Today, the Git project released a series of security patches to address multiple security vulnerabilities in versions 2.24 and older. Read more: https://github.blog/2019-12-10-multiple-git-vulnerabilities-in-2-24-and-older/
Security
Podcast: Searching For The Next Frontier with Chris Dixon
This week we chat with Chris Dixon, a general partner at Andreessen Horowitz, where he helps lead its Crypto Fund. Dixon and a16z are now launching a new Crypto Startup School devoted to Read More
Chrome 0-day exploit CVE-2019-13720 used in Operation WizardOpium
Kaspersky Exploit Prevention is a component part of Kaspersky products that has successfully detected a number of zero-day attacks in the past. Recently, it caught a new unknown exploit for Read More
A simple <img> tag can cost a fortune for business
Real security vulnerabilities always speak louder. Today we’re going to talk about SSRF attack that allows hackers to send any network requests from the back-end server by using <img> tags. Read More
Nasty PHP7 remote code execution bug exploited in the wild
A recently patched security flaw in modern versions of the PHP programming language is being exploited in the wild to take over servers, ZDNet has learned from threat intelligence firm Read More
We’re all at risk when 65% of stressed-out cybersecurity and IT workers are thinking about quitting, tech exec warns
A recent report found that the average tenure of a chief information security officer (CISO) is only 18 to 24 months, citing constant stress and urgency of the job as the core Read More
Policy based authorization in ASP.NET Core
While authentication is to validate a user, authorization is to grant access to a resource of the application. We all heard about role-based authorization, which provides access to the resources Read More
Copycat coders create ‘vulnerable’ apps
Lazy developers who copy solutions to tricky programming problems are creating apps that are vulnerable to attack, research suggests. A team of computer scientists looked at more than 72,000 chunks of Read More
Build security into your next website
If you wanted to send a secret message by mail, would you rather send it in an envelope, or on a postcard? If you send it on a postcard, anyone Read More
Password Rules Are Bullshit
Of the many, many, manybad things about passwords, you know what the worst is? Password rules. Read more: https://blog.codinghorror.com/password-rules-are-bullshit/