A New Era of Security - How Web Platform Features Can Save Your Application
Explore modern web security features to protect against XSS, CSRF, and other common threats. Learn how to implement CSP3, Trusted Types, and Fetch Metadata Request Headers in your applications.
Technical Pen Testing - Red and Blue Working Together
Explore red and blue team collaboration in cybersecurity, focusing on effective vulnerability management, threat detection, and risk mitigation strategies for improved organizational defense.
Epidemiology of Software Vulnerabilities - A Study of Attack Surface Spread
Explore the impact of third-party libraries on software vulnerabilities, analyzing their spread across products and discussing strategies to mitigate risks in application development.
Sexy Defense - Maximizing the Home-field Advantage
Proactive defense strategies: intelligence gathering, modeling, and expanding defender roles. Maximize existing resources for effective security posture against penetration testers and red teams.
The Web Is Vulnerable - XSS Defense on the BattleFront
Comprehensive analysis of real-world XSS vulnerabilities and attacks, presenting advanced protection methods and introducing detectXSSlib, a new tool for real-time XSS detection.
Vendors' Response to Security Problems Without Pressure to Go Public
Análisis crítico de métodos para descubrir vulnerabilidades de seguridad: parches de proveedores, avisos de seguridad y divulgación completa. Evaluación de la eficacia y debate sobre mejores prácticas.
Secure DNS Solutions
Explore DNS security vulnerabilities and recent IETF standards addressing these issues. Learn about potential attacks and solutions to protect this critical Internet infrastructure.
Security Issues with Configuring and Maintaining an IIS 4 Server
Explore critical security considerations for configuring and maintaining IIS 4 servers, essential for IT professionals and system administrators.
How CVSS is DOSsing Your Patching Policy - and Wasting Your Money
Explore the effectiveness of CVSS as a vulnerability risk metric, analyzing its impact on patching policies and resource allocation through real-world attack data and statistical analysis.
Healthcare and New Federal Security Protections
Explore new federal security protections in healthcare, focusing on safeguarding patient data and ensuring compliance with evolving regulations.
CVE Behind the Scenes - The Complexity of Being Simple
Explore the intricacies of vulnerability classification and management in cybersecurity, focusing on the Common Vulnerabilities and Exposures (CVE) system and its impact on enterprise security.
The Laws of Vulnerabilities for Internal Networks
Explore internal network vulnerabilities and their governing laws, gaining insights into cybersecurity risks and effective mitigation strategies for organizational protection.
A Proposed Process for Handling Vulnerability Information
Explore a proposed framework for managing vulnerability information, discussing best practices and challenges in cybersecurity disclosure and mitigation strategies.
Vulnerability - SQL Injection Counters - Securing Servers From Insidious Attacks
Explore advanced techniques for securing Windows servers against vulnerabilities and SQL injection attacks, enhancing your cybersecurity skills to protect against insidious threats.
How to Stay Up-To-Date On Security Patches
Learn effective strategies for maintaining Windows 2002 security, including patch management techniques and best practices for staying current with the latest security updates.
Security Chaos Engineering - Pushing Security from Theory to Practice
Explore Security Chaos Engineering principles and real-world implementation at Cardinal Health. Learn how to proactively identify security vulnerabilities and strengthen your cybersecurity program through continuous validation.
When a Zero Day and Access Keys Collide in the Cloud - Responding to the SugarCRM 0-Day Vulnerability
Explore AWS environment attacks using MITRE ATT&CK, learn prevention strategies, and understand the complexities of cloud security through the lens of the SugarCRM 0-day vulnerability.
Cut Through Vulnerability Noise with Runtime Insights
Learn to prioritize security risks using runtime insights, reducing vulnerability noise by up to 95%. Discover techniques for analyzing Docker images, generating SBOMs, and correlating inventories with vulnerability databases for improved container secur…
Stop Making Excuses - It's Time to Own Your HIV - High Impact Vulnerabilities
Explore strategies for identifying and addressing high-impact vulnerabilities in cybersecurity, focusing on project management, communication, and results-driven approaches.
Patching the Human Vulns
Explore strategies for addressing human vulnerabilities in cybersecurity, focusing on effective methods to enhance organizational security through employee awareness and behavior modification.
Bad Advice - Unintended Consequences and Broken Paradigms - Think Act Different
Explore unconventional thinking in information security, challenging common practices and paradigms to develop more effective strategies and solutions for modern cybersecurity challenges.