This week, we look into the recent API vulnerabilities at Facebook and the campaing apps for US presidential election, a new book on the OpenAPI Specification (OAS), and a guest post…
Security
Using Log Analysis with Command Line Tools to Explore Linux Log
Do you want to know more about analyzing log files? If so, this guide is for you! Whether you’re a student or a security practitioner, Linux logs has got you covered!
This…
Finding Help in a Remote World
In early 2020, IT teams were getting crushed by the heavy volume of help desk tickets. It didn’t seem possible that the number of tickets could increase further. But then March…
Need Security Tokens for Java? Try JPaseto
To circumvent the issues with JSON Web Tokens, try PASETO; a new security token format, made for quick and easy accessibility, free of the complications of JWT. PASETO, or Platform Agnostic…
How to Spot Vulnerabilities of Custom SAML Implementations Before They Happen
SAML (Security Assertion Markup Language) is often prone to vulnerabilities as an XML based markup language used to expedite identity checks for bigger applications. This article will go over the usual…
Myths and Facts of Security Testing
Software security is extremely valuable to users, and even more to the companies. Besides building secure application software, it is crucial to consider and test security right through the software lifecycle….
IBM X-Force discovers Mozi botnet accounts for 90% of IoT traffic
Security experts from IBM X-Force have discovered that the Mozi botnet now accounts for 90 percent of traffic from IoT devices. Mozi evolved from the source codes of infamous malware families…
Bringing Your (Encryption) Keys to Multi/Hybrid Clouds
Tools and Setup
Before we dive into the fun part of getting keys shared amongst cloud providers, there are a variety of tools required to get this tutorial working. First, you’ll need…
API Security Weekly: Issue #101
After the special 100th edition last week, which was all about API security advice from the industry’s thought leaders, this week we are back to our regular API security news, and…
Go Modules Security
Google’s Go programming language is all in boom and rocketing in its popularity in the mainstream software development field. Since Golang is a relatively new language, it does not have a…