Cyber Attacks
Watering Hole Attacks: How Compromise Happens and How to Detect It
Attackers compromise trusted community sites to infect visitors, bypassing perimeter defences by exploiting implicit trust in known domains.
web security
Everything AppSec Scoop has reported about web security: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Web Cache Poisoning Warning Signs and Detection Methods
Cache poisoning often manifests as inconsistent responses for identical requests, a subtle anomaly that bypasses standard input validation checks and alters content for all users.
Vulnerabilities
Stop Session Fixation: Binding Tokens to Users and Devices
Changing session identifiers after login fails if the application reuses the same token for authenticated and unauthenticated states in the same request cycle.