AI
Estonian firm Blackwall hits $2.2B valuation with new funding for web security
The company raised $100m to help hosts filter AI agents and bots using a partner-focused sales model.
web security
Everything TechWire Beat has reported about web security: 13 stories, newest first. Part of our Vulnerabilities coverage.
AI
Tech News
Should I force HTTPS redirect to secure your web traffic
Forcing encrypted connections can break local development environments and legacy integrations permanently.
Vulnerabilities
Detecting Apache Struts Vulnerabilities: Log Patterns and Blind Spots
Hidden file uploads and unusual content types in web server logs reveal Struts exploitation attempts before payload execution occurs on the server.
Vulnerabilities
CORS Misconfiguration Recovery: Immediate Response and Remediation Steps
A broken origin check allows external sites to read your private data, but the fix requires careful header adjustments to avoid locking out legitimate users.
Vulnerabilities
Cross-Site Scripting Explained: 8 Questions Answered for Secure Code
Cross-site scripting exploits trust in the browser rather than breaking into the server, allowing attackers to hijack user sessions without direct server compromise.
Tech News
website security checklist: verify controls that stop silent data theft
Most breaches bypass perimeter defences by exploiting misconfigured trust relationships rather than breaking encryption algorithms directly.
Vulnerabilities
What Is Parameterized Queries: The Mechanics of Safe Database Access
Parameterized queries separate code from data, ensuring that user input is treated as literal values rather than executable commands within database operations.
Vulnerabilities
Server-Side Request Forgery Prevention Checklist for Secure Code
Blind server-side request forgery attacks often bypass perimeter defences by abusing internal metadata services, making output validation as critical as input filtering.
Vulnerabilities
How SQL Injection Works: The Step-by-Step Attack Lifecycle
SQL injection succeeds because application code treats user input as executable instructions rather than inert data, allowing attackers to bypass authentication or extract hidden database records.
Vulnerabilities
Virtual Patching: Benefits, Limits and When to Use It
Virtual patching stops attacks at the network edge without changing code, but it masks vulnerabilities and adds complexity to your security stack.
Cyber Attacks
How to Stop Drive-By Downloads: Real Prevention Tactics
Blocking the browser is not enough; you must restrict what code is allowed to execute on your system to stop silent infections.
Tech News
Certificate Transparency: Five Common Misreadings Explained
Certificate Transparency does not prevent fraud but exposes it, shifting the burden from prevention to rapid detection and automated response.
Vulnerabilities
Exploit Kits: Correcting Common Misconceptions About Automated Attacks
Exploit kits operate as automated marketplaces for vulnerabilities, making the attack surface a dynamic negotiation rather than a static list of known flaws.