Scroll down for all the latest web application security news and information.
Subscribe to our weekly newsletter for the latest in industry news, expert insights, dedicated information security content and online events.
Fortra researchers have discovered a new SEO poisoning operation known as “HaxorSEO”
VulnCheck analysts found that vulnerabilities exploited before being publicly disclosed rose from 23.6% in 2024 to 28.96% in 2025
A new service, the Global Cybersecurity Vulnerability Enumeration (GCVE), offers an alternative to the US-led CVE
The GoBruteforcer botnet has been observed targeting exposed Linux servers on services like FTP and MySQL
A new Python-based malware called VVS stealer has been identified, targeting Discord users with stealthy techniques to steal data
A novel attack technique dubbed ”Lies-in-the-Loop” (LITL) has been observed manipulating human approval prompts in agentic AI systems