Crashtest Security @CrashtestSec

Crashtest Security is a DAST vulnerability scanner helping you automate your security scanning and achieve protection at #DevOps speed. #cybersecurity #SaaS crashtest-security.com München, Bayern Joined October 2015

Tweets

667
Followers

241
Following

144
Likes

37

Crashtest Security @CrashtestSec

4 years ago

Download this prevention guide and learn about the importance of security logging and monitoring, the impacts of logging failures, prevention strategies, and best practices to avoid logging failures. hubs.ly/Q01s9_vl0 #cybersecurity #devsecops #devops #logging

0 0 1 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

#CAArecord stands for Certificate Authority Authorization record. It can also be called DNS CAA, CAA DNS record, or CAA certificate. Let’s get an overview of a CAA record, its purpose, and how to handle missing SSL CAA records. hubs.ly/Q01sb3mh0 #cybersecurity #devops

0 0 1 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

Download our latest prevention guide and learn about the software and data integrity failure vulnerability, typical examples, its impact, and possible prevention strategies. hubs.ly/Q01s9tHV0 #cybersecurity #devops #devsecops

0 1 1 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

#CertificateRevocation refers to revoking a digital certificate before its expiration date. Here’s everything about certificate revocation, when it may be necessary, and how it is performed. hubs.ly/Q01s9yLP0 #cybersecurity #devsecops #devops

0 1 4 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

Learn what #dependencyconfusion relates to in modern application delivery, how it can lead to security vulnerabilities, and recommended practices to mitigate such vulnerabilities. hubs.ly/Q01s9ssD0 #cybersecurity #devops #devsecops

0 0 3 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

Identification and authentication help secure a digital framework’s perimeter as the first line of defense. Learn everything you need to know about identification and authentication failures and their prevention measures. hubs.ly/Q01s9rJN0 #cybersecurity #devops #devsecops

0 2 5 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

Watch our latest video and learn why organizations should embrace #AutomatedVulnerabilityScanning and various scanning mechanisms. It also lists some of the most popular automated #VulnerabilityScanners: hubs.ly/Q01shVvR0 #cybersecurity #devops #devsecops

0 1 3 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

To configure #trustedcertificates, you need to know what certificate authority is and its role in issuing certificates. Learn more about certificate authorities, trusted #SSLcertificates, and the dangers of untrusted certificates. hubs.ly/Q01s94yw0 #cybersecurity #devops

0 0 2 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

In a #StoredXSS attack, the vulnerable web application receives user-supplied input from untrusted sources and stores it. Watch our latest video and learn everything you need to know about stored XSS attacks: hubs.ly/Q01rWG7h0 #xss #cybersecurity #devops #devsecops

0 0 3 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

The CRIME (Compression Ratio Info-Leak Made Easy) attack is a vulnerability that can leave cookie data vulnerable to session hijacking. Here's all about the CRIME vulnerability and how you can prevent it from affecting your systems: hubs.ly/Q01rFgFS0 #cybersecurity #devops

0 0 3 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

#CORS ensures security by controlling how resources are requested and loaded from an external domain. However, several factors can leave a CORS implementation vulnerable to cyberattacks. Learn everything about CORS misconfiguration vulnerabilities: hubs.ly/Q01rgtpT0 #devops

0 0 2 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

Insecure network services can open a whole network infrastructure to security risks and compromise, including malware, DoS, MitM attacks, and more. Learn what #InsecureNetworkServices are and what measures you can take. hubs.ly/Q01rcMH40 #cybersecurity #devops #devsecops

0 1 2 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

Modern web apps and browsers have various mechanisms and features to provide greater security, such as the #SameOriginPolicy. Watch our latest video and learn everything you need to know about #SOP. hubs.ly/Q01rcFCc0 #cybersecurity #devops #devsecops

0 0 3 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

Apps that add user input to SQL statements without adequate validation are typically one of the most common targets of #sqlInjection Union attacks. Learn how such attacks are executed, their various forms, and prevention strategies. hubs.ly/Q01rg2nJ0 #cybersecurity #sql

0 0 2 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

CVE-2018-13379 is a path traversal vulnerability that affects older versions of Fortinet, FortiOS, and FortiProxy. Learn how it exploits #directorytraversal attacks, common exploitation techniques, and practices to prevent attacks. hubs.ly/Q01rcs3j0 #cybersecurity #devops

0 0 3 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

Successful #DROWN attacks can result in the theft of sensitive communications and data, such as emails, instant messages, personal authentication credentials, and financial data like credit card numbers. Here's how you can prevent it hubs.ly/Q01r0ScX0 #cybersecurity #devops

0 0 2 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

Given the increasing importance of data privacy, federal agencies and industry regulatory bodies issue guidance and focused regulations on safeguarding sensitive data. Learn all about the aspects of #SaaS companies' regulatory and #compliance programs: hubs.ly/Q01qWRpp0

0 0 2 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

What is the difference between #singlepage and #multipage applications? What are the benefits of each approach, and when should you opt for one or the other? Here’s what you need to know about SPAs and MPAs! hubs.ly/Q01qWWPL0 #cybersecurity #devops #devsecops

0 0 2 0 1

View Details

Crashtest Security @CrashtestSec

4 years ago

#FalseDataInjection attacks are one form of data attack orchestrated when adversaries can alter the original measurements supplied by sensors, affecting the control center’s computational capability. Learn everything you need to know about the #FDIA: hubs.ly/Q01qWTJ80

0 0 2 0 0

View Details

Crashtest Security @CrashtestSec

4 years ago

In 2021, #OWASP published a new list with the latest top 10 threats. Number four on this list is insecure design. Watch our latest video and learn everything about #insecuredesign flaws, potential impacts, and mitigation strategies. hubs.ly/Q01qLxN20 #cybersecurity #devops