Blog

What is API Security and how to protect them

20.May.2021

APIsec

APIs are a key part of modern web application development transforming how organizations build, manage, and scale their web and mobile services. In this blog we discuss why APIs are the new web application security, highlighting the growing challenges of API security risks and sharing best practices for preventing API attacks.

Debunking the web application attack surface for Credit Unions

14.Apr.2021

Nicolas Renard and Stephane Konarkowski, Security Consultant Outpost24

Financial services are big targets for cybercrime. As the world shifts from physical to online, credit unions are doubling down on web applications to improve access and ensure vital financial services for their members. But with that comes greater security risks. In this benchmark study, we analyze the Top US Credit Unions with our attack surface analysis tool to highlight security weaknesses they should watch out for.

SAST, DAST, SCA: What’s best for application security testing?

30.Mar.2021

Simon Roe, Application Security Product Manager Outpost24

With a 43% rise in data breaches tied to web application vulnerabilities according to Verizon, enterprise security teams are looking more closely at how security controls can be integrated to DevOps without impacting productivity. But with so many automated security testing tools (SAST, DAST, SCA) on the market, it’s important to understand the difference and when to use them to ensure robust Application Security.

4 ways Security and DevOps can collaborate to reduce application vulnerabilities

22.Mar.2021

Secure Code Warrior

A collaborative approach between SecOps and DevOps is key to any successful security integration - particularly as developers and security teams have different priorities from the get-go. In this blog we will share 4 tips for getting developers on board to enable true DevSecOps for your business

What our attack surface study says about top retail applications

03.Feb.2021

Stephane Konarkowski, Senior Security Consultant at Outpost24

Retail and ecommerce web applications are big targets for hackers. Attack surface assessment is important to help build a complete risk profile of web applications and combat opportunistic hackers looking for vulnerabilities to exploit. Here’s how the biggest online retailers fare against the most common application attack vectors

Attack surface analysis explained: The 7 deadly vectors for web application attacks

22.Jul.2020

Stephane Konarkowski, Senior Security Consultant at Outpost24

Modern web applications are complex, it is often made up of many layers where potential flaws could appear making it hard to secure. That’s why it’s important to understand the key attack vectors hackers use to spot entry points and map your attack surface during reconnaissance and work back from there to protect your web application footprint.

How Outpost24 Secures the SDLC

13.Jul.2020

Eren Cihangir, Sales Engineer at Outpost24

At Outpost24, we’re committed to providing information security testing solutions to not only fit seamlessly into the SDLC, but also to enhance our customers’ experiences in implementing and maintaining their best practices to ensure their SDLC leads to a strong security posture and comprehensive resiliency around their full stack.

A CISO’s guide to boosting security awareness and morale in turbulent times

01.Apr.2020

Charlie Eriksen, CTO Adversary

During uncertain times, it’s more important than ever for businesses to install trust amongst their employees to ensure they are maintaining the same strict levels of security as the pandemic has become a hotbed for cyberattacks. CISOs and business leaders are having to scale back staff amidst an outbreak when moving to different working patterns and they’re looking to their existing teams to fly the security flag for their wider businesses.

So what can CISOs do to get the best from their staff during this outbreak to ensure security standards are maintained and we can start hiring again?

Website Security: Magecart and credit card skimming

14.Jan.2020

Simon Roe

Online payment skimming operations run by Magecart criminals continue to intensify and develop, reportedly compromising more than 2 million websites with the most infamous attack involving the breach of British Airways in 2018. Where credit card data of nearly 400,000 BA customers were compromised and resulted in a hefty fine of $230million and the moment the world stood up to take note of this new and dominant threat.

Why shifting left will be key to securing your business in 2020

21.Nov.2019

Charlie Eriksen, CTO Adversary

Increasingly, boardrooms are starting to recognize a simple fact: Being hacked is a question of if, not when. It’s no secret that most companies have experienced some type of data breach, often without their own knowledge. This all adds up to estimates that a cyber-attack occurs every 39 seconds, if you believe such statistics. That puts huge pressure on organizations to decrease the likelihood of not only adding to this statistic, but also fulfilling their data privacy duty they have towards their users, employees and customers.