What's wrong with these 3rd party scripts? Something to share with our marketing colleagues, maybe they'll finally get it... 😡
#appsec #asvs10.3.2 #asvs14.2.3
open.spotify.com/episode/111q...
Web Application Security for DevOps: Anti-CSRF and Cookie SameSite Options
#appsec #asvs3.4.3 #asvs4.2.2
www.bitsight.com/blog/web-app...
OWASP Members change the world. Your membership helps shape the organization and drives our projects and community. If you are not a member or are due for renewal within 60 days, please join or renew today and get 10-25% off!
owasp.org/membership > Memberships > Apply
»"AppSec exhaustion" phenomenon, evidenced by declining engagement in security measures and widespread failure to meet vulnerability management goals, suggests that current approaches to security may be unsustainable.«
#AppSec #Cybersecurity #SupplyChainSecurity
snyk.io/lp/state-of-...
Protip: When a security researcher is giving a talk and they say "However..." or "Unfortunately...", sit up and pay attention, because things are about to get real. #blackhatEU
Absolutely a must read, unpacking artificial intelligence and breaking it down to what works, what may work and what is a total bs.
#ArtificialIntelligence #AIHype #AIBooks
www.aisnakeoil.com/p/starting-r...
Exploring client side storage #appsec #asvs #asvs8.2.2 #asvs8.2.3
Notable Privacy and Security Books in 2024
teachprivacy.com/notable-priv... #privacy #cybersecurity #datasecurity #AI
Interesting how people are complaining about the change to Strava API terms of use without explaining how they are bad for the users. All I see is people crying how inconvenient it is for their business.
#strava #stravaapi #privacy #dataprotection
press.strava.com/articles/upd...
How do I play OWAS Cornucopia without any knowledge of threat modeling or owasp?
You will find that it is surprisingly easy just watch this video by Grant Ongers.
m.youtube.com/watch?v=XXTP...
#cybersec #appsec #owasp #infosec #threatmodeling #cornucopia #gameification
