Improving web application security with purple teams
The cybersecurity industry - and especially the area of security assessments - is very fond of color-based terms. Organizations can undergo whitebox or...
Application security
Open-source application security flaws: What you should know and how to spot them
Open-source software helped to revolutionize the way that applications are built by professionals and enthusiasts alike. Being able to borrow a non-proprietary...
Android app security: Over 12,000 popular Android apps contain undocumented backdoors
When many people think about malware and other malicious or suspicious software, they focus on computers. It is common best practice to have an antivirus program...
13 common web app vulnerabilities not included in the OWASP Top 10
The OWASP Top 10, a widely referenced document that lists the key threats to modern web applications, hasn’t changed much in the past few years. Broken access...
Fuzzing, security testing and tips for a career in AppSec
In this episode of Infosec’s Cyber Work Podcast, host Chris Sienko welcomes back previous guest Dr. Jared DeMott. In the previous episode, the topic was all...
14 best open-source web application vulnerability scanners [updated for 2020]
In the past, many popular websites have been hacked. Hackers are active and always trying to hack websites and leak data. This is why security testing of web...
6 ways to address the OWASP top 10 vulnerabilities
The OWASP top 10 list of vulnerabilities has long been the source of data that information security professionals trust with making critical security decisions....
Ways to protect your mobile applications against hacking
The increase in the use of mobile applications comes with an increase in hackers targeting them. A Symantec survey found that 1 in 36 devices had high-risk...
Introduction to the OWASP API Top Ten
The Open Web Application Security Project (OWASP) is best known for its list of the top ten web application vulnerabilities. This list is updated every few...
What is NoSQL injection?
Injection attacks are considered some of the most dangerous types of vulnerabilities in existence. According to the OWASP Top Ten List of web application vulnerabilities,...