#webappsecurity — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #webappsecurity, aggregated by home.social.
-
when you tell the customer you found criticals and they want the report sooner
-
when you tell the customer you found criticals and they want the report sooner
-
AI-powered features are the new attack surface! Check out our new blog in which LMG Security’s Senior Penetration Tester Emily Gosney @baybedoll shares real-world strategies for testing AI-driven web apps against the latest prompt injection threats.
From content smuggling to prompt splitting, attackers are using natural language to manipulate AI systems. Learn the top techniques—and why your web app pen test must include prompt injection testing to defend against today’s AI-driven threats.
#CyberSecurity #PromptInjection #AIsecurity #WebAppSecurity #PenetrationTesting #LLMvulnerabilities #Pentest #DFIR #AI #CISO #Pentesting #Infosec #ITsecurity
-
AI-powered features are the new attack surface! Check out our new blog in which LMG Security’s Senior Penetration Tester Emily Gosney @baybedoll shares real-world strategies for testing AI-driven web apps against the latest prompt injection threats.
From content smuggling to prompt splitting, attackers are using natural language to manipulate AI systems. Learn the top techniques—and why your web app pen test must include prompt injection testing to defend against today’s AI-driven threats.
#CyberSecurity #PromptInjection #AIsecurity #WebAppSecurity #PenetrationTesting #LLMvulnerabilities #Pentest #DFIR #AI #CISO #Pentesting #Infosec #ITsecurity
-
🌐 The Digital Terrain Is Shifting — Are Your Apps and APIs Ready?
As AI adoption accelerates, so do AI-driven attacks.
In their new research report, Akamai Technologies uncovers the evolving threats facing web applications and APIs — and how organizations can respond before attackers get ahead.State of Apps and API Security 2025: How #AI Is Shifting the Digital Terrain explores the sharp rise in automated, intelligent threats — and the new defenses emerging to meet them.
📥 Download the full report here: https://itspm.ag/akamaixmwd
📌 Research like this helps #security professionals, #leaders, and #developers stay ahead of the curve — and shape the future of #digital defense.🎙️ We’re also proud to feature Akamai in our RSAC 2025 coverage — with a Brand Story recorded pre-event and a follow-up conversation happening on location at the conference in San Francisco with Rupesh Chokshi, Sean Martin, CISSP, and Marco Ciappelli.
Watch the pre-event recording here: https://youtu.be/DMm6INJ_2Z8
🙏 A huge thank you to the Akamai team for sponsoring our coverage and sharing their insights with our global audience.
👇 Check out the report and stay tuned for more from RSAC:
📥 Download the Report: https://itspm.ag/akamaixmwd
🌐 Explore our RSAC 2025 Coverage: https://www.itspmagazine.com/events/rsac-2025#akamai #rsac2025 #brandstory #apigateway #applicationsecurity #aiinsecurity #webappsecurity #cybersecurityresearch #infosec #devsecops #digitaldefense #threatintelligence #itspmagazine #rsaconference #apisecurity #aiattacks #securityreport #cybersecurityinnovation #securitystrategy #zerotrust #appsec
-
🌐 The Digital Terrain Is Shifting — Are Your Apps and APIs Ready?
As AI adoption accelerates, so do AI-driven attacks.
In their new research report, Akamai Technologies uncovers the evolving threats facing web applications and APIs — and how organizations can respond before attackers get ahead.State of Apps and API Security 2025: How #AI Is Shifting the Digital Terrain explores the sharp rise in automated, intelligent threats — and the new defenses emerging to meet them.
📥 Download the full report here: https://itspm.ag/akamaixmwd
📌 Research like this helps #security professionals, #leaders, and #developers stay ahead of the curve — and shape the future of #digital defense.🎙️ We’re also proud to feature Akamai in our RSAC 2025 coverage — with a Brand Story recorded pre-event and a follow-up conversation happening on location at the conference in San Francisco with Rupesh Chokshi, Sean Martin, CISSP, and Marco Ciappelli.
Watch the pre-event recording here: https://youtu.be/DMm6INJ_2Z8
🙏 A huge thank you to the Akamai team for sponsoring our coverage and sharing their insights with our global audience.
