What Is a Security.txt File and How Can It Help Your Program?
Security.txt is a security mechanism that allows your organization to provide its vulnerability disclosure policy and contact information in a standardized format and location. The…
Month: April 2023
Detectify Security Updates for 12 April
Our Crowdsource ethical hacker community has been busy sending us security updates, including 0-day research. For Asset Monitoring, we now push out tests more frequently at record speed within 25…
Twitter’s Blue Checkmark Strategy Reduces Trust in Pursuit of Revenue
If we lose account validation from the checkmark, what are we getting in return? Created/Updated: November 3, 2022 When I heard that Twitter was going…
Ethical Hackers Help Beiersdorf Minimize Risk and Protect Their Attack Surface
Beiersdorf’s cybersecurity team is always thinking about the best ways to secure their public-facing assets. As their digital footprint increases, they add new processes and…
A hacker’s approach to finding security bugs in open source software
Spencer Pearlman, Security Researcher at Detectify, presented A Hacker’s Approach to Finding Security Bugs in Open Source Software in a partnered webinar with friends at…
AI is a Gift to Transparency
We’re about to be able to collect—and ask questions of—any corpus of data Created/Updated: April 23, 2023 GPT-based AI is about to give us unprecedented…
What is Single Sign on (SSO) ?
Single Sign-on is an authentication process that helps to log in to multiple applications using single login credentials. Security is enhanced through Single Sign-on (SSO)…
How Critical Infrastructure Can be Protected from Threats
Accessing a major critical infrastructure network is very appealing to cybercriminals, as they can maximize societal impact and demand large ransom sums to fix tampered…
Secure Coding Practices For 2023: Writing Code With Security In Mind
Coding or programming began in 1883 by Charles Babbage and Ada Lovelace. Babbage created the device while Lovelace wrote the instructions for the device to…
Detectify Security Updates for 27 April
Our Crowdsource ethical hacker community has been busy sending us security updates, including 0-day research. For Asset Monitoring, we now push out tests more frequently at record speed within 25…
Decoy Dog malware toolkit found after analyzing 70 billion DNS queries
A new enterprise-targeting malware toolkit called ‘Decoy Dog’ has been discovered after inspecting anomalous DNS traffic that is distinctive from regular internet activity. Decoy Dog…
My Prediction For Twitter – Daniel Miessler
Created/Updated: November 6, 2022 I’m a bit Elon and Twittered out, but I want to capture a basic prediction about all the shenanigans. As for…