Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What the Tea App Breach Reveals About Mobile Security in 2025

In July 2025, Tea Dating Advice—an app designed to help women vet dating partners—was thrust into the spotlight after a catastrophic data breach. International publications, including BBC, NPR, and The New York Times, reported that over 72,000 user images and 1.1 million private messages were leaked, exposing deeply sensitive information about more than 1.6 million users. The breach affected users who joined before February 2024 due to a failure to migrate legacy data to secure storage.

Inside the Weebly Phishing Campaign: A Sophisticated Threat to Financial Institutions

A recent investigation by BlueVoyant’s threat analysts has uncovered a sophisticated phishing campaign exploiting the Weebly.com platform to create fraudulent websites targeting small to mid-sized banks and financial institutions across the United States. This campaign stands out for its widespread scale and diffusion. Over the past few months, BlueVoyant has identified hundreds of phishing websites targeting more than 200 American banks and financial institutions.

Mend & Cursor: Revolutionizing AI-Generated Code Security | Mend.io

Discover how AI is transforming software development with tools like Cursor IDE and Mend.io. In this video, Alex explains how Cursor’s AI First Code Editor simplifies complex tasks, enabling both experienced and new developers to build sophisticated applications faster than ever. Mend.io takes this transformation a step further by seamlessly integrating SAST and SCA directly into the Cursor IDE. This powerful combination ensures that AI-generated code is secure from the moment it’s written, with Mend.io’s Igenic performing rapid scans without slowing down the development process.

The Key to Building Security Programs That Truly Scale #developer #appsec

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Veracode Risk Manager: Unify, Prioritize, and Remediate Application Security Risks with ASPM

Drowning in a sea of application security alerts? Veracode Risk Manager is your solution. In today's fast-paced development environment, traditional AppSec tools can't keep up, leading to security debt and increased risk. Veracode Risk Manager cuts through the noise, providing a single, unified view of your entire application security posture. Our AI-powered engine aggregates and analyzes data from all your development, cloud, and security tools, providing an industry-leading 60:1 noise reduction. This means your teams can finally focus on the risks that truly matter.

The ultimate security questionnaire guide for vendors: Simplify compliance & build trust

In this article If you’re like 98% of organizations, you have at least one vendor that’s had a breach in the last two years. Although this doesn’t necessarily mean affiliated organizations were affected by the breaches, it does emphasize the extensive range and proximity of potential exposure to indirect risks. Vendors must develop a deep understanding of security questionnaires and implement best practices.