Application Security articles

AppSec fundamentals, vulnerability management, secure coding, and testing strategies to help teams build and ship secure software at scale.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - Blog critical CVE 2025 55182

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications

Tom Abai Dec 4, 2025

Malicious Packages

Discover a critical security flaw that enables remote code execution in React Server Components.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - Open Source Security post

Ultimate Guide to Open Source Security: Risks, Attacks & Defenses

Tiffany Jennings Oct 28, 2025

Open Source Security

Explore top risks and proven open source security strategies.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - Container Security blog

Building Strong Container Security for Modern Applications

Tiffany Jennings Oct 16, 2025

Container & Cloud Security

Discover how to protect containerized applications.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - Code Scanning

Code Scanning: Why, How & the Role of Scanning in AI Security

Tiffany Jennings Oct 15, 2025

SAST

Explore code scanning benefits, tools, and best practices.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - SAST Tools for DevSecOps

Top 7 SAST tools for DevSecOps Teams in 2025

Tiffany Jennings Oct 3, 2025

SAST

Discover the top SAST tools empowering DevSecOps teams in 2025.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - Blog What is Application Security Posture Management ASPM

What Is Application Security Posture Management (ASPM)?

Tiffany Jennings Jul 11, 2025

Application Security

Discover how ASPM improves risk visibility, reduces alert fatigue, and accelerates secure development.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - Blog image What is SCA @2x

What is Software Composition Analysis (SCA)?

Tiffany Jennings Jul 8, 2025

Software Composition Analysis

Learn about Software Composition Analysis (SCA) and how it helps manage open source code to reduce security risks.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - Blog image Kubernetes Security Risks and Critical Best Practices@2x

Kubernetes Security Risks and Critical Best Practices

Tiffany Jennings Jun 23, 2025

Container & Cloud Security

Learn about Kubernetes Security Best Practices, a crucial aspect of managing containerized workflows at scale.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - Application Security — The Complete Guide

Security Testing in 2025: Testing Apps, AI, Cloud Native, and More

Tiffany Jennings Jun 9, 2025

Application Security Testing

Learn about key trends in modern security and the OWASP Top 10.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - The 2021 OWASP Top 10 post

What Are OWASP Top 10 Threats & When Will the Top 10 Be Updated?

Tiffany Jennings May 29, 2025

Open Source Security

Stay updated on the latest in application security with the OWASP Top 10 vulnerabilities.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - AST Security Scanning blog post

Application Security Testing: Security Scanning and Runtime Protection Tools

Tiffany Jennings May 20, 2025

Application Security Testing

Learn about the differences between security scanning and runtime protection in application security testing. Explore tools and tech.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - Blog OWASP Dependency Check

OWASP Dependency Check: How Does It Work?

Tiffany Jennings May 14, 2025

Software Composition Analysis

Learn how OWASP Dependency Check helps secure open source components.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - Blog image Top Ten Tips to Choose a Great SAST Tool@2x

Top Ten Tips to Choose a Great SAST Tool

Jeff Martin, Tiffany Jennings May 7, 2025

SAST

The top ten tips for choosing a SAST tool for application security.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - Dynamic Application Security Testing DAST Basics 1

Dynamic Application Security Testing: DAST Basics

Tiffany Jennings May 5, 2025

Application Security Testing

Learn about dynamic application security testing (DAST).

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - The Top 11 Web Vulnerability Scanners

The Top 11 Web Vulnerability Scanners

Chris Lindsey, Tiffany Jennings Mar 1, 2025

Application Security Testing

Discover the top 11 web vulnerability scanners and learn why they are essential for protecting your web applications from hackers.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications - cvss3.1 vs cvss4 blog

CVSS 3.1 vs CVSS 4.0: A Look at the Data

Aurora Starita Jan 13, 2025

Application Security

CVSS base scores are up in the latest version of the scoring system. What does that mean for AppSec practitioners?

1 2 3 4 5 6 … 14