Application security and coding requirements

Oracle patches E-Business suite targeted by Cl0p ransomware

Oracle pushes a patch for a dangerous zero-day under active exploitation by one of the most notorious ransomware gangs around Continue Reading

By

• Alex Scroxton, Security Editor

Apple’s first iOS 26 security update fixes memory corruption flaw

Apple issues an update for its brand new iOS 26 mobile operating system, fixing a potentially dangerous vulnerability affecting iPhones, iPads and other Mac devices Continue Reading

By

• Alex Scroxton, Security Editor

Over half of India-based companies suffer security breaches

Business supply chains, which include Indian companies, are at risk of attack as more than half of suppliers were breached last year Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

How Mediacorp stops livestreams from freezing at key moments

Singapore’s national broadcaster has achieved a 99.5% crash-free rate for its mobile apps by using observability tools to find and fix issues in real time, ensuring a smoother experience for users Continue Reading

By

• Aaron Tan, Informa TechTarget

Co-op declares cyber attack damage cost £206m

Co-op reveals £206m costs from April cyber attack, with revenues hit, member data stolen and shelves emptied, exposing major retail supply chain vulnerabilities Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Netherlands establishes cyber resilience network to strengthen public-private digital defence

Network will connect organisations in a cyber crime defence initiative that goes way beyond information sharing Continue Reading

By

• Kim Loohuis

SolarWinds warns over dangerous RCE flaw

A newly uncovered RCE flaw in SolarWinds’ helpdesk product bypasses two previously issued fixes, and users should prioritise updates as exploitation is likely to occur Continue Reading

By

• Alex Scroxton, Security Editor

Pentera expands in APAC, taps AI to outsmart attackers

The penetration testing specialist is expanding its presence in the Asia-Pacific region and deploying AI-driven capabilities as it eyes acquisitions and a potential IPO Continue Reading

By

• Aaron Tan, Informa TechTarget

Google Cloud unveils open protocol for agentic payments

Google’s Agent Payments Protocol is an open standard developed with more than 60 global partners to create a secure standard for AI-driven transactions Continue Reading

By

• Aaron Tan, Informa TechTarget

Jaguar Land Rover admits data has been compromised in cyber attack

The car maker revealed that data was stolen in the cyber attack that began on 31 August, as its production line continues to be affected Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Splunk.conf: Splunk urges users to eat their ‘cyber veggies’

The dawn of AI-enabled cyber attacks makes it even more important for defenders to bring their A-game, particularly when it comes to getting the basics right Continue Reading

By

• Alex Scroxton, Security Editor

Growing demand for AI-skilled cyber specialists  

 AI is increasingly at the heart of organisations’ digital transformation journeys – whether that’s to drive up efficiencies, generate powerful insights from data, delight customers, or supercharge internal productivity. Continue Reading

By

• Peter Birch and Mo Gaibee, Harvey Nash

How to manage Active Directory security

Understanding prevention and recovery steps is crucial for managing attacks on Active Directory Continue Reading

By

• Bob Bobel

Three new Citrix NetScaler zero-days under active exploitation

Citrix patches three new vulnerabilities in its NetScaler lines warning of active zero-day exploitation by an undisclosed threat actor Continue Reading

By

• Alex Scroxton, Security Editor

Moscow exploiting seven-year-old Cisco flaw, says FBI

US authorities warn of an uptick in state-sponsored exploitation of a seven-year-old vulnerability in Cisco's operating system software Continue Reading

By

• Alex Scroxton, Security Editor

Commvault users told to patch two RCE exploit chains

Storage firm Commvault fixes four vulnerabilities that, when combined, create a pair of RCE exploit chains that could be used to target on-premise customers with ransomware and other nasties Continue Reading

By

• Alex Scroxton, Security Editor

Okta: AI adoption fuels problems for identity management

Okta research indicates the emergence and growth of novel security problems, connected with the spread of AI agents and non-human identities Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Eight critical RCE flaws make Microsoft’s latest Patch Tuesday list

Microsoft rolls out fixes for over 100 CVEs in its August Patch Tuesday update Continue Reading

By

• Alex Scroxton, Security Editor

Black Hat USA: Startup breaks secrets management tools

Researchers at Cyata, an agentic identity specialist that has just emerged from stealth, found 14 CVEs in the widely used CyberArk Conjur and HashiCorp Vault enterprise secrets management platforms Continue Reading

By

• Alex Scroxton, Security Editor

What is the DRY principle?

The DRY (don't repeat yourself) principle, introduced by Andrew Hunt and David Thomas in 'The Pragmatic Programmer,' promotes the idea that every piece of knowledge should have a single, unambiguous, authoritative representation within a system. Continue Reading

By

• Katie Terrell Hanna
• Laura Fitzgibbons

Proliferation of on-premise GenAI platforms is widening security risks

Research finds increased adoption of unsanctioned generative artificial intelligence platforms is magnifying risk and causing a headache for security teams Continue Reading

By

• Alex Scroxton, Security Editor

Apple pushes almost 30 security fixes in mobile update

Apple pushes what will likely be the last major security update to its current iPhone and iPad operating systems, fixing 29 vulnerabilities in its mobile ecosystem Continue Reading

By

• Alex Scroxton, Security Editor

AI-enabled security pushes down breach costs for UK organisations

Organisations that are incorporating AI and automation into their cyber security practice are seeing improved outcomes when incidents occur, according to an IBM study Continue Reading

By