Original Post: Comprehensive Application Security Testing with HCL AppScan | by HCLSoftware | May, 2024 Application security testing involves using various tools and methodologies to detect and address vulnerabilities in an application’s codebase. It has… Read More »Maximizing Security with HCL AppScan: A Deep Dive into Application Security Testing
Original Post: 10x your AppSec program with Semgrep Assistant Semgrep has launched Semgrep Assistant as GA, a feature that uses AI to amplify the impact of security engineers and empower developers. The AI capabilities focus… Read More »Boost Your AppSec Program with Semgrep Assistant: A Gamechanger for Security
Original Post: Defcon 23: Let’s End Clickjacking The content discusses a presentation at Defcon 23 about ending clickjacking by design. The speaker suggests using pixel scraping to detect and prevent clickjacking attacks, and introduces a… Read More »Ending Clickjacking: Highlights from Defcon 23
Original Post: Understanding the OWASP API Security Top 10: Why BOLA is the Number One Risk for APIs The article emphasizes the importance of understanding and addressing vulnerabilities in cybersecurity, particularly in relation to APIs.… Read More »The Top API Security Risk: Broken Object-Level Authorization
Original Post: Supporting Sprocket Security’s offensive security testing with BChecks, from Burp Suite | Blog Sprocket Security, a US-based organization, provides continuous penetration testing services to customers using Burp Suite tools and recently began experimenting… Read More »Enhancing Security Testing with BChecks in Burp Suite: A Complete Guide
Original Post: Prioritizing Software Security in the 2024 Digital… The White House Technical Report released in February 2024 emphasizes the importance of prioritizing software security due to the increasing prevalence of software vulnerabilities and sophisticated… Read More »The Importance of Software Security in the 2024 Digital Landscape
Original Post: Approaching a Secure Code Review. While trying to understand how to… | by Mahesh Chandrappa | May, 2024 Secure code review is an important part of the software development lifecycle to identify vulnerabilities… Read More »Mastering Secure Code Review: Best Practices and Tips
Original Post: How Mulesoft fosters a developer-first, shift-left culture with Snyk Many organizations are still facing challenges in implementing the concept of shifting security left in their development processes. This involves giving development teams ownership… Read More »Empowering Developers with Secure Software Development Practices: Mulesoft’s Partnership with Snyk
Original Post: Never write an invalid Semgrep rule again Semgrep is a highly-customizable code scanning tool that allows users to write rules in YAML without needing to learn a vendor-specific DSL. However, writing rules in… Read More »Mastering Semgrep: How to Create Foolproof Rules Every Time
Original Post: A Skeleton Key of Unknown Strength The glibc DNS bug (CVE-2015-7547) is a critical vulnerability that affects a widely used library and protocol. It allows attackers to take over systems running Linux, potentially… Read More »The Mystery of the Powerful Skeleton Key
