February 13, 2024
XML External Entity (XXE): How to Identify and Fix Vulnerabilities
XML External Entity (XXE) is a vulnerability where attackers exploit XML parsers to access sensitive files, trigger DoS, or run remote code via malicious input
Listen to the latest episode of Guardians of the Enterprise for insights from cyber leaders - click here
XML External Entity (XXE) is a vulnerability where attackers exploit XML parsers to access sensitive files, trigger DoS, or run remote code via malicious input
Zero-day vulnerabilities refer to unpatched flaws exploited by attackers before fixes, posing significant security risks to both software and hardware.
Explore SwyftComply: AppTrana WAAP’s autonomous patch feature ensuring zero vulnerability reports to meet compliance with SOC 2, PCI, and more, all in 72 hours.
A SYN flood is a type of DDoS attack where the attacker overwhelms a server with excessive SYN requests, causing resource exhaustion and service disruption.
Secure your Indusface WAS vulnerability scan with our guide to URL verification. Confirm ownership and prevent unauthorized access in 3 simple methods
vulnerability. An attacker may exploit this issue to execute arbitrary commands or code in the context of the webserver. This may facilitate various attacks
The Apache OfBiz ERP system is found to have a zero day flaw (CVE-2023-51467) that may lead to unauthorized access. Explore the impact & patch details.
The volume, size, sophistication, and impact of website security threats are fast increasing, making their prevention imperative. Read more.
The latest vulnerability CVE-2023-50164 disclosed on Apache Struts affects the Struts 2 framework’s file upload logic, allowing unauthorized path traversal.
The Zimbra XSS vulnerability allows an attacker to impact the confidentiality and integrity of the user’s data. Understand how to find & fix this flaw.
CISOs must prepare for top challenges, including LLMs threats, quantum computing, the security-UX trade-off, and alignment with technological advancements
API security is the process of securing APIs owned by the organization and external APIs used by implementing security strategies.
Indusface is the only cloud WAAP (WAF) vendor with 100% customer recommendation for 4 consecutive years.
A Customers’ Choice for 2024, 2023 and 2022 - Gartner® Peer Insights™