The evolution of the internet and, with it, international levels of e-commerce, meant that Black Friday soon became the unofficial start of winter purchases ahead of holiday festivities across the globe. In the early 2000s, Cyber Monday, held on…
We are thrilled to announce that Intigriti has won Security Innovation of the Year at the UK IT Industry Awards 2025. The UK IT Industry…
Welcome to The researcher’s desk – a content series where the Detectify security research team conducts a technical autopsy on vulnerabilities that are particularly interesting,…
Amelia Coen | 14 November 2025 at 15:09 UTC AI isn’t just reshaping cybersecurity – it’s challenging testers to rethink their entire playbook. In his…
Welcome to The researcher’s desk – a content series where the Detectify security research team conducts a technical autopsy on vulnerabilities that are particularly interesting,…
Halo Security Pros It consolidates EASM, infrastructure scanning, and manual penetration testing services into a single platform, simplifying vendor management. Its deep cloud-provider integrations (AWS,…
Over the past few years, API security has gone from a relatively niche concern to a headline issue. A slew of high-profile breaches and compliance…
We frequently hear that we have a data scarcity problem in AI. And when it comes to unique, Tolstoy-level literature and the like, that could…
Traditional cross-site scripting (XSS) vulnerabilities were prevalent when server-side rendering (with languages like PHP, JSP, and ASP) was the norm. However, as applications become more…
Six months after launch, Alfred, the AI Agent that autonomously builds security tests, has revolutionized our workflow. Alfred has delivered over 450 validated tests against…
Before JSON Web Tokens (JWTs) became popular in today’s app development landscape, web applications predominantly used server-side sessions, which presented horizontal scalability issues. JWTs solved…
Rapid7 Pros Correlates web app vulnerabilities with underlying infrastructure risk and active threat data. Provides expansive enterprise discovery of unknown web applications and open ports.…
