In this article, we’ll look at Content Security Policy (CSP) through the eyes of a penetration tester. We will outline...

Web application security is crucial for any organization that relies on web-based applications. Learn about the importance of web application...

This blog describes the attack path we have uncovered during a recent penetration test of a web application, coupled with...

Pen testing is a valuable practice for discovering and remediating exploitable vulnerabilities in code. Legacy pen testing, however, can’t keep...

It doesn’t seem that long ago that I wrote about the OWASP Top 10 changes that came in 2017. OWASP...