Application Security
Get your weekly updates on cyber law and cybercrime investigation by email or follow us on LinkedIn.
Read also: Okta’s source code stolen after GitHub hack, Android apps are leaking API keys, and more.
Server-Side Request Forgery is #10 in the current OWASP Top Ten Most Critical Web Application Security Risks.
Software and Data Integrity Failures is #8 in the current OWASP Top Ten Most Critical Web Application Security Risks.
Insecure design is #4 in the current OWASP top Ten Most Critical Web Application Security Risks.
Security Logging and Monitoring Failures is #9 in the current OWASP top Ten Most Critical Web Application Security Risks.
If you know about a vulnerability, you can be certain that adversaries also know about it – and are working to exploit it. It sounds like a no-brainer; but using components with ...
Insecure Deserialization is #8 in the current OWASP Top Ten Most Critical Web Application Security Risks. It is difficult to exploit, but successful attacks can lead to remote ...
Cross-site scripting (XSS) is #7 in the current OWASP Top Ten Most Critical Web Application Security Risks – and the second most prevalent web application vulnerability. It is ...
Security Misconfiguration is #5 in the current OWASP Top Ten Most Critical Web Application Security Risks. Misconfiguration can include both errors in the installation of ...
XML External Entities (XXE or XML injection) is #4 in the current OWASP Top Ten Most Critical Web Application Security Risks.
User authentication – the process of ensuring only authorized users have access to controlled data and functionality – is the fundamental cornerstone of web and application ...
OWASP A03 (Injection) covers diversified injection vulnerabilities and security flaws including SQL and NoSQL injections, OS command injection and LDAP query manipulations.
