Blog

Account Takeover Vulnerability in Azure’s API Management Developer Portal

08.Mar.2023

Tom Stacey, Application Security Auditor

How an Account Takeover vulnerability, discovered during a routine customer engagement, became a candidate for responsible disclosure, via the Microsoft Security Research Center Researcher Portal.

How to find and fix jQuery vulnerabilities

13.Feb.2023

Using an outdated jQuery library can open up your web application to vulnerabilities. Read more to find out how to find and fix jQuery vulnerabilities.

The importance of application security: keeping your web apps safe

13.Sep.2022

Web application security is crucial for any organization that relies on web-based applications. Learn about the importance of web application security and best practices for keeping your organization safe.

OWASP Top 10 2021 is out - what's new and changed

24.Sep.2021

Simon Roe, Product Manager Outpost24

It doesn’t seem that long ago that I wrote about the OWASP Top 10 changes that came in 2017. OWASP has announced the release for the new 2021 Top 10. Find out more about Broken Access Control and Cryptographic Failure vulnerabilities and understand what it means for application development and DevSecOps

Mapping the Attack Surface for Insurance Applications

02.Aug.2021

Stephane Konarkowski & Nicolas Renard, Presales Managers at Outpost24

As insurance organizations look to attract and engage customers, the growing use of web applications has increased their cyber exposure and the risks of cyberattacks. In this benchmark study, we analyzed the attack surface of the top 10 insurers in Europe to highlight the common attack vectors and security weaknesses that could be exploited – from page creation method to vulnerable components – and our top tips for reducing web application security risks.

What is API Security and how to protect them

20.May.2021

APIsec

APIs are a key part of modern web application development transforming how organizations build, manage, and scale their web and mobile services. In this blog we discuss why APIs are the new web application security, highlighting the growing challenges of API security risks and sharing best practices for preventing API attacks.

Debunking the web application attack surface for Credit Unions

14.Apr.2021

Nicolas Renard and Stephane Konarkowski, Security Consultant Outpost24

Financial services are big targets for cybercrime. As the world shifts from physical to online, credit unions are doubling down on web applications to improve access and ensure vital financial services for their members. But with that comes greater security risks. In this benchmark study, we analyze the Top US Credit Unions with our attack surface analysis tool to highlight security weaknesses they should watch out for.

SAST, DAST, SCA: What’s best for application security testing?

30.Mar.2021

Simon Roe, Application Security Product Manager Outpost24

With a 43% rise in data breaches tied to web application vulnerabilities according to Verizon, enterprise security teams are looking more closely at how security controls can be integrated to DevOps without impacting productivity. But with so many automated security testing tools (SAST, DAST, SCA) on the market, it’s important to understand the difference and when to use them to ensure robust Application Security.

4 ways Security and DevOps can collaborate to reduce application vulnerabilities

22.Mar.2021

Secure Code Warrior

A collaborative approach between SecOps and DevOps is key to any successful security integration - particularly as developers and security teams have different priorities from the get-go. In this blog we will share 4 tips for getting developers on board to enable true DevSecOps for your business

What our attack surface study says about top retail applications

03.Feb.2021

Stephane Konarkowski, Senior Security Consultant at Outpost24

Retail and ecommerce web applications are big targets for hackers. Attack surface assessment is important to help build a complete risk profile of web applications and combat opportunistic hackers looking for vulnerabilities to exploit. Here’s how the biggest online retailers fare against the most common application attack vectors