Original Post: The Need for a Dependency Security Discipline Within AppSec | by Dana Crane | Jun, 2024 The article discusses the differences between Application Security (AppSec) and Dependency Security (DepSec) in the context of… Read More »Establishing Dependency Security: A Critical Component for Modern AppSec | Dana Crane | Jun, 2024
Original Post: Demystifying Taint Mode The blog post explains Semgrep’s taint mode, which is used to analyze code vulnerabilities by tracking the flow of potentially unsafe data across variables. Unlike search mode, which looks for… Read More »Understanding Taint Mode: Simplifying Security in Your Code
Original Post: BChecks: Houston, we have a solution! | Blog The article, authored by Ollie Whitehouse and published on June 29, 2023, announces a new feature in Burp Suite Professional called “BChecks.” This feature introduces… Read More »Introducing BChecks: The Game-Changer Houston Needed!
Original Post: What It Is and How to Know If You’re… The Polyfill supply chain attack was disclosed by Sansec on June 25, 2024. The attack involved malicious code injected into the polyfill.js library distributed… Read More »Understanding and Identifying If You’re…
Original Post: A guide to build an Application Security Program The article discusses the challenges and best practices for establishing a mature Application Security (AppSec) program in organizations, drawing from over a decade of consulting… Read More »Steps to Create a Comprehensive Application Security Program
Original Post: Announcing Semgrep's experimental support of Swift Semgrep, a static analysis tool designed to support every programming language, has announced that Swift has achieved experimental status. Semgrep’s Swift parse rate is 94%, surpassing the… Read More »Exciting News: Semgrep Now Experimentally Supports Swift!
Original Post: Burp Suite Enterprise Edition spring update 2024 | Blog The article, authored by Amelia Coen on May 16, 2024, announces several significant updates and new features for Burp Suite Enterprise Edition, focusing on… Read More »Exciting New Features in Burp Suite Enterprise Edition: Spring 2024 Update Highlights
Original Post: Introducing Postman Collection Support for API Security Testing In the digital landscape, APIs are crucial for innovation but are also targets for hackers due to their public availability and the web data they… Read More »Enhance Your API Security with New Postman Collection Support
Original Post: Setup Custom AWS WAF (Web Application Firewall) Rules. | by Ravi Channavajhala | Jun, 2024 This article explores advanced cybersecurity strategies, focusing on protection against sophisticated Layer 7 (Application Layer) attacks on AWS-hosted… Read More »Mastering AWS WAF: A Step-by-Step Guide to Setting Up Custom Rules by Ravi Channavajhala
Original Post: How to secure a REST API? The content outlines best practices for securing REST APIs, highlighting common security issues and providing strategies to mitigate them: Key Areas Covered: Introduction to REST APIs: REST… Read More »Essential Strategies for REST API Security: A Comprehensive Guide