Security
Headlines
HeadlinesLatestCVEs

Source

PortSwigger

Developers still struggling with security issues during code reviews, study finds

The road to DevSecOps isn’t always the smoothest

PortSwigger
#vulnerability#auth
Legitimate hacking activities under UK law proposed by ‘expert consensus’

Contentious edge case activities are no excuse for further delaying of ‘much overdue’ reform, say campaigners

Multiple cloud vendors impacted by PostgreSQL vulnerability that exposed enterprise databases

Flaws discovered in various PostgreSQL-as-a-Service offerings, including those from Microsoft and Google

Germany to mandate minimum security standards for web browsers in government

Less celebrated browsers and deprecated applications like Internet Explorer will be browsers non-grata

IT industry guilty of ‘lack of imagination’ in failure to anticipate cyber-attack evolution

‘We have a habit of reacting to threats after they occur, rather than preparing for them,’ journalist Kim Zetter tells Black Hat

BHUSA: Make sure your security bug bounty program doesn’t create a data leak of its own

Researchers, organizations, and bug disclosure platforms can all make improvements to help protect user data

Black Hat USA: Pen testing tool that aims to ‘keep the fun in hacking’ unveiled

Latest version of AttackForge ReportGen DevSecOps aid demonstrated during conference Arsenal track