Original Post: Launching the PortSwigginar | Blog The article is a recap of a recent PortSwigginar hosted by Adam Armitt on June 9, 2022, discussing the Burp Suite Enterprise Edition. It covers new features, integration… Read More »Announcing Our New Webinar Series: PortSwigginar | Blog Recap
Original Post: New Data Reveals Top Drivers of Secure Software in Financial Services… The financial services sector globally is under heightened security regulations, such as the US Executive Order on Cybersecurity, the EU’s NIS2 Directive,… Read More »Key Drivers of Secure Software in Financial Services Unveiled by New Data
Original Post: Unveiling the Sneaky CSV Injection: VDP vs. Objective-Based Offensive Tactics The article, titled “Unveiling the Sneaky CSV Injection: VDP vs. Objective-Based Offensive Tactics,” delves into the realm of cybersecurity by focusing on identifying… Read More »Exploring CSV Injection: VDP Insights vs. Targeted Offensive Strategies
Original Post: How we resolved the ‘HTTP request failed: timeout’ issue in OCaml Hannes Mehnert, a programmer at Robur, discusses the migration of Semgrep OSS from Python to OCaml to alleviate maintenance and optimization issues.… Read More »Resolving HTTP Timeout Issues in OCaml
Original Post: How to see the impact installing BApps might have on Burp Suite | Blog Matt Atkinson’s article, published on June 16, 2022, discusses the Burp Suite’s BApp Store and its new ‘Estimated system… Read More »Understanding the Impact of BApp Installations on Burp Suite: A Comprehensive Guide
Original Post: DevSecOps Best Practices: Leveraging Veracode DAST Essentials The content discusses DevSecOps, a modern approach to software development that integrates security as a shared responsibility throughout the entire software development lifecycle. This model extends… Read More »Mastering Secure DevOps: Key Takeaways for Using Veracode DAST
Original Post: BBB #1 — Back Hacking. G’day! I’m Jakob, an Application… | by Jakob Pennington | Jun, 2024 Jakob, an Application Security consultant from Australia, shares his return to bug bounty hunting on his… Read More »Unlocking the Secrets of Back Hacking: Insights from Jakob Pennington
Original Post: Learnings from three months of Semgrep Assistant Three months ago, Semgrep launched the private beta of Semgrep Assistant, an AI tool designed to aid in cybersecurity by automating the review of security alerts.… Read More »Key Takeaways from Three Months with Semgrep Assistant
Original Post: Finding client-side prototype pollution with DOM Invader | Blog The article details the enhancements made to DOM Invader, a tool developed by PortSwigger, for detecting client-side prototype pollution (CSPP) vulnerabilities. The new version… Read More »Discovering Client-Side Prototype Pollution Using DOM Invader: A Comprehensive Guide
Original Post: Top 5 Open Source Security Risks IT Leaders Must Know The article discusses security risks associated with open source software (OSS) that technology leaders need to address, given the high prevalence of security… Read More »Essential Open Source Security Risks Every IT Leader Should Address
