Secure Micro Frontends and Passkeys in Identity and Security - December 2023
Explore secure micro frontends and passkeys with industry experts. Level up your identity and security skills through informative sessions and Q&A with experienced developers.
Introdução ao Application Security - Kick-off do Capítulo Bahia
Explore os fundamentos da Segurança de Aplicativos com especialistas, abordando conceitos iniciais e insights práticos para fortalecer suas habilidades em cibersegurança.
Asymmetric Encryption: From RSA to Post-Quantum Cryptography
Delve into the mathematical foundations and practical applications of asymmetric encryption, exploring RSA, ECDSA, their limitations, and future developments in post-quantum cryptography.
Effective API Governance in the Era of AI with Azure API Management
Master effective API governance using Azure's comprehensive suite of tools, including API Management, API Center, and Defender for Cloud, to enhance security, compliance, and development speed.
How I Bought Booze with a JSON Web Token - Using Verifiable Credentials for Age Verification
Discover how JSON Web Tokens and Verifiable Credentials revolutionize age verification in delivery apps, enabling secure, privacy-focused digital proof of qualifications for online transactions.
Form Validation and Sanitization with JavaScript and Python - Web Security Fundamentals
Master form validation and data sanitization techniques using JavaScript for client-side and Python for server-side security, preventing injection attacks and ensuring data integrity.
Enhancing Security with Istio - Realtime JWT Access Revocation
Discover how to implement real-time JWT token revocation in Istio systems through an event-based architecture, enabling enhanced security controls and immediate access management across multiple clusters.
Securing Outgoing Traffic: Building a Powerful Internet Egress Gateway for Reliable Connectivity
Master the implementation of secure Internet Egress gateways using Istio and Envoy, focusing on fine-grained access policies, multi-tenant architecture, and robust traffic monitoring for enhanced network security.
Creating a Full Stack Application with FastAPI and React
Learn to build a full-stack application by connecting FastAPI backend with React frontend, covering setup, CORS handling, routing, and testing while addressing common integration challenges.
How to Build a Website with Google Sites - Complete Tutorial
Master the process of building a professional website using Google Sites, from customizing headers and adding multimedia content to implementing forms and setting up custom domains - all without coding or costs.
Total ReDoS - The Dangers of Regular Expressions in JavaScript
Discover how regular expressions in JavaScript can lead to security vulnerabilities, learn to identify risky patterns, and implement safer regex solutions to prevent denial of service attacks.
Leaking Kakao - How I Found a 1-Click Exploit in Korea's Biggest Chat App
Discover how a critical 1-click exploit was uncovered in Kakao, Korea's leading messaging platform, revealing important insights into mobile app security vulnerabilities and exploit detection.
Web Timing Attacks That Actually Work - Practical Techniques and Tools
Discover practical web timing attack techniques to uncover server secrets, masked vulnerabilities, and hidden attack surfaces using efficient, real-world methods and open-source tools.
Breaking Secure Web Gateways: Last Mile Reassembly Attacks
Uncover critical vulnerabilities in Secure Web Gateways through "Last Mile Reassembly Attacks" and learn how to bypass enterprise-grade security solutions using an open-source attack toolkit.
SPIFFE: Universal X509 and JWT Identities Using cert-manager
Discover how to implement SPIFFE identities in Kubernetes using cert-manager, enabling secure workload authentication and third-party API integration without vendor lock-in.
Building Secure ReactJS Applications: Mastering Advanced Security Techniques
Master advanced security techniques for ReactJS applications, from XSS protection to template injection defense, server-side rendering security, and implementing robust access control mechanisms.
Rise of Inspectron: Automated Black-box Auditing of Cross-platform Electron Applications
Discover how Inspectron framework automates security vulnerability detection in Electron apps, exploring common risks and developer practices for cross-platform application security.
Vulnerability-oriented Testing for RESTful APIs
Discover a novel framework for detecting security vulnerabilities in RESTful APIs through functionality-based testing, featuring practical demonstrations and real-world applications in API security testing.
WEBRR: A Forensic System for Replaying and Investigating Web-Based Attacks in The Modern Web
Explore a novel forensic system that enables deterministic replay and investigation of web-based attacks through JavaScript Execution Unit Partitioning, offering enhanced visibility into cyber threats.
Web Platform Threats: Automated Detection of Web Security Issues with WPT
Discover how automated detection frameworks identify security flaws in web browser mechanisms, exploring practical approaches to validate web invariants and detect vulnerabilities across major browsers.
PhishDecloaker: Detecting CAPTCHA-cloaked Phishing Websites via Hybrid Vision-based Interactive Models
Discover how PhishDecloaker uses AI and computer vision to detect CAPTCHA-protected phishing websites, improving detection rates from 0% to 74.25% and enhancing cybersecurity defenses.