure all software releases are secure Ensure all software releases are secure — www.guidepointsecurity.com/application-security/ Application Security Confidently use AI to fuel organizational success. –… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/ai-is-the-star-of-the-show-identity-security-is-still-the-stage/
-
Black Duck Joins Project Glasswing to Strengthen AI-Era Software Security
Black Duck, a provider of AI-powered application security solutions, has announced its participation in Project Glasswing, Anthropic’s industry-wide initiative aimed at protecting critical software infrastructure through the defensive use of advanced AI. Through its involvement, Black Duck will integrate Mythos throughout its application security offerings, pairing AI-driven, deterministic vulnerability detection with established remediation processes, risk-based…
-
Attacking and Defending SCOM: Management Server Relay and Obtaining Run As Credentials
Services Services Tailored consulting, engineering and managed security services to meet your unique needs. Application Security Ensure all software releases are secure Ensure all software releases are secure — www.guidepointsecurity.com/application-security/ Application Security Confidently use AI to fuel organizational success. –… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/attacking-and-defending-scom-management-server-relay-and-obtaining-run-as-credentials/
-
Black Duck brings AI-powered vulnerability scanning into Claude with new Signal integration
Application security vendor Black Duck has launched its Signal vulnerability scanning engine as an MCP server in the Claude Directory, giving developers using Anthropic’s Claude Desktop a way to check code for security flaws without switching tools. The integration is built on the Model Context Protocol (MCP), the open standard that lets AI assistants like…
-
OWASP Launches OASIS to Use AI and AppSec Experts to Fix Open-Source Vulnerabilities
OWASP has launched the Open Automated Security Initiative for Software (OASIS), a new community project aimed at accelerating the remediation of vulnerabilities in open-source software through AI-generated patches and human application-security validation. Announced on August 26, 2026, OWASP OASIS seeks to address a longstanding security gap: organizations and researchers can identify vulnerabilities faster than maintainers…
-
6 Cybersecurity Risks of Agentic AI (and How to Address Them)
Agentic AI introduces six categories of security risk that traditional application security wasn’t built to address: unbounded autonomy, tool chain exposure, identity fluidity, cascading multi-agent compromise, persistent memory poisoning, and supply chain integrity gaps. Key Takeaways Agentic AI introduces identity… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/6-cybersecurity-risks-of-agentic-ai-and-how-to-address-them/
-
AI AppSec tools agree on just 5% of security findings
Software vulnerabilities are turning into exploits within hours, and application security teams carry patch backlogs that go back years. Top types of viable application … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/31/contrast-security-ai-appsec-tools-security-findings-report/
-
Your Coding Assistant Is Shipping Security Vulnerabilities
Tags: access, ai, api, application-security, authentication, compliance, credentials, email, endpoint, framework, github, governance, LLM, programming, risk, service, tool, vulnerabilityYour Coding Assistant Is Shipping Security Vulnerabilities. Here’s How to Fix That. AI coding assistants have gotten remarkably good at writing functional code. Syntax correctness rates are approaching 100%. Developers are more productive than ever. And yet the security picture tells a very different story. Veracode recently evaluated over 150 large language models across vendors…
-
False Positive Elimination: How Runtime Context Saves Developer Time
<div cla TL;DR Traditional application security tools generate false-positive vulnerability findings because they analyze code patterns without execution context, flagging vulnerabilities in code that never runs with untrusted data. Runtime instrumentation solves this by observing actual production behavior, revealing that only a small percentage of flagged vulnerabilities are truly exploitable. Reducing application security false positives…
-
OWASP Flags Top AI Skill Risks in New Security Blueprint
The Open Worldwide Application Security Project has a brand-new top 10 security list tailored for the modern era, and it debuts a Universal Skill Format to add consistency and security to the AI add-ons. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/owasp-flags-top-ai-skill-risks-security-blueprint