Self-protected web applications
The OWASP is one of the main organizations –some would say the most important– dictating best practices in the Application... View Article
A critical CVE entry found last year by Pivotal has been recently published (cve-2017-8046), and its main maintainer has posted... View Article
Security researchers at lgtm.com have discovered a critical remote code execution vulnerability (CVE-2017-9805) in Apache Struts affecting all versions of... View Article
Pivotal recently reported a new Common Vulnerability and Exposure (CVE-2017-4971) affecting security of the Spring Web Flow framework.
Software vulnerabilities come in two basic flavors: security bugs and design flaws. Security bugs, such as the popular SQL Injection... View Article
At least in my personal experience it’s very common to have conversations with software developers that are familiar and aware... View Article
Are we really secure developing applications in ASP.NET MVC? Almost all applications are vulnerable to attack. According to Gartner, applications... View Article
Do you need to build security into your apps but you are not a security expert? As part of Hdiv... View Article
The number of applications that are based on a client side MVC architecture, such as mobile native applications (iOS or... View Article
What are business logic vulnerabilities? Business logic vulnerabilities are the result of faulty application logic. These vulnerabilities are specific... View Article