Graphic for blog on OAuth vulnerabilities
Tokens & traps: Seven common OAuth vulnerabilities (plus mitigations)
Application Security
18 Jun 2025
In the world of modern web applications, the OAuth flow is our trusty gatekeeper, enabling seamless logins and secure data...
Thumbnail for CyberFlex (EASM + PTaaS)
How external attack surface analysis enhances pen testing 
Application Security
19 May 2025
Despite advancements in security, web applications are still a problem. Attackers target web applications because they’re exposed, complex, and not...
Blue open lock as symbol for authentification
6 common authentication vulnerabilities in web apps  
Application Security
09 Apr 2025
Authentication is used by most web applications. Both for letting users have access to individual accounts, but also for protecting...
Outpost24 logo
CrushFTP auth bypass vulnerability: Disclosure mess leads to attacks 
Application Security
02 Apr 2025
Outpost24 analysts recently discovered a critical authentication bypass vulnerability in CrushFTP, identified as CVE-2025-31161. The vulnerability has a CVSSv3.1 score...
attack surface EASM
Security through obscurity: An illusion of safety? 
Application Security
26 Feb 2025
Security through obscurity is based on the idea that if attackers don’t know how a system works or even if...