The tools we have to secure web applications from attacks exploiting vulnerabilities and misconfiguration are still missing the mark when it comes to securing application infrastructure. Find out what's needed for Application Security today.
HomeTagowasp Archives - K2io
Tag
Entries Tagged " owasp "
If you're new to Application Security, you may be confused by the different terminology and where exactly Application Security fits relative to all the different phases of application development and during runtime of applications.
A Ponemon study released in 2019 showed that satisfaction with WAFs (Web Application Firewalls) is at 40 percent, and effectiveness of WAFs rated at only 43 percent.
The final numbers for reported vulnerabilities in 2020 are published. We covered the news when the number of vulnerabilities recorded hit a record for the fourth year in a row. The US-CERT Vulnerability Database keeps track of new vulnerabilities in production code as they are discovered and assigns each unique vulnerability with a "CVE" number.
Back in June of 2020 we wrote about Forrester's new 2020 State of Application Security report. Back then we focused on the finding that application vulnerabilities were the weakest link in application security. In this post, we'll talk about the finding that 35% of all external attacks on organizations occurred through a web application,
On December 15, 2020 we just hit another milestone with the number of vulnerabilities recorded in the US CERT Vulnerability Database (so far in 2020) exceeding the total count in 2019, marking a fourth record year of vulnerabilities discovered in production code.
The OWASP Top 10 Web Application Security Risks has become synonymous with web application security. Learn who OWASP is and where the top 10 list began and the other resources OWASP has to offer.
For a threat that's been around since the inception of the OWASP Top 10 list, it should be troubling that 26 percent of all small businesses have suffered from a SQL Injection attack in the last year, yet according to a recent article it remains one of the least-talked about threats to organizations.
Cross-site scripting has been around longer than most security professionals have been on the job. Why is it still such an issue when we've known about it for so long?
Wordfence analysts reported that around 20 million attacks targeted over 900,000 Wordpress sites on May 3, 2020.