Scroll down for all the latest web application security news and information.
Subscribe to our weekly newsletter for the latest in industry news, expert insights, dedicated information security content and online events.
Sign Up
Poisoned JSON feed let attackers backdoor WordPress sites without changing any plugin files
Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database
The new version of Chrome, 151, comes with 370 vulnerability patches, including for seven critical flaws
New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environments
A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials
Zscaler found sites hiding prompt-injection text to manipulate AI agents into crypto payments
