Get the latest on secure development, security attacks, news, and new product features.
The reshift IntelliJ plugin enables developers to find vulnerabilities in their own custom code and help them remediate with rich issue descriptions within the IDE.
A series on best practices, new tools, and talks from industry experts every Friday.
Integrating Dynamic Analysis Security Testing (DAST) Into Your DevSecOps Pipeline Using Github Actions Watch the full webinar here. Want to check your projects for free?
Integrating Static Analysis Security Testing (SAST) Into Your DevSecOps Pipeline Using Github Actions https://youtu.be/tOiiA79On4k Watch the full webinar here. What is DevSecOps To fully understand
Reshift IntelliJ plugin Reshift has released an IntelliJ plugin that enables developers to find vulnerabilities in their own custom code and help them remediate with
The best way to solve the software security problem is when and where it starts, right at the software creation phase. Solving the problem after
The best way to solve the software security problem is when and where it starts, right at the software creation or as close to the
Security and the Evolution of Software Development Speed Speed is critical in software development. Speed gives software companies the agility and maneuverability needed to navigate
Parameter tampering can occur when web applications transmit important data to the client expecting the value to be returned on the next query. This is
The Padding Oracle attack is associated with Modern Symmetric(single key to encrypt/decrypt) Cryptographic systems that use a block cipher. Block ciphers work on encrypting fixed
OGNL Injection occurs when the Expression Language (EL) interpreter attempts to interpret user-supplied data without validation enabling attackers to inject their own EL code. Object Graph
Occurs when untrusted data is sent to an interpreter as part of a command or query which can execute unintended commands or access unauthorized data.
A result of an inadequately developed login pages, authentication logic, backdoor, custom session management or authentication scheme.
Attackers steal keys, execute man-in-the-middle attacks, or steal clear text data off the server, while in transit, or from the user’s client
