The Ultimate Guide to Application Security
A curated American edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Application Security.
What to know about Application Security
Application Security focuses on protecting software applications from vulnerabilities and cyber threats throughout their development and operational life cycles. This critical field addresses challenges such as runtime protection, secure coding practices, DevSecOps integration, API security, cloud-native environments, and mitigating attacks like DDoS, supply chain risks, and malicious bot traffic.
Exploring the latest stories in Application Security reveals how advancements like AI and automation are enhancing threat detection, vulnerability management, and developer workflows, while highlighting ongoing risks found in mobile apps, open source components, and cloud deployments. Readers can gain insights into best practices, emerging technologies, and strategies to safeguard applications against evolving cyber threats.
Whether you’re a developer, security professional, or business leader, staying informed about Application Security developments helps in building resilient software, maintaining compliance, and protecting user data in an increasingly complex digital landscape.
American Application Security News
Regional stories with direct local relevance
Baz launches Planner with USD $9 million seed raise
The new planning tool aims to cut bugs and security flaws before code is written, as the startup's seed funding reaches USD $17 million.
Straiker raises USD $64 million to secure AI agents
Enterprise customers face growing risks as autonomous software gains access to internal systems, prompting fresh demand for agent security tools.
Cobalt study says automated AI tests miss key flaws
False negatives from automated scanning tools are fuelling a shift towards human-led AI security testing across large organisations.
Minimus opens full image catalogue without registration
Developers can now pull thousands of hardened container images for free, as the company drops registration and expands access across its library.
DevOps breaches hit tech firms in trust chain attacks
Tech and software groups are most at risk as breaches, supplier access and stale credentials let attackers reach source code and customer data.
QuSecure appoints ex-CIA officer to advisory board
The move comes as US agencies shift from planning to implementation of post-quantum cryptography, exposing legacy systems to future quantum attacks.
Analyst Insights
Research and market analysis connected to Application Security
Data Theorem launches AI security platform for apps
Gartner names Tenable leader in AI exposure assessment
Secure Code Warrior launches AI adoption model for CISOs
Checkmarx named leader in Gartner supply chain quadrant
Secure Code Warrior launches AI adoption model for CISOs
Featured News
Humanoid robots, 0-day defence among Info-Tech trends for '27
Agentic AI, zero-day surge, sovereign cloud, and humanoid robots will define IT strategy in 2027, Info-Tech Research Group warns.
Exabeam: Ruthless efficiency can make agentic AI malicious
Behavioural analytics is becoming essential as AI agents can pursue tasks so efficiently that they may cause damage without any malicious intent.
Check Point Technologies: On vigilance, Mythos and beyond
AI-driven vulnerability scanning is forcing firms to rethink complacency as Check Point says existing defences still help against Mythos.
Exclusive: Reco COO on securing the AI inside your SaaS stack
Reco COO Zoe Hillenmeyer says enterprises typically underestimate their AI agent exposure by a factor of ten and that gap is widening.
Google Cloud CEO sets out enterprise AI agent plan
Enterprises will get one place to build, govern and run AI agents, as Google Cloud expands Gemini Enterprise across models, data and security.
Expert Columns
A strategic blueprint for governing AI-enabled software development
Why ERP is not just another platform you can rebuild with AI code
As agentic development accelerates, workflow auditability becomes a bottleneck
The evolving role of the CSO: From technical guardian to business strategist
Secure by default: Moving beyond secure by design
Why the next endpoint and SASE disruption will not come from a security vendor
The security challenges in AI-assisted software development
AI surge exposes cloud security gaps, report warns
Agentic AI double agents expose dangerous security gaps
Why auto update is the most underrated security feature on your firewall
Interviews
Interviews and video coverage from the networkRecent Application Security News
White House AI order draws fresh cybersecurity scrutiny
Voluntary model reviews may leave gaps as advanced AI systems move closer to critical infrastructure and enterprise data.
UltraViolet Cyber launches Solstice AI pentesting platform
The platform aims to speed application security reviews by about 20% while keeping expert testers in charge of final findings.
Token Security launches Enzo AI builder for identity teams
Security teams are getting a way to automate access reviews and remediation as AI agents and machine accounts widen identity risks.
Geordie appoints Courtney Broadwell as Channel Chief
The hire bolsters Geordie's push to help enterprises govern AI agents, as it expands after a USD $30 million funding round.
Sonatype expands Firewall to block malicious packages
Malicious open source packages are increasingly slipping past spelling checks, exposing developer data and build systems to supply-chain attacks.
Zapier security chain exposed package publishing risk
A free account could have let attackers alter Zapier-maintained packages and hijack logged-in users' browser sessions, researchers said.
CodeHunter appoints Anurag Jain as Engineering Chief
The hire signals CodeHunter's push to scale pre-execution software security as threats mount across supply chains and development environments.
Island tops Texas peers in CNBC's Disruptor 50 list
The ranking highlights surging demand for AI-governance software, with the Dallas firm ahead of two Austin rivals on CNBC's list.
Permiso launches AI agent security tools with Autodesk
Autodesk is among early users as the new controls aim to give security teams runtime visibility into unapproved AI agents and their actions.
Upwind launches AI agentic pack for cloud security
It aims to cut alert fatigue by using runtime data to validate threats, prioritise real risks and guide fixes across cloud and AI systems.
Gluware launches Titan Exposure Management for networks
Security teams could cut false positives and speed fixes as the new tool ties vulnerability alerts to live network device states.
Secure.com flags 21 flaws in AI pentest on live stacks
Seven critical weaknesses were found in live production systems over a weekend, showing AI-driven pentests can now uncover basic flaws cheaply.
Miggo launches Pulse in bid to speed AI exploit response
It aims to cut the time security teams need to spot exploitable flaws and deploy temporary defences before attackers strike.
CleanStart launches shell-less read-only containers
Existing deployments can gain stronger protection against post-compromise persistence without changing Dockerfiles, CI/CD pipelines or runtime workflows.
Akto widens AI agent security with new integrations
Native checks will now flag prompt injection and data leakage across more of the AI agent stack as enterprises push systems into production.
Tenable flags Microsoft GitHub workflow flaw risking code
A flaw in a Microsoft GitHub workflow could let attackers run unauthorised code and steal repository secrets, Tenable said.
OpenAI broadens AI cyber tools as arms race heats up
Ransomware pressure on US firms is intensifying debate over whether broader AI hacking tools will help defenders or aid criminals.
Mythos model sparks warnings over AI cyber threats
Enterprises face faster phishing, deepfakes and automated exploits as security leaders say existing controls lag behind frontier AI models.
Qodo raises $70 million to develop a trust layer for AI coding
The funding will help Qodo expand globally as enterprises look for ways to verify AI-written code before it reaches production systems.
BlueFlag lifts Series A after rapid revenue growth
Adoption among big enterprises has helped the cybersecurity start-up secure USD $28 million, as it expands tools for AI-driven software development.