👇 Check out the report and stay tuned for more from RSAC:
📥 Download the Report: https://itspm.ag/akamaixmwd
🌐 Explore our RSAC 2025 Coverage: https://www.itspmagazine.com/events/rsac-2025#akamai #rsac2025 #brandstory #apigateway #applicationsecurity #aiinsecurity #webappsecurity #cybersecurityresearch #infosec #devsecops #digitaldefense #threatintelligence #itspmagazine #rsaconference #apisecurity #aiattacks #securityreport #cybersecurityinnovation #securitystrategy #zerotrust #appsec
-
Top Web Application PenTesting Tools by Category ⚔️
🔖Hashtags:
#WebSecurity #PentestingTools #EthicalHacking #BugBounty #WebAppSecurity #RedTeam #OWASP #CyberSecurity⚠️Disclaimer:
This content is for educational purposes only. Only use these tools in environments where you have proper authorization. Hacking without permission is illegal and unethical. -
Top Web Application PenTesting Tools by Category ⚔️
🔖Hashtags:
#WebSecurity #PentestingTools #EthicalHacking #BugBounty #WebAppSecurity #RedTeam #OWASP #CyberSecurity⚠️Disclaimer:
This content is for educational purposes only. Only use these tools in environments where you have proper authorization. Hacking without permission is illegal and unethical. -
Are Your Web Apps an Open Door for Hackers?
Imagine spending months perfecting your web app, only to find it leaking data like a sieve. Scary, right? That’s exactly what happens when common security flaws go unchecked.
In LMG Security’s latest blog, @tompohl shares jaw-dropping real-world web application security attack case studies from the field, including:
▪ Command Injection Jackpot – A hidden file upload flaw led to full server control.
▪ API Admin Takeover – An overlooked endpoint allowed attackers to create Super Admin accounts.
▪ Heap Dump Disaster – A debugging tool exposed Active Directory credentials and user tokens
.
Read the full blog to learn how hackers target web apps and how to lock them down: https://www.lmgsecurity.com/common-web-application-security-attacks-real-world-lessons-from-the-field/#Cybersecurity #Security #ITsecurity
#WebAppSecurity #APISecurity #PenTesting #CISO #WebApp #WebApplication #pentest #penetrationtesting #Infosec #DFIR -
Are Your Web Apps an Open Door for Hackers?
Imagine spending months perfecting your web app, only to find it leaking data like a sieve. Scary, right? That’s exactly what happens when common security flaws go unchecked.
In LMG Security’s latest blog, @tompohl shares jaw-dropping real-world web application security attack case studies from the field, including:
▪ Command Injection Jackpot – A hidden file upload flaw led to full server control.
▪ API Admin Takeover – An overlooked endpoint allowed attackers to create Super Admin accounts.
▪ Heap Dump Disaster – A debugging tool exposed Active Directory credentials and user tokens
.
Read the full blog to learn how hackers target web apps and how to lock them down: https://www.lmgsecurity.com/common-web-application-security-attacks-real-world-lessons-from-the-field/#Cybersecurity #Security #ITsecurity
#WebAppSecurity #APISecurity #PenTesting #CISO #WebApp #WebApplication #pentest #penetrationtesting #Infosec #DFIR -
I'm not going to say what site this is, but it has to qualify for the Web Security wall of shame.
-
I'm not going to say what site this is, but it has to qualify for the Web Security wall of shame.
-
Watch Tomorrow’s SecDSM’s "Hacking Web Apps for Fun & Profit!" live or via live-stream! Join @tompohl LMG Security’s Penetration Testing Manager, for his talk at SecDSM tomorrow night (February 6th) at 6:30 PM CT. Tom will dive into real-world web application vulnerabilities and how hackers exploit them.
He’ll cover:
🔹 How real-world web app vulnerabilities are exploited through penetration test case studies
🔹 Common patterns in web security weaknesses that put businesses at risk
🔹 Key strategies to secure your web applications and mitigate vulnerabilities before attackers find themIn person at: Foundry Distilling Co., West Des Moines
Live-stream: https://www.youtube.com/@SecDSM#SecDSM #DesMoines #CyberSecurity #WebAppSecurity #PenTesting #Hacking #WebApp #Infosec #IT #AppSec #Pentest
-
@EugeneMcParland If I wasn't 60 years old and #Neurodivergent I would be there in a #Heartbeat 2 decades #usaf
#comsec #tactical #combat #communication #webappsecurity #socialengineering #osint #cook
