Secure Software Development Lifecycle (SDLC)
Since the threat landscape in the software development ecosystem is ever-evolving, we need to reconsider the security controls used throughout ...
Read More
Read More
Let’s Protect Your Organization From Insider Threats
Among various cyber threats that organizations face, insider threats are the ones that are hard to detect. However, not all ...
Read More
Read More
STATIC ANALYSIS OF ANDROID APPLICATION
Android applications are now an integral part of our lives, thanks to the excessive use of mobile phones. However, many ...
Read More
Read More
Learning About Web Application Firewall (WAF) Security
Introduction A web application firewall (WAF) is a security solution that provides rule sets to help defend any internet application ...
Read More
Read More
HIPAA Compliance Framework – A Guide for Implementation
The Health Insurance Portability and Accountability Act (HIPAA) has set the standard for sensitive and critical patient healthcare data protection ...
Read More
Read More
Increased use of Multi-factor Authentication
What is Multi-Factor Authentication (MFA)? Multi-Factor Authentication (MFA) refers to an authentication method that necessitates the user to provide more ...
Read More
Read More
Android Penetration Testing with Drozer
Introduction: Drozer is an android application security testing framework which is developed by FSecureLABS that makes it easy for a ...
Read More
Read More
Antivirus Evasion – Part 1
Table of content: Antivirus Basics Introduction to Antivirus Software Antivirus evasion techniques Evading Signatures Evading Scanners Bypassing the Static Engine ...
Read More
Read More
All you need to know about Android WebView Vulnerabilities
What is WebView? The WebView class in android allows you to load remote URLs and display the web page as ...
Read More
Read More
Guide to Identity & Access Management (IAM)
Introduction to Identity & Access Management Identity and Access Management (IAM) defines user identities and permissions. It encompasses the provisioning ...
Read More
Read More
Ransomware and the measures to safeguard an organisation
Ransomware and Its Prevention We are all aware of ransomware, as most of us, or at least someone in our ...
Read More
Read More
Intro to GraphQL – Attack Scenarios
Introduction GraphQL is one of the commonly used open-source manipulation and data query language for APIs, and runtime for implementing ...
Read More
Read More
Mitigating Cross-Site Request Forgery (CSRF) Attacks
What is Cross-Site Request Forgery (CSRF)? Cross-Site Request Forgery (CSRF) is a widely known web security vulnerability that enables a ...
Read More
Read More
WEB CACHE DECEPTION
Introduction: A security researcher, Mr. Omer Gil initially proposed Web cache deception attack in 2017. This attack takes advantage of ...
Read More
Read More
Attacking Android Components – Content Providers
In this blog, I’ll be showing you how we can exploit the android component-based content providers’ vulnerability. What are Content ...
Read More
Read More
Roadmap to FedRAMP Compliance
The basic layman’s concept behind cloud computing technology is that the user does not need to physically manage any server ...
Read More
Read More
