ImmuniWeb Security Blog

Broken Access Control is #5 in the current OWASP Top Ten Most Critical Web Application Security Risks. It should be viewed in conjunction with Broken Authentication, currently the ...

XML External Entities (XXE or XML injection) is #4 in the current OWASP Top Ten Most Critical Web Application Security Risks.

Sensitive data exposure is #3 in the current OWASP top Ten Most Critical Web Application Security Risks.

HTTP Security Headers were created to protect applications from frequent and common attacks without the need to add or change the code of your applications.

User authentication – the process of ensuring only authorized users have access to controlled data and functionality – is the fundamental cornerstone of web and application ...

Toward the end of 2015, UK broadband provider TalkTalk was hacked by a 17-year old youth. The method he used was SQL injection attack (SQLi) – an attack method that is older ...

Dr. Jean-Marc Rickli, Head of Global Risks and Resilience at GCSP, explains the future of AI, related risks and opportunities.

Robin Wilton, Technical Director for Identity and Privacy at the Internet Society, provides expert opinion on the hottest cybersecurity, privacy and regulations topics.

XML External Entities (XXE) Attacks are now the 4th greatest risk to web applications as per OWAPS Top 10.

Security of microservices and APIs: the Achilles' heel of modern web applications.

What application developers should know about secure coding and proactive security? Improve the security of your applications from the start with these 10 controls!

Unusual BGP/DNS attack sees ETH users scammed, while it emerges that hacked exchange Coincheck made a fortune just before major security lapse