Original Post: Understanding Authentication, Authorization, and Accounting (AAA) in Modern Systems | by Sushant Kumar | Sep, 2024 The blog post elaborates on the importance of securing systems in today’s digital landscape through the framework… Read More »Comprehensive Guide to AAA: Authentication, Authorization, and Accounting in Modern Systems
Original Post: CYBER SECURITY PROJECT PART 6 The content is a brief announcement or excerpt for a part of a Cyber Security project series, specifically Part 6, authored by Karthick. It includes a link that… Read More »Advancing Cyber Defense Strategies: Insights from Cyber Security Project Part 6
Original Post: The Weak Link in Two-Factor Authentication: Exploiting Reusable OTPs | by Tusharpuri | Sep, 2024 The article describes a penetration tester’s recent experience discovering a significant security flaw in an application’s OTP (One-Time… Read More »Critical Vulnerability Exposed: The Risk of Reusable OTPs in Two-Factor Authentication
Original Post: CSV injection: how risky is it. In the last few months, I tested… | by Pranav Vedma | Sep, 2024 The content discusses the CSV injection vulnerability, which occurs when attackers inject malicious… Read More »Evaluating the Dangers of CSV Injection: Recent Findings by Pranav Vedma | Sep, 2024
Original Post: Creating Burp Suite Extension using Montoya API: Basic Request modification | by PSDooM | Sep, 2024 The content discusses resources and steps for writing custom Burp Suite extensions to implement basic request modification… Read More »Step-by-Step Guide to Modifying Requests in Burp Suite with Montoya API
Original Post: Announcing: AI-assisted remediation guidance on every PR Semgrep Assistant has introduced step-by-step remediation guidance for nearly every true positive finding, reducing median-time-to-resolution by 15%, or 20 minutes. This feature helps developers fix security… Read More »Introducing AI-Powered Remediation Guidance for Every Pull Request
Original Post: Let’s create a SAST … sort of.. In simple words, this article explored… | by Mauricio Giraldo | Sep, 2024 The article discusses the implementation of Static Application Security Testing (SAST) through a… Read More »Exploring Simplified Static Application Security Testing (SAST) – Insights by Mauricio Giraldo
Original Post: Exploit exploitability: prioritize supply chain findings with EPSS Semgrep Supply Chain has integrated FIRST’s Exploit Prediction Scoring System (EPSS), providing daily updated scores that predict the likelihood of a vulnerability being exploited within… Read More »Optimizing Supply Chain Security: Prioritizing Threats with Exploit Prediction Scoring System (EPSS)
Original Post: My Journey To CTO for Imperva App Sec David Holmes has announced his new role as CTO for Application Security at Imperva. He shares his background, detailing his self-taught programming journey starting at… Read More »From Aspiring Coder to CTO: My Imperva App Sec Journey
Original Post: Master Mobile Traffic Hacking: Intercept Android App Data with Burp Suite | by WillFromSwiss | Sep, 2024 The article addresses common misconceptions in cybersecurity regarding the security of mobile applications, particularly Android apps.… Read More »Expert Guide to Hacking Mobile Traffic: Unlocking Android App Data with Burp Suite by WillFromSwiss
