Blog Archive

Vulnerability Insights

Report Shows the Equifax Breach was "Entirely Preventable"

December 18, 2018

Vulnerability Insights

A post-mortem of the malicious event-stream backdoor

December 6, 2018

Vulnerability Insights

Malicious code found in npm package event-stream downloaded 8 million times in the past 2.5 months

November 27, 2018

Vulnerability Insights

Behind the disclosure: the Zip Slip vulnerability

August 15, 2018

Vulnerability Insights

How to crash an email server with a single email

August 1, 2018

Vulnerability Insights

Zip Slip Vulnerability Cheat Sheet

June 28, 2018

Vulnerability Insights

Public Disclosure of a Critical Arbitrary File Overwrite Vulnerability: Zip Slip

June 5, 2018

Vulnerability Insights

Attacking an FTP Client: MGETting more than you bargained for

April 4, 2018

Vulnerability Insights

What’s a known vulnerability?

February 6, 2018

Vulnerability Insights

Where do security patches come from?

January 25, 2018

Vulnerability Insights

npm Shrinkwrap reloaded: Locking npm Deps with Package-Lock and Yarn.Lock

January 10, 2018

Vulnerability Insights

77% of 433,000 sites use vulnerable JavaScript libraries

November 21, 2017

DevSecOps

Exposed or not, vulnerabilities are dangerous

November 8, 2017

Vulnerability Insights

Open source vulnerabilities tripped Equifax, how can you defend yourself?

September 11, 2017

Vulnerability Insights

XSS Attacks: The Next Wave

June 8, 2017

Vulnerability Insights

Which of the OWASP Top 10 Caused the World’s Biggest Data Breaches?

May 10, 2017

Vulnerability Insights

77% of sites use at least one vulnerable JavaScript library

March 29, 2017

Vulnerability Insights

Type Manipulation: Escaping Template Sandboxes

March 21, 2017

Vulnerability Insights

Fixing a Prototype Override Protection Bypass Vulnerability in qs

March 14, 2017

Vulnerability Insights

The Frequency of Known Vulnerabilities in JavaScript Libraries

March 9, 2017

Vulnerability Insights

Fixing XXE Vulnerabilities in Nokogiri

February 14, 2017

Vulnerability Insights

Understanding Responsible Disclosures

January 31, 2017

Vulnerability Insights

Regular Expression Denial of Service (ReDoS) and Catastrophic Backtracking

January 17, 2017

Vulnerability Insights

The MongoDB hack and the importance of secure defaults

January 10, 2017