
Explore seven strategies for detecting Authentication CSRF vulnerabilities, including a semi-automatic tool. Learn from real-world testing results on top websites and their security implications.

Hands-on overview of implementing security in Azure deployments, covering best practices for various services and secure .NET application deployment.

Explore security challenges in microservices architecture, including authentication, secret sharing, and API gateway patterns. Learn best practices for securing decoupled services in large-scale applications.

Explore JavaScript app integrity with Pedro Fortuna, discussing cybersecurity challenges and innovative solutions for protecting client-side code in web applications.

Explore new security controls in Java 8 and 9 with expert Jim Manico. Learn about Java LangSec and enhance your secure coding practices for web applications.

Explore a hybrid approach to web application penetration testing with expert David Caissy, combining manual and automated techniques for comprehensive security assessments.

Discover Needle, an open-source framework for streamlined iOS app security assessments. Learn about its modular architecture, capabilities, and how it simplifies vulnerability detection in iOS applications.

Explore Netflix's innovative approach to AWS security group management using Grouper and Dredge, enhancing developer insights and ensuring least privilege network access.

Innovative black-box taint tracking system for detecting user input data injection in commands and SQL queries, offering cost-effective and performant runtime protection without code modifications.

Learn iOS app security through hands-on exercises with iGoat, an open-source tool for developers and pentesters. Explore vulnerabilities, exploit techniques, and implement fixes in a safe environment.

Introduces a new method for detecting vulnerabilities in aspect-oriented web applications, focusing on static tainting analysis to improve security in languages like AspectJ.

Explore the security risks of browser extensions, their potential for data breaches, and the limitations of current security models. Learn about threat analysis and user protection strategies.

Explore OWASP ModSecurity Core Rule Set 3.0: installation, key concepts, and handling false positives for effective web application firewall protection against common attacks.

Explore stealth authentication techniques to enhance web application security by preventing information leaks during the authentication process.

Explore the latest trends in open source, cloud computing, and mobile technology with insights on security, sustainability, and innovation from The Linux Foundation's executive director.

Explore HTTP desync attacks and their impact on web security, learning techniques to exploit vulnerabilities and breach neighboring systems.

Learn to bridge dev and security teams using ZAP scripting. Explore opportunities, overcome obstacles, and implement effective testing strategies for enhanced application security.

Comprehensive exploration of AWS vulnerabilities and attack strategies, covering the entire cyber kill chain for enhanced cloud security awareness.

Leveraging cloud monitoring and logging to create dynamic threat libraries for Azure and AWS, enhancing application threat models in critical infrastructure sectors like energy and transportation.

Explore Node.js security challenges and mitigation strategies. Learn from real-world incidents to build secure JavaScript applications and understand ecosystem responsibilities.

Comprehensive tool for auditing AWS/GCP/Azure security, combining open-source capabilities with custom checks to enhance cloud infrastructure protection and address human error risks.