Category: Mix

Hackerone logo
14
Aug
2023

What Is the New NIST Control for Public Disclosure Programs?

Let’s first define what we’re talking about when we refer to these NIST controls. NIST 800-53 is a popular framework…

Customize ZAP HUD 🎮
13
Aug
2023

Customize ZAP HUD 🎮

Today, I write a post about how to use ZAP HUD in an engaging manner. While ZAP HUD may not…

90-Day Certificate Validity
13
Aug
2023

90-Day Certificate Validity

오늘은 구글에서 추친하는 90일의 인증서 유효기간에 대한 이야기를 하려고 합니다. 구글이 올해 3월(2023)에 Chromium Security 를 통해 공지(방향성에 대한 공지)한…

API3:2023 Broken Object Property Level Authorization
12
Aug
2023

API3:2023 Broken Object Property Level Authorization

Welcome to the 4th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a…

Hackerone logo
10
Aug
2023

What to Know About the New SEC Cybersecurity Rule [3 Requirements]

SEC’s Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure Rule The SEC’s final rule is aimed at helping investors make…

[tl;dr sec] #194 - CNAPPGoat, KubeFuzz, tl;dr sec swag
10
Aug
2023

[tl;dr sec] #194 – CNAPPGoat, KubeFuzz, tl;dr sec swag

I hope you’ve been doing well! Hacker Summer Camp This is the first time I’m attending the Vegas conferences since…

Assign severity ratings on Attack Surface Custom Policies
10
Aug
2023

Spot risks with our new IP view

Our new IP view offers another point of view on the expanding attack surface Customers often tell us of instances…

New techniques and tools for web race conditions | Blog
10
Aug
2023

New techniques and tools for web race conditions | Blog

Emma Stocks | 10 August 2023 at 06:56 UTC For too long, web race-condition attacks have focused on a tiny…

ShareFile Pre-Auth RCE (CVE-2023-24489) – Assetnote
10
Aug
2023

Metabase Pre-Auth RCE (CVE-2023-38646) – Assetnote

Summary An unauthenticated attacker can obtain the setup token for an instance and use it to achieve remote code execution…

ShareFile Pre-Auth RCE (CVE-2023-24489) – Assetnote
10
Aug
2023

Chaining our way to Pre-Auth RCE in Metabase (CVE-2023-38646) – Assetnote

Metabase is an open source business intelligence tool that lets you create charts and dashboards using data from a variety…

Enhancing API Security with FAST
09
Aug
2023

Enhancing API Security with FAST

Welcome to another inside story straight from the Wallarm labs. Today we’re taking you behind the scenes of our self-testing…

How Intigriti Optimizes Prato's Software Security 
08
Aug
2023

How Intigriti Optimizes Prato’s Software Security 

In the age of digital transformation, cybersecurity has become an essential part of businesses. A rise in cybercrime highlights the…