If Video Killed the Radio, Will Malvertising Kill Your Website?
Malvertising isn't just a nuisance for internet users — it puts businesses and their customers at risk and compromises the integrity of the online advertising ecosystem.
94 Percent of Web Applications Suffer From High-Severity Vulnerabilities
A recent report revealed that 94 percent of all web applications suffer from high-severity software vulnerabilities, 85 percent of which are exploitable.
100 Percent of Web Applications Vulnerable to Attack Despite Big Spending on Global Security Services
One-hundred percent of web applications are vulnerable to attack, despite analyst predictions that global security services spending will reach $96 billion in 2018.
An Introduction to HTTP Response Headers for Security
HTTP response headers aim to help protect web applications from cross-site scripting (XSS), man-in-the-middle (MitM) attacks, clickjacking, cross-site request forgery and other threat vectors.
Slow and Steady Wins the Application Security Testing Race
The Tortoise and the Hare are challenged to develop an app, and the winner must consider both application security and functionality. Who will prevail?
Don’t Sweep Web Application Penetration Testing Under the Rug
Although it is one of the most crucial components of any security strategy, web application penetration testing is often neglected.
Integrating the IoT Into Your Application Security Program
Is your network prepared to handle the IoT? Start by focusing on your application security program, since many IoT threats lurk in the application layer.
WhatsApp Web Client Hit With Business Card Blunder
The WhatsApp Web client is now vulnerable to a vCard-led attack, according to researchers. How can users patch the vulnerability and avoid the issue?
Killer Music: Hackers Exploit Media Player Vulnerabilities
IBM research has found that cyber criminals are exploiting media player vulnerabilities to infect users' workstations with malware.
Think SQLi is Old News? Attackers Don’t!
What can we do to help developers learn about preventing incidence of SQLi vulns in their production applications? And what can we do about SQLi in legacy web applications or newer apps that were developed with SQLi vulnerabilities? This is a weekly...