
Everything you need to know about Prototype Pollution
Intro Prototype Pollution is a vulnerability that allows attackers to exploit the rules of the JavaScript programming language, by injecting properties into existing JavaScript language
Intro Prototype Pollution is a vulnerability that allows attackers to exploit the rules of the JavaScript programming language, by injecting properties into existing JavaScript language
With applications driving the global economy, developers are under pressure to deliver software and more features at an unprecedented scale and speed. While no developer
Last week I had the pleasure of presenting at the Pittsburgh Cybersecurity day in partnership with ISACA. It was exciting to see more than 250
DevOps teams have become successful in releasing code at speed, whether for webapps or APIs, but with the lack of testing automation, are releasing vulnerabilities
While security professionals pay significant attention to technical vulnerabilities such as SQL Injection, CSRF and Cross-Site Scripting, modern applications are just as susceptible to business
Bright’s ability to work with modern technology stacks and API security testing now includes full support for GraphQL APIs, enabling our customers to simplify, automate
Regardless of the maturity of your development and security processes / methodologies, integrating security testing automation into your API development pipelines is a struggle. With
Has your website been hacked? Don’t panic! We prepared a simple list of steps for you to follow to recover it. Even if your website
In our last post we talked about SAST solutions and why they are not always the best solution for AST. In this blog post, we
We at Bright are very proud to announce that we have been awarded the accredited certification on ISO 27701, the international standard on data privacy.
Intro Cross-site scripting (XSS) is an old but always relevant and dangerous type of attack that plagues almost all web applications, be it older or
Webomates, the leading global provider of Testing as a Service & Bright which provides a modern-day DAST solution enabling organizations to drive compliance on every
WordPress has many advantages and is not without reason the most popular way to build a website, with 60% of pages on the web based
The hotel giant Marriott confirmed a new data breach, this time involving the personal information of 5.2 million guests. According to an online notice that
Microsoft warned billions of Windows users of two critical 0-day vulnerabilities in all currently supported versions of Microsoft Windows, both server and desktop. These vulnerabilities
© 2022 Bright Security Inc. All Rights Reserved