Server Side Request Forgery, SSRF, is a serious web application risk that is on the rise due to the transition to microservices architectures, which often use web-based protocols to communicate between microservices. In short, SSRF allows abusing the vulnerable server by exploiting its privileges to access local resources, and/or as a platform to perform other […]
Last week I had the pleasure to host an interactive session with Jim Manico, one of the world leaders in application security, to discuss the importance of developers adopting secure coding standards from the very beginning of the SDLC. The goal of the session was to review some of the reasons why the reliance on […]
Sensitive data leaks are a serious risk for applications and APIs. Sensitive data includes names, addresses, credit card numbers, government-issued identification numbers, etc. Sensitive data leaks are a bad programming practice because personal data leaked by applications can be used to compromise other systems and launch targeted phishing attacks. Similarly, compliance with regulatory requirements is […]
Bad application security habits don’t merely make enterprises less secure, although they certainly do that. They drain resources, make development take far longer, and threaten a lack of compliance. Combined, this makes the application development process far more expensive and orders of magnitude less efficient. It eats into the time of people well beyond the […]
Containerization on the rise The use of containers is growing exponentially as DevOps teams embrace their use. Developers can easily make small changes to an application and push it out immediately. The potential to add automatic scalability and orchestration is another favorite container feature because it accommodates flexible workloads. Additionally, since containers are lightweight and […]
A vulnerability assessment, in the context of application security, is a technique to minimize application weaknesses that is becoming a crucial part of the mix to harden internet applications. Its strategic value is very high since vulnerability assessment and remediation is considered one of the best ways to harden systems and produce secure applications as […]
Get latest developments in web application security, DevSecOps, and cloud security from the Hdiv Security blog.
