Application security

2017 OWASP A10 update: Insufficient logging & monitoring

2017 OWASP A10 update: Insufficient logging & monitoring

Many critics of the Open Web Application Security Project (OWASP) Top Ten list view insufficient logging and monitoring, new on the list in 2017, as more of

2017 OWASP A9 Update: Using Components With Known Vulnerabilities

2017 OWASP A9 Update: Using Components With Known Vulnerabilities

Introduction It does not take a rocket scientist to understand using components with known vulnerabilities is a very poor choice. While solving this issue ma

2017 OWASP A6 Update: Security Misconfiguration

2017 OWASP A6 Update: Security Misconfiguration

The Open Web Application Security Project (OWASP) is a volunteer group whose goal is to build a more robust Internet. One of their flagship publications is t

2017 OWASP A4 Update: XML External Entities (XXE)

2017 OWASP A4 Update: XML External Entities (XXE)

Extensible Markup Language External Entities (XXE) is currently ranked fourth on OWASP’s 2017 Top Ten list of application security risks. Extensible Markup L

OWASP top 10 application security risks: 2013 vs 2017

OWASP top 10 application security risks: 2013 vs 2017

The Open Web Application Security Project (OWASP) is a global, nonprofit organization aiming to improve the security of applications and raise awareness of s

Introduction to OWASP ZAP for web application security assessments

Introduction to OWASP ZAP for web application security assessments

The OWASP Zed Attack Proxy (ZAP) is one of the world’s most popular web application security testing tools. It is made available for free as an open source p

Windows Subsystem for Linux

Windows Subsystem for Linux

Microsoft has started developing cross-platform integrations into Windows 10. The Windows Subsystem for Linux (WSL) is an example of one these integrations t

How to identify and mitigate XXE vulnerabilities

How to identify and mitigate XXE vulnerabilities

Security vulnerabilities that are created through the serialization of sensitive data are well known, yet some developers are still falling into this trap. W

Avoid Disaster with Monitoring and Logging

Avoid Disaster with Monitoring and Logging

If you have ever been at the epicenter of a security breach relating to online web apps and services, you know just how important your system logs can be as

10 steps to avoid insecure deserialization

10 steps to avoid insecure deserialization

You might think that your applications are secure and safe from prying eyes, but hackers are using ever more sophisticated methods to capture your user data