Insecure Deserialization, also known as Untrusted Deserialization, is a serious category of Application Security issues potentially affecting most modern systems. In fact, Insecure Deserialization is part of the OWASP Top 10 ranking of risks, as of the current edition (2017). Some recent application security incidents involving Insecure Deserialization vulnerabilities are the following: CVE-2019-6503 Affects Chatopera, […]
In today’s complex Software Development Lifecycle practices, many of its main actors –if not all– are involved in Application Security. These actors include developers, the ops team, infosec specialists, QA, red/blue teams, etc. From all these actors, developers are surely a critical element in ensuring that the apps are free from security issues. We believe […]
For the third year in a row Hdiv participated in the RSA Conference which took place at the Moscone Center in San Francisco. As one of the leading conferences in the cybersecurity space, the event congregated around 40,000 security professionals, and around 600 companies exhibited. 1. The WAF Replacement The main message that Hdiv brought […]
AST tools are one of the pillars of any Application Security practice. We believe that applications should be built secure from the very beginning, so we advocate for developers to take an active role in AppSec. As a result, we believe that all developers should have a basic knowledge of Application Security Testing (AST) tools […]
As teams release code to production faster than ever before, mainstream AST tools are struggling to adapt to these changing conditions. Static ASTs help mostly during development stages, and are not well adapted to production environments. Dynamic ASTs are frequently used in production environments, but lack the agility to support continuous deployment practices. The reason […]
Last week we joined the fabulous OWASP AppSec California 2019 conference in Santa Monica, one of the most prominent Application Security events not only in California, but even at national level. Compared to the RSA conference, which is more vendor-driven, AppSec California is speaker-driven. There is still a well-attended representation of AppSec vendors, but the […]
Get latest developments in web application security, DevSecOps, and cloud security from the Hdiv Security blog.
