Security Threat Model Review of the Apple Child Safety Features [pdf]
apple.comDownload PDF
security
Node.js Security – OWASP Cheat Sheet Series
cheatsheetseries.owasp.orgIntroduction This cheat sheet lists actions developers can take to develop secure Node.js applications. Each item has a brief explanation and solution that is specific to the Node.js environment. Context Node.js applications are increasing in number and they are no … Read more
A case against security nihilism
blog.cryptographyengineering.com
This week a group of global newspapers is running a series of articles detailing abuses of NSO Group’s Pegasus spyware. If you haven’t seen any of these articles, they’re worth reading — and likely will continue to be so as … Read more
The SaaS CTO Security Checklist Redux
goldfiglabs.com
Doing the basics goes a long way in keeping your company and product secure. This third1 edition of the SaaS CTO Security Checklist provides actionable security best practices CTOs (or anyone for that matter) can use to harden their security. … Read more
Security Issues with LastPass on Android
abhyudaya.dev
LastPass’ Android app is one of the most downloaded passwords managers on the Play Store with over 10 million installations. I investigated security issues with the app for my capstone project. Here are some of the biggest problems I found … Read more
Security keys are now supported for SSH Git operations
github.blog
GitHub has been at the forefront of security key adoption for many years. We were an early adopter of Universal 2nd Factor (“U2F”) and were also one of the first sites to transition to Webauthn. We’re always on the lookout … Read more
Security researcher found Wi-Fi vulnerabilities that existed since the beginning
theverge.com
The security researcher who discovered the Krack Wi-Fi vulnerability has discovered a slew of other flaws with the wireless protocol most of us use to power our online lives (via Gizmodo). The vulnerabilities relate to how Wi-Fi handles large chunks … Read more
CSRF, CORS, and HTTP Security Headers Demystified
blog.vnaik.comWith an increasing number of breaches, intrusions, and data thefts, securing a web application is extremely important. On the other hand, programmers often do not have a strong grasp of how attacks work and how to mitigate them. This post … Read more
Security Breach at US Universities
dorper.meUS universities have been affected by a major data breach. A massive data breach has hit US Universities including Stanford University, University of California, University of Miami, University of Colorado Boulder, Yeshiva University, Syracuse University, and University of Maryland. Hackers … Read more
The S in IoT is for Security
puri.sm
Todd Weaver Founder and CEOPGP Fingerprint: B8CA ACEA D949 30F1 23C4 642C 23CF 2E3D 2545 14F7 Latest posts by Todd Weaver (see all) Recently I was given two LED desk lamps to improve lighting for video meetings, these are just … Read more