Risk Management

6 years ago

Every organization conducts risk assessment and mitigation in order to identify risks and minimize their impact via risk mitigation. However,…

Misconfigured Cross-Origin Resource Sharing (CORS) Risk

6 years ago

The Cross-Origin Resource Sharing (CORS) is a mechanism to relax the Same Origin Policy (SOP) and to enable communication between…

Database Configuration Audit for Security and Compliance [Part-1]

6 years ago

Database Configuration Audit is the latest buzz word everyone is talking about and every organization wants to revamp their databases…

Json web token (JWT) Attack – Most Common Scenarios

6 years ago

What is a JSON web token (JWT)? A JSON web token (JWT) token is an open standard which defines the…

PA DSS V 3.2 to SUNSET by 2022

6 years ago

About PA DSS Formerly known as the Payment Application Best Practices (PABP), the Payment Application Data Security Standard (PA-DSS) is…

Privacy Now to be a Fundamental Right in India

6 years ago

Electronic data protection in India is currently governed by the Indian penal code, the information Technology Act 2000 – IT…

How we are successfully managing & delivering the Cybersecurity Services during COVID-19 situation?

6 years ago

By now, we all already went through COVID pandemic’s first wave. The second wave has started hitting the world. Though…

Web Cache Poisoning – Through Host Header Injection

6 years ago

Web cache poisoning is an advanced hacking technique through which an attacker can exploit the pattern or behavior of a…

Apache Struts-2 Exploited to Remote Code Execution

6 years ago

This blog is to describe my finding on a web-based application which is a very well-known vulnerability found on Apache…

Subdomain Takeovers – CNAMEs And Cloud Services

6 years ago

Introduction A Subdomain Takeovers A hostile takeover of a subdomain by an attacker is known as a subdomain takeover. This…