dzsec

 A recent study conducted by Positive Technologies discovered that half of mobile banks are vulnerable to fraud and theft of funds due to having inadequate security on applications. Analysts found that…

Social, organizational and educational issues can create vulnerabilities that manifest in technical solutions years after their appearance. The strong focus on technical short-term solutions for such issues needs balancing. “Social engineering”…

This week, we check out the recent OAuth bypass at SEMrush, common JWT implementation mistakes and the Semgrep tool, regular expression denial of service (DoS) attacks, and a new online course…

A Quick WebAuthn Refresher
I think we can all agree that passwords suck. They’re difficult to remember, which leads to people simply reusing the same, weak, words/phrases over and over. They’re also…

Security flaws that can introduce vulnerabilities in a software under development are normally repaired in the source code itself. Although it is not always possible to classify a vulnerability as…

This week, we take a look at how Twitter API erroneously allowed browsers to cache sensitive data, and how skimmers have found a way to use Google Analytics APIs to get…

When the entire world is dreading about the pandemic, it’s an exciting time for hackers as there are more vulnerable opportunities to attack identity and access vectors.   
In this article, we…

Databases hold the proverbial keys to modern business processes. These systems contain vast amounts of highly valuable and often sensitive data. This makes database systems a prime target for attackers. Comprehensive…