Original Post: Frida-JIT-unPacker: An Imperva Contribution to the Security Research Community, Presented at Black Hat Asia 2024 In the dynamic field of cybersecurity, combating malicious bots remains a paramount challenge for web applications. These bots… Read More »Imperva Unveils Frida-JIT-unPacker at Black Hat Asia 2024: Advancing Security Research
Original Post: Part 1- Everything You Need to Know About Browser Security Policies — SOP, CORS. | by vikram naidu | Jun, 2024 CORS, or Cross-Origin Resource Sharing, is a mechanism that permits resource sharing… Read More »Comprehensive Guide to Browser Security: Understanding SOP and CORS (Part 1)
Original Post: Why ASPM is the future of AppSec: Key points from our newest whitepaper The content emphasizes the challenges today’s rapidly advancing software development presents to security teams, exacerbated by AI and increasing software… Read More »Embracing ASPM: Insights from Our Latest Whitepaper on the Future of Application Security
Original Post: Need for speed: static analysis version Semgrep has achieved impressively fast scan times by prioritizing speed through techniques like taint summaries and OCaml-based tree matching. It focuses on syntax, which results in swift… Read More »Revving Up Development: The Role of Static Analysis in Speeding Up Code Quality Assurance
Original Post: PCI DSS 4.0.1: New Clarifications on Client-Side Security – What You Need to Know The blog post from Imperva discusses the clarifications introduced in PCI DSS 4.0.1, focusing on payment pages, forms, and… Read More »Understanding PCI DSS 4.0.1: Essential Client-Side Security Updates Explained
Original Post: Building an AppSec Program: Part 1 of a 4-Part Series on Application Security | by Matthew Keeley | Jun, 2024 The content provides a comprehensive guide on building and managing an effective Application… Read More »Kickstarting Your AppSec Journey: Insights from Part 1 of Matthew Keeley’s Series on Application Security
Original Post: Breaking caches and bypassing Istio RBAC with HTTP response header injection The article discusses the expansion of research into WebSocket-related attacks, branching out from earlier work on WebSocket Hijacking. It introduces novel attack… Read More »Exploiting HTTP Headers to Invalidate Caches and Circumvent Istio RBAC Controls
Original Post: Releasing Semgrep 1.0 The content announces the release of Semgrep 1.0, a significant milestone after nearly three years of development and 123 pre-release versions. Semgrep has proven stable, robust, and widely used, with… Read More »Announcing the Launch of Semgrep 1.0: A New Milestone in Code Analysis!
Original Post: The Journey to Security Perfection | by Thomas Bertling | Jun, 2024 The article discusses the process of achieving the ideal state of product security, a challenging goal due to constantly emerging threats,… Read More »Thomas Bertling Explores Achieving Ultimate Security in New June 2024 Article
Original Post: XML Security in Java This blog post discusses the complexities and vulnerabilities associated with Java XML security, emphasizing the difficulties in parsing XML securely due to the inconsistent availability and effectiveness of security-related… Read More »Ensuring Safe Data Exchanges: XML Security Best Practices in Java