dzsec

This week, GitLab has fixed several vulnerabilities, including API vulnerabilities, and the draft for OAuth 2.1 has been released. If you find yourself stuck at home with extra time in your…

In the last article, we have seen how we can do client management for MuleSoft API using AWS Cognito Client Credentials. Here, we will see how we can use AWS Cognito for…

It wasn’t long ago that smaller businesses were more or less exempt from cyber warfare. Hackers, scammers, and other baddies simply preferred to target larger enterprises and other high-profile organizations because…

Open source vulnerabilities are on the rise. Again. Since 2017 we have seen a rapid rise in the number of open source vulnerabilities that are being reported by the community. This…

This week, new security issues have been reported in a US election app, Voatz, and an API vendor has leaked 8 million shopping records in UK. In addition, ESG have shared…

Setting up encryption for your application, how hard can it be? I thought it should be easy, as all communication with modern web applications should be encrypted, right? Well, my expectations…

Office 365 is an essential tool for many organizations that have thrived for years within the Microsoft ecosystem. It takes those many nostalgic tools like Word, Excel, Powerpoint, Outlook — the…

Introduction
The OAuth2 Provider module allows a Mule runtime engine (Mule) app to be configured as an Authentication Manager in an OAuth2 dance. With this role, the application will be able to…

It’s been another eventful year for cyber attacks. More than 4 billion records have been breached so far – and we’re not even to the end of the year yet!
But is…