A complete guide to exploiting advanced XXE vulnerabilities
XML External Entity (XXE) vulnerabilities are one of the most overlooked yet impactful vulnerabilities in modern web applications. Although they’ve become seemingly harder to detect…
Category: Mix
Introducing Alfred for fully autonomous AI-built vulnerability assessments
We are excited to announce Detectify Alfred, a revolutionary system that uses AI to completely autonomously collect and prioritize threat intelligence and generate high-fidelity security…
API Specifications: Why, When, and How to Enforce Them
APIs facilitate communication between different software applications and power a wide range of everyday digital experiences, from weather apps to streaming services and everything in…
Noir Enhances AI Integration for Advanced Analysis
Mar 01, 2025 Expanding AI Capabilities in Noir v0.20.0 Noir v0.20.0 has arrived, supercharging its AI-powered security analysis capabilities. This release broadens AI collaboration beyond…
API Armor: How Bybit’s Real-Time Blacklisting Is Thwarting a $1.5B Crypto Heist
APIs present a security risk—that much is a given. Attacks on APIs have caused some of the most significant security incidents of the past decades.…
Top vulnerabilities in 2024 and what to watch for in 2025
The financial services industry continues to be hit hard by malicious actors, with the average cost of a data breach in the sector increasing to…
The Cost Savings of Fixing Security Flaws in Development
When security incidents from software defects happen, retrospectives often tell the story of heroic remediation in the form of a few hundred lines of code (or…
Making security a business value enabler, not a gatekeeper
The traditional perception of security within an organization is as a barrier rather than a facilitator, imposing approval processes and regulations that inevitably slow down…
PortSwigger and SAP forge strategic partnership to enhance enterprise web security
Andrzej Matykiewicz | 25 February 2025 at 14:34 UTC In today’s rapidly evolving digital landscape, securing web applications at scale is a challenge, even for…
AI State Management (AISM) | Daniel Miessler
One of the biggest pushbacks against AI is best articulated as a single question. So what? The argument goes something like this: Cool. So we…
I Found a Bug in Meta AI That Let Me Upload Explicit Content and Have AI Create More
Meta AI Studio had a vulnerability that allowed anyone with a Facebook account to upload explicit images and use the AI to generate even more…
Strengthening Digital Resilience Through API Security
The Digital Operational Resilience Act (DORA) is one of the most significant cybersecurity regulations for financial institutions in the European Union (EU). Failure to comply…