Application Security articles

AppSec fundamentals, vulnerability management, secure coding, and testing strategies to help teams build and ship secure software at scale.

aHViPTcyNTE0JmNtZD1pdGVtZWRpdG9yaW1hZ2UmZmlsZW5hbWU9aXRlbWVkaXRvcmltYWdlXzVjMzcwMDllNzdiNmIuanBnJnZlcnNpb249MDAwMCZzaWc9OWE4NjZhYzM3ZWY1ODI5MWZiZjhkMWE3ZmVhYTM2OTc

Top 10 New Open Source Security Vulnerabilities in 2018

Discover the top 10 new open source security vulnerabilities in 2018, including Linux Kernel, Drupal, AngularJS, and more.

Read More
aHViPTcyNTE0JmNtZD1pdGVtZWRpdG9yaW1hZ2UmZmlsZW5hbWU9aXRlbWVkaXRvcmltYWdlXzVjMzMyYzhjYjQyZmQuanBnJnZlcnNpb249MDAwMCZzaWc9MTBhNThjZjY0OTk4M2RkNGM3YmNkNjZkYjM0YmE2ZTA

Sometimes A Vulnerability Isn’t So Vulnerable

Discover how sometimes a vulnerability isn’t as big of a threat as you may think. Learn about effective vs ineffective vulnerabilities.

Read More
aHViPTcyNTE0JmNtZD1pdGVtZWRpdG9yaW1hZ2UmZmlsZW5hbWU9aXRlbWVkaXRvcmltYWdlXzVjMWY3ZTZmYjhjYmUuanBnJnZlcnNpb249MDAwMCZzaWc9MjhkMTk0ZjNhZjY3OTJmZjNiMTg3OGU3ODVmZWJkMWU

Who’s been naughty or nice in the Open Source-verse over 2018?

Reflect on the naughty and nice in the Open Source-verse in 2018 with the top vulnerabilities and cool projects.

Read More

The National Vulnerability Database Explained

Learn about the National Vulnerability Database (NVD), the largest database of known vulnerabilities. Find out how it differs from the CVE.

Read More

Equifax Breach Year in Review: Vulnerabilities in Apache Struts Still Going Strong

Equifax breach review reveals vulnerabilities in Apache Struts are still unpatched by many companies. Learn why remediation is crucial.

Read More
itemeditorimage 5b7538bb4eb42

Zombies: Top 5 Open Source Vulnerabilities That Refuse To Die

Discover the top 5 open source vulnerabilities that still haunt developers. Learn how to protect your applications from security threats.

Read More
aHViPTcyNTE0JmNtZD1pdGVtZWRpdG9yaW1hZ2UmZmlsZW5hbWU9aXRlbWVkaXRvcmltYWdlXzViNDM1YjNmYmJmNjAuanBnJnZlcnNpb249MDAwMCZzaWc9ZGYwMmZmYjZhNDg2YzFkNGQ1NmJkNmQ0NTUzMmQzZmI

6 Open Source Software Security Concerns Dispelled

Discover and dispel 6 common concerns around using open source software in applications. Learn how to mitigate risks and harness its power.

Read More

CVSS v3 Is Still Missing The Target For Prioritization

Learn about the flaws in the Common Vulnerability Scoring System and how it may impact security professionals.

Read More
Vulnerability Disclosure 1

Vulnerability Disclosure: Find the Bugs in Your Code Before the Hackers Do

Learn about vulnerability disclosure and how to find bugs in your code before hackers do.

Read More
owasp a9 1

You Can’t Ignore Using Components With Known Vulnerabilities

Learn why using components with known vulnerabilities is a major issue in application security and how to address it with OWASP guidelines.

Read More
aHViPTcyNTE0JmNtZD1pdGVtZWRpdG9yaW1hZ2UmZmlsZW5hbWU9aXRlbWVkaXRvcmltYWdlXzViMjI1NGM5OWY5ZWEuanBnJnZlcnNpb249MDAwMCZzaWc9NThhZGZjNmEwODc1ZDVjMWM3ZmE3OGQ3MGQyODc4Y2M

Known Open Source Vulnerabilities in Reusable Software Components: a Golden Goose For Hackers

Discover the risks of known open source vulnerabilities in reusable software components and how hackers exploit them.

Read More

Top 3 Challenges to Fintech in a Post-Equifax World

Discover the top 3 challenges for fintech in the post-Equifax era: stringent regulations, securing customer trust, and application security.

Read More
aHViPTcyNTE0JmNtZD1pdGVtZWRpdG9yaW1hZ2UmZmlsZW5hbWU9aXRlbWVkaXRvcmltYWdlXzVhZDVlMTg5NGFiZWYuZ2lmJnZlcnNpb249MDAwMCZzaWc9ZjE1MWI3ZTEzODUwM2ViZDYyM2MzMzc3ZjFiNTFhOWE

The Equifax Hack: 6 Months Later, What Did We Learn?

The Equifax breach was the largest single breach in history, with 145.5 million records being uncovered. Today, 6 months later, we look at the industry and see what we have learned from Equifax.

Read More
top 5 of the month march2018

Top 5 New Open Source Vulnerabilities in March 2018

The top 5 new open source vulnerabilities in March 2018, including Drupal, Microsoft ChakraCore, Jackson-databind, Moment.js, and Marked.js.

Read More
The True Story Behind the Equifax Data Breach 1

The Equifax Breach: Who’s to Blame?

Learn about the Equifax data breach, who’s to blame, and the importance of staying on top of open source libraries and vulnerabilities.

Read More
serverless security

What Risks Does Serverless Computing Pose to Your Application Security?

Explore the risks of serverless computing on application security. Learn how to navigate security concerns in the digital world.

Read More