Application Security
2023 OWASP Top-10 Series: API9:2023 Improper Inventory Management
Welcome to the 10th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. This post will focus on API9:2023 Improper ...
Signal Intros Quantum-Resistant Encryption for App
The developers of the Signal messaging app are strengthening the app’s central encryption capabilities for the upcoming post-quantum era. Signal is upgrading the Signal Protocol – the cryptographic specifications behind the end-to-end ...
DoubleQlik: Bypassing the Fix for CVE-2023-41265 to Achieve Unauthenticated Remote Code Execution
Overview On August 29th, 2023, Qlik issued a patch for two vulnerabilities we identified in Qlik Sense Enterprise, CVE-2023-41265 and CVE-2023-41266. These vulnerabilities allowed for unauthenticated remote code execution via path traversal ...
SAST vs. DAST: Enhancing application security
As the threat landscape continues to evolve, organizations face a formidable challenge: ensure the security of their software applications ...
GitLab Releases Urgent Security Updates for Critical Flaw
GitLab is rolling out security patches that fix a bug that could let attackers leverage scheduled security scan policies to run pipelines as an arbitrary user. Bad actors exploiting the flaw could ...
Gaming, Financial Services Apps Under Attack
Malicious actors are targeting gaming and FinServ apps developed for both Apple iOS and the Android platform, according to Digital.ai's latest Threat Analytics Report ...
Ghostwriter v4: 2FA, RBAC, and Logging, Oh My!
Ghostwriter v4 is officially here! Technically, it’s been available as a release candidate for a while, but we have arrived at its final release. This major release focuses on something important to ...
Dig Security Adds Support for SaaS Apps to DSPM Platform
Dig Security added support for SaaS applications to its platform for protecting data stored in cloud computing environments ...
ServiceNow Strengthens Cybersecurity Controls
ServiceNow's Vancouver release of its Now software-as-a-service (SaaS) platform adds a range of cybersecurity capabilities ...
Getting Started With Two-Factor Authentication (2FA)
Without two-factor authentication, you're putting your organization at risk. Here's how to get started implementing 2FA ...
