Why React Applications Get Hacked in the Real-World
Explore common security pitfalls in React applications and learn practical strategies to prevent XSS vulnerabilities, insecure API usage, and other real-world hacking risks.
The Next Disruption - Security Beyond the Perimeter and Endpoint
Explore evolving cybersecurity challenges and innovative solutions beyond traditional perimeters, focusing on cloud, containers, and APIs in the context of recent global events.
Damn GraphQL - Attacking and Defending APIs
Explore GraphQL security: attack vectors, defense strategies, and hands-on learning with the Damn Vulnerable GraphQL Application. Gain insights into protecting this emerging API technology.
Prototype Pollution Attacks in NodeJS Applications
Explore prototype pollution attacks in NodeJS, including APIs vulnerable to pollution, potential impacts, and defensive strategies. Learn from real-world examples and security research findings.
API Security - Is it the New Application Attack Surface and How to Secure at Enterprise Scale
Explore API security challenges, threats, and enterprise-scale solutions. Learn about modern attack surfaces, recent breaches, and effective strategies for protecting sensitive data in API-driven architectures.
Securing Modern API and Microservice Based Applications by Design
Learn to secure modern API and microservices architectures with expert insights on key concerns, architectural patterns, and actionable solutions for robust application security.
Preventing Mobile App and API Abuse
Explore mobile app and API security threats, countermeasures, and defense-in-depth techniques through a courier service's evolving security approach against malicious attacks.
A Tour of API Underprotection
Explore API security threats, protection techniques, and advanced strategies. Learn about OAuth2, static API keys, mobile security, certificate pinning, and emerging technologies to strengthen your API security posture.
Common REST API Security Pitfalls
Explore common REST API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security for robust, future-proof applications.
An Overview of API Underprotection
Explores API security challenges, threats, and emerging technologies. Covers OAuth2, API keys, mobile app security, TLS pinning, and advanced techniques like app hardening and software attestation.
Testing and Hacking APIs
Learn techniques for testing and exploiting API vulnerabilities, including understanding implementation, detecting weak points, and conducting effective penetration tests on modern applications.
Common API Security Pitfalls
Explore common API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security, focusing on authentication, encryption, and input validation.
OWASP Standard Classification - API Security Top 10 - A Beginner's Guide to Mitigation
Learn to mitigate API security risks using OWASP's Top 10 classification. Explore vulnerabilities, solutions, and strategies for implementing robust API security throughout the entire lifecycle.
API-Induced SSRF - How Apple Pay Scattered Vulnerabilities Across the Web
Explore API security vulnerabilities, focusing on Apple Pay's impact, with live demos and actionable strategies for improving defensive programming practices.
Getting API Security Right
Explore best practices for API security through real-world cases, covering attack surfaces, authorization issues, and practical guidelines to enhance your API's protection.
Access Control Design Best Practices
Learn best practices for designing robust access control systems in web applications, covering anti-patterns, principles, and practical examples for secure implementation.
API Abuse through Mobile Apps - New Attacks, New Defenses
Explore mobile app API security challenges and defenses, including OAuth2, TLS pinning, and app attestation. Learn through a simulated battle between a delivery app and an attacker.
From the OWASP Top Ten to the OWASP ASVS
Comprehensive guide to web application security, exploring OWASP standards beyond Top Ten lists. Learn about ASVS, its 180+ requirements, and how to implement a robust application security program.
Common API Security Pitfalls
Explore common API security pitfalls, their root causes, and best practices to protect your APIs. Learn to assess and improve API security for better data protection and user account safety.
From the OWASP Top Ten to the OWASP ASVS
Comprehensive guide to application security, moving beyond OWASP Top Ten to ASVS for robust security practices. Explores 180+ requirements for defining and implementing secure software development.
Cisco SMB Products - Critical Vulnerabilities - 0-Day Release
Detailed examination of critical 0-day vulnerabilities in Cisco SMB switches, including web application and API exploits, leading to complete endpoint compromise and data leakage.