Severe Confluence Vulnerability is an Active Threat (CVE-2022-26134)
Background The vulnerability allows unauthenticated remote code execution (RCE). Exploitation occurs by sending an HTTP request with an attack payload to a vulnerable instance of…
Category: Mix
Leading SaaS innovation with collaboration and security transparency
Detectify security experts are speaking with security managers and operational defenders daily. There’s a clear division on how a modern and mature organization will approach…
AI Art Just Opened The Threat to Human Work We Were Expecting from AGI
Let me start with the punchline: Something like 80% of most “knowledge work” is about to get replaced by artificial intelligence. I’m not professionally educated…
Iteration in Python: for, list, and map
The basics of writing iterations in Python using for loops, list comprehensions, and map. 2017-01-18 21:58:28 +0700 +0700 January 18, 2017 Updated: Nov 22, 2020…
How to Catch Injection Security Vulnerabilities in Code Review
Understanding Injection Vulnerabilities Injection vulnerabilities exist when information provided by users of the application is not properly validated or sanitized before it is used. In…
News, Analysis, and Discovery | NO. 356
Exploring the intersection of security, technology, and society—and what might be coming next… Standard Web Edition | Ep. 356 | November 7, 2022 SECURITY NEWS…
How I ditched WordPress and set up my custom domain HTTPS site for (almost) free | victoria.dev
A guide (for the minimally tech-savvy) to setting up a website with HTTPS using Hugo, Cloudflare and GitHub Pages. I got annoyed with WordPress.com. While…
The Top 5 Most Common Security Issues I Discover When Reviewing Code
NOTE: The following code examples have been contrived to provide detailed, illustrative representations of real security issues I’ve found while reviewing code. They have not…
Humans of Detectify – Helping our customers with appsec success
The crowd has spoken… Earlier this year, G2 reviews platform awarded Detectify with a Best Support badge for our category of DAST and we thought…
NO. 357 | NEWS, ANALYSIS, & DISCOVERY SERIES
Exploring the intersection of security, technology, and society—and what might be coming next… Standard Web Edition | November 14, 2022 SECURITY NEWS Attackers have dumped…
How I created custom desktop notifications using terminal and cron
How you can use tools your Linux system already has to create custom desktop notifications. In my last post I talked about moving from Windows…
Community at HackerOne: What’s to Come
From Jessica Sexton – Director of Community, Three years ago, I found my home at HackerOne. My primary focus was to revamp our Live Hacking…