Application security

Introduction to Kubernetes security

Get an overview of Kubernetes security, including Kubernetes architecture, control plane components, worker node components and more.

Key findings from ESG’s Modern Application Development Security report

A deep dive into security issues In August 2020, the Enterprise Strategy Group (ESG) published its report, “Modern Application Development Security.” ESG is

Microsoft’s Project OneFuzz Framework with Azure: Overview and concerns

In September 2020, the Microsoft Security Team announced that Microsoft’s new open-source fuzzing platform, Project OneFuzz, was available as an open-source

Software maturity models for AppSec initiatives

Introduction Software is on the front lines of security: a 2019 report from GitLab found that almost half of respondents deploy software on-demand or multip

Best free and open source SQL injection tools [updated 2021]

Best free and open source SQL injection tools [updated 2021]

SQL injection is one of the most common attacks against web applications. This is used against websites which use SQL to query data from the database server.

Pysa 101: Overview of Facebook’s open-source Python code analysis tool

Pysa 101: Overview of Facebook’s open-source Python code analysis tool

Introduction to Pyre and Pysa Pyre is a performance type-checker created by Facebook for the Python programming language. It is designed to rapidly identify

Improving web application security with purple teams

What is the purple team in cyber security? The cybersecurity industry - and especially the area of security assessments - is very fond of color-based terms.

Open-source application security flaws: What you should know and how to spot them

Open-source application security flaws: What you should know and how to spot them

Introduction Open-source software helped to revolutionize the way that applications are built by professionals and enthusiasts alike. Being able to borrow a

Android app security: Over 12,000 popular Android apps contain undocumented backdoors

Android app security: Over 12,000 popular Android apps contain undocumented backdoors

Many Android apps contain hidden secrets When many people think about malware and other malicious or suspicious software, they focus on computers. It is comm

13 common web app vulnerabilities not included in the OWASP Top 10

13 common web app vulnerabilities not included in the OWASP Top 10

Introduction The OWASP Top 10, a widely referenced document that lists the key threats to modern web applications, hasn’t changed much in the past few years.