#commitment I am going look up #UkraineJenny -
@EugeneMcParland If I wasn't 60 years old and #Neurodivergent I would be there in a #Heartbeat 2 decades #usaf
#comsec #tactical #combat #communication #webappsecurity #socialengineering #osint #cook
#commitment I am going look up #UkraineJenny -
Why invest in web app security assessments along with your Penetration Testing? With nearly 1 in 10 breaches stemming from basic web app attacks, the stakes are high. LMG Security’s CTO Dan Featherman breaks down how these assessments can close security gaps and reduce risk. https://www.lmgsecurity.com/why-web-application-security-assessments-should-move-up-your-to-do-list/
#Cybersecurity #WebAppSecurity #DataBreach #PenetrationTesting #Pentest #CISO #infosec
-
💻 Are you a Java developer concerned about XSS vulnerabilities in your web apps? Learn to prevent XSS attacks using Snyk Code. Knowledge is power, empower yourself 👉 https://buff.ly/3Hi6WEh #WebAppSecurity #XSS #Java #SnykCode
-
💻 Are you a Java developer concerned about XSS vulnerabilities in your web apps? Learn to prevent XSS attacks using Snyk Code. Knowledge is power, empower yourself 👉 https://buff.ly/3Hi6WEh #WebAppSecurity #XSS #Java #SnykCode
-
🔒 Write safer HTML pages for your Java web applications. Understand the potential security risks associated with XSS attacks and how to use Snyk Code to prevent them. Detailed insights here 👉 https://buff.ly/3Hi6WEh #XSS #Java #WebAppSecurity #SnykCode
-
🔒 Write safer HTML pages for your Java web applications. Understand the potential security risks associated with XSS attacks and how to use Snyk Code to prevent them. Detailed insights here 👉 https://buff.ly/3Hi6WEh #XSS #Java #WebAppSecurity #SnykCode
-
Am Di, 5. Sept. um 11 Uhr: TechKafi #ruby ☕ - Web Security Refresh! 🚀
Buzzwords wie SQL Injection, XSS, CSRF, CSP sind uns bekannt, aber kennen wir wirklich alle Abwehrstrategien? Pascal Zumkehr bringt Licht ins Dunkel und erklärt Sicherheitslücken von Webapps samt Gegenmaßnahmen. Der Code ist in Ruby, doch die Lösungen gelten branchenweit.
https://www.puzzle.ch/de/blog/articles/2023/08/29/tech-kafi-ruby-web-security-refresher
#WebSecurity #Ruby #Cybersecurity #WebAppSecurity #TechEvent #SecurityRefresh #PuzzleEvents #TechTalk #WebDev #Coding
-
🔐 𝐀𝐳𝐮𝐫𝐞 𝐖𝐀𝐅 – 𝐌𝐚𝐬𝐤𝐢𝐧𝐠 𝐒𝐞𝐧𝐬𝐢𝐭𝐢𝐯𝐞 𝐃𝐚𝐭𝐚
WAF rules can thwart malicious requests containing personally identifiable info (PII). Azure WAF log scrubbing tool ensures data security. 🛡️ Safeguard your logs by removing sensitive data using custom rules.
Check out our latest blog where we dive into the log scrubbing feature and explore real examples. Discover how to strengthen your web app security today!
#AzureWAF #WebAppSecurity #Azure #waf #scrubbing #log #sentinel #siem #soar #pii #cloud #cloudsecurity #soc #cybersecurity #loganalytics
-
: Solving @RealTryHackMe - Brooklyn Nine Nine #webapp #webappsecurity #hacking #ctf
https://wp.me/p2if9U-Rr -
: Solving @RealTryHackMe - Brooklyn Nine Nine #webapp #webappsecurity #hacking #ctf
https://wp.me/p2if9U-Rr -
📅 One more day until the #OWASP BASC conference kicks off in Burlington, MA. Join us tomorrow for FREE (no joke)! Register here www.basconf.org/home #appsec #developers #zap #threatmodeling #securityconference #webapp #cloudnativeapps #javascript #webappsecurity #boston nitter.at/owasp/status/1639266… -
Can we help Elf Exploit and Elf Admin secure the website? Find out in -->
@RealTryHackMe
#AdventOfCyber Series: Challenge 16 -SQLi's The King, The Carolers Sing #webappsecurity #cybersecurityeducation #cybersecuritytutorial #TisTheSeasonForHacking -
Can we help Elf Exploit and Elf Admin secure the website? Find out in -->
@RealTryHackMe
#AdventOfCyber Series: Challenge 16 -SQLi's The King, The Carolers Sing #webappsecurity #cybersecurityeducation #cybersecuritytutorial #TisTheSeasonForHacking -
Can Elf McSkidy find the IDOR on the server? Find out in -->
@RealTryHackMe #AdventOfCyber Series: Challenge 14 - I'm Dreaming Of Secure Web Apps #webappsecurity #OWASP #cybersecurityeducation #cybersecuritytutorial #TisTheSeasonForHacking -
Can Elf McSkidy find the IDOR on the server? Find out in -->
@RealTryHackMe #AdventOfCyber Series: Challenge 14 - I'm Dreaming Of Secure Web Apps #webappsecurity #OWASP #cybersecurityeducation #cybersecuritytutorial #TisTheSeasonForHacking