Insecure deserialization is a vulnerability that is part of many attack chains against web applications and APIs. A vul…

Decades ago, a young boy sat in the attic of his home, just at the edge of the Empire State Building’s radio shadow. Th…

Note that, strictly speaking, dynamic application security testing refers to any kind of security testing that’s perfo…

The drones were everywhere now, behaving more strangely every day. Most people didn’t see or didn’t care that these hel…

What are HTTP security headers? HTTP security headers are those HTTP headers that are related specifically to security…

Useful as they are, OWASP Top 10 lists are not renowned for being clear and readable, and definitely not for being fun.…

If you follow IT and cybersecurity news, you’ll be familiar with mentions of quantum computing, usually followed by som…

The Digital Operational Resilience Act (DORA) is a European cybersecurity framework that was enacted in December 2022 …

Comprehensive API discovery now available in a single web application and API security solution AUSTIN, Texas—(July 16…

XSS filter evasion covers many hundreds of methods that attackers can use to bypass cross-site scripting (XSS) filter…