cheatsheetseries.owasp.org
Content Security Policy Cheat Sheet
Website with the collection of all the cheat sheets of the project.
Pamella Bezerra
Lessons about Security (page 2)
The links, tools and tips our engineers and designers share with each other, one “today I learned” at a time.
- lessons shared
- 68
- people sharing
- 19
- database started in
- 2016
Tech Insights· cheatsheetseries.owasp.org
Content Security Policy Cheat Sheet
From cheatsheetseries.owasp.org
Website with the collection of all the cheat sheets of the project.
Shared by
Read on cheatsheetseries.owasp.org- Security
- Web
Tech Insights· pypi.org
A tool for scanning Python environments for known vulnerabilities:
Shared by
Read on pypi.org- Dependencies
- Pip
- Python
- Security
developer.okta.com
An Overview of Best Practices for Security Headers:
Security headers instruct browsers how to behave and prevent them from executing vulnerabilities that would endanger your users. Learn how to use them in this tutorial.
Flavio Juvenal
Tech Insights· developer.okta.com
An Overview of Best Practices for Security Headers:
From developer.okta.com
Security headers instruct browsers how to behave and prevent them from executing vulnerabilities that would endanger your users. Learn how to use them in this tutorial.
Shared by
Read on developer.okta.com- Security
- Web
expeditedsecurity.com
API Security Best Practices MegaGuide:
Learn how to secure your API. Best practices for OAuth, REST, DDoS, Attack Mitigation and Design.
Flavio Juvenal
Tech Insights· expeditedsecurity.com
API Security Best Practices MegaGuide:
From expeditedsecurity.com
Learn how to secure your API. Best practices for OAuth, REST, DDoS, Attack Mitigation and Design.
Shared by
Read on expeditedsecurity.com- API
- Security
infracloud.io
Top 10 Container Security Best Practices
Enterprise technology built on trust. Improving delivers AI, Data, and Application expertise with practitioners who stay, a proven maturity model, and a global footprint across 21 offices.
Gustavo Carvalho
Tech Insights· infracloud.io
Top 10 Container Security Best Practices
From infracloud.io
Enterprise technology built on trust. Improving delivers AI, Data, and Application expertise with practitioners who stay, a proven maturity model, and a global footprint across 21 offices.
Shared by
Read on infracloud.io- Docker
- Security
security.stackexchange.com
May HSTS block access to your site when you renew your SSL certificate?
Flavio Juvenal
Tech Insights· security.stackexchange.com
May HSTS block access to your site when you renew your SSL certificate?
Shared by
Read on security.stackexchange.com- Hsts
- Https
- Security
news.ycombinator.com
Stop using your work laptop or phone for personal stuff (HN discussion):
Flavio Juvenal
Tech Insights· news.ycombinator.com
Stop using your work laptop or phone for personal stuff (HN discussion):
Shared by
Read on news.ycombinator.com- Security
- Worklife
jacobian.org
Data Breach Investigations Report Highlights:
The 2021 edition of Verizon’s Data Breach Investigations Report (DBIR) is out. I read the DBIR every year; it’s one of the only analyses of real-world security failures that approaches any sort of scientific rigor. Here are some of the highlights from the 2021 edition, along with my commentary.
Rebeca Sarai
Tech Insights· jacobian.org
Data Breach Investigations Report Highlights:
From jacobian.org
The 2021 edition of Verizon’s Data Breach Investigations Report (DBIR) is out. I read the DBIR every year; it’s one of the only analyses of real-world security failures that approaches any sort of scientific rigor. Here are some of the highlights from the 2021 edition, along with my commentary.
Shared by
Read on jacobian.org- Security
simonwillison.net
Why you shouldn't use ENV variables for secret data:
I do this all the time, but this article provides a good set of reasons that secrets in environment variables are a bad pattern - even when you know there's …
Rebeca Sarai
Tech Insights· simonwillison.net
Why you shouldn't use ENV variables for secret data:
From simonwillison.net
I do this all the time, but this article provides a good set of reasons that secrets in environment variables are a bad pattern - even when you know there's …
Shared by
Read on simonwillison.net- Env
- Security
adamj.eu
Safely Including Data for JavaScript in a Django Template
Django templates are often used to pass data to JavaScript code. Unfortunately, if implemented incorrectly, this opens up the possibility of HTML injection, and thus XSS (Cross-Site Scripting) attacks.
Filipe Ximenes
Tech Insights· adamj.eu
Safely Including Data for JavaScript in a Django Template
From adamj.eu
Django templates are often used to pass data to JavaScript code. Unfortunately, if implemented incorrectly, this opens up the possibility of HTML injection, and thus XSS (Cross-Site Scripting) attacks.
Shared by
Read on adamj.eu- Django
- Security
r2c.dev
Not all attacks are equal: understanding and preventing DoS in web applications
An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.
Filipe Ximenes
Tech Insights· r2c.dev
Not all attacks are equal: understanding and preventing DoS in web applications
From r2c.dev
An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.
Shared by
Read on r2c.dev- Security
Tech Insights· github.com
RESTler is a stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
Shared by
Read on github.com- Fuzzer
- Rest
- Security
Tech Insights· fugue.co
Building a Secure Amazon S3 Bucket (AWS):
Shared by
Read on fugue.co- AWS
- S3
- Security
Tech Insights· github.com
The OWASP Top 10 is a standard awareness document for developers and web application security. It represents a broad consensus about the most critical security risks to web applications
Shared by
Read on github.com- Security
- Software Engineering
- Web
ieeexplore.ieee.org
Engineering Security Vulnerability Prevention, Detection, and Response
Pamella Bezerra
Tech Insights· ieeexplore.ieee.org
Engineering Security Vulnerability Prevention, Detection, and Response
Shared by
Read on ieeexplore.ieee.org- Security
- Software Engineering
Book a call
Found it useful?
Let’s put it to work.
Tell us about your product and the problem in front of you. We’ll bring what we’ve learned on real projects.
Tell us about your product, and we’ll bring what we’ve learned.
Still prefer the good old email? Contact us
