
Comprehensive evaluation of XML parsers, exploring vulnerabilities from DTD to XXE attacks. Gain insights into secure XML parsing and learn to mitigate potential security risks.

Discover strategies for building a sustainable security culture through AppSec awareness, focusing on human factors, knowledge sharing, and effective program architecture.

Explore web security challenges, from basic vulnerabilities to complex exploits, with insights from industry experts on detection, prevention, and mitigation strategies.

Explore open-source security approaches for applications and services, covering threat modeling, bug bounties, and measuring security effectiveness in Mozilla's ecosystem.

Learn to build secure cloud-native applications using Spring Boot and Spring, focusing on best practices and techniques for robust, scalable, and protected software development.

Explore systematic vulnerabilities and fixes in OpenID Connect, covering attack types, threat models, and countermeasures for improved authentication security.

Explore vulnerability exploits, their trends, and defense strategies in this comprehensive overview of the cybersecurity landscape, featuring insights on exploit kits and prioritization.

Explore efficient bot detection techniques, categorization methods, and response strategies to manage both beneficial and potentially harmful automated web traffic.

Learn to build, scale, and integrate a robust web security scanning infrastructure into your continuous delivery pipeline, with insights on customization and comparisons to existing solutions.

Explore enterprise-wide SSL automation using Lemur and CloudCA, enabling developers to easily manage SSL certificates and enhance security across applications.

Explore integrating application security into development processes, focusing on proactive measures, resource allocation, and adapting to Agile and DevOps methodologies for effective risk management.

Explore OWASP Security Knowledge Framework with project lead Glenn Ten Cate, discussing goals, milestones, and best coding practices for this essential security tool.

Explore advanced features of OWASP ZAP, a powerful open-source web application security testing tool, with insights from Simon Bennetts at AppSecEU 2015 in Amsterdam.

Discover strategies for integrating security testing into development processes, empowering developers to become security experts and enhance application safety.

Explore insights from analyzing 6,000 mobile malware apps, covering distribution, behavior, fingerprinting, and common characteristics. Learn about APK scanning and permission requests.

Explore JSONP vulnerabilities and the Rosetta Flash exploit technique in this cybersecurity talk, uncovering potential risks and defense strategies for web applications.

Learn essential API security assessment techniques, including key considerations, testing steps, and best practices for protecting APIs and mobile applications from common vulnerabilities and threats.

Explore phishing techniques and strategies through dark fairytales, offering insights into cybersecurity threats and prevention methods for application security professionals.

Explore Web Service Workers' potential to disrupt web security, examining innovative uses and potential vulnerabilities in this cutting-edge browser feature.

Explore diverse aspects of application security, from democratization of hacking to user experience and government involvement, in this comprehensive overview by Troy Hunt.

Explore strategies for attracting and retaining women in cybersecurity, addressing gender biases, and promoting diversity in the field through education, role models, and inclusive practices.