The future of cybersecurity: DAST solutions, SBOMs, and APIs to take center...
We all wish we had a cybersecurity crystal ball that would give us deep insight into what’s coming next. From fresh exploits to new attack vectors, things change fast – and those sudden ebbs and flows...
View ArticleInvicti’s automated DAST turns heads at it-sa Expo&Congress 2022
At the end of October 2022, the Invicti crew attended it-sa Expo&Congress – one of the biggest IT security events in Germany and Europe in general. Among the many excellent conversations with...
View ArticleWhat you should know about cloud workload protection platforms (CWPP)
The transition to the cloud – and the accompanying transformation in the way applications are developed and deployed – created a need for new security tools. Cloud workload protection platforms (CWPP)...
View ArticlePath traversal in Java web applications – announcing the Invicti technical paper
Path traversal/directory traversal vulnerabilities allow malicious hackers to abuse user input to access files on the web server or the application server and obtain sensitive information. The most...
View ArticleClik here to view.
OpenSSL 3.0.0–3.0.6 vulnerabilities: Less Heartbleed, more paper cut
Invicti’s Chief Technology Officer and Head of Security Research, Frank Catucci, co-authored this article. Invicti has assessed the risk to its hosted products Invicti Enterprise (formerly Netsparker)...
View ArticleCybersecurity awareness is for life, not just for October
For the past 30 days, you’ve likely been inundated with topical reminders about the importance of cybersecurity in all its shapes and aspects. Now, as Cybersecurity Awareness Month draws to a close,...
View ArticleClik here to view.
Invicti Malta Cybersecurity Roadshow 2022 at MCAST
At Invicti, we want to be a pillar of the local community, wherever that might be. Our local teams feel driven to give back to communities and embark on initiatives that help us meet this goal. We...
View ArticleVulnerabilities a routine part of web application releases, survey finds
Teaming up once again with Wakefield Research for the Fall 2022 edition of the Invicti AppSec Indicator, we’ve found that 74% of companies frequently or routinely release software that contains...
View ArticleClik here to view.
New research finds 73% of organizations will increase AppSec investment in 2023
In difficult economic times with the increased risk of bad-actor threats, it’s critical that organizations prioritize investing in zero noise, modern AppSec solutions that demonstrate ROI with...
View ArticleGuide: Rethinking application security risk for federal agencies
Under pressure to comply with security mandates and make rapid improvements to their security posture, federal organizations are looking for solutions and approaches that combine broad visibility with...
View ArticleHTTP security headers: An easy way to harden your web applications
What are HTTP security headers? HTTP security headers are a subset of HTTP headers that is related specifically to security. They are exchanged between a client (usually a web browser) and a server to...
View ArticleClik here to view.
Invicti Security Gains Momentum; Delivers Zero Noise Approach to AppSec
On the heels of Log4Shell and steady security incidents, it is critical that teams don’t get lost in the noisy landscape of Cybersecurity Awareness Month and instead focus on the ROI of AppSec...
View ArticleState and Local Cybersecurity Grant Program requirements are here, and...
In May of 2021, the Biden Administration issued its Executive Order on Cybersecurity and began the process of guiding agencies toward improving their security posture. Since then, the government has...
View ArticleLet’s stop the noise around false positives
In cybersecurity, we’re obsessed with false positives, whether we’re identifying or avoiding them. As with so much industry jargon, the term is wearing thin, to the point that vendor claims of lower...
View ArticleClik here to view.
October 2022 update for Invicti Enterprise on-premises
We’re delighted to announce the release of Invicti Enterprise On-Premises 2.4. The new release rolls together a wide range of updates and improvements, most notably the Business Logic Recorder, Azure...
View ArticleClik here to view.
Insecure coding workshop: Analyzing GitHub Copilot suggestions
Since it was introduced, GitHub Copilot has already saved developers thousands of hours by providing AI-powered code suggestions. Copilot suggestions are definitely useful, but they were never...
View ArticleInvicti exhibiting at it-sa Expo and Congress 2022
We’re thrilled to be exhibiting at it-sa Expo and Congress for the first time, taking place on October 25th–27th 2022 in Nuremberg, Germany. This event is undoubtedly one of the largest in the...
View ArticleClik here to view.
How cybersecurity frameworks apply to web application security
A cybersecurity framework provides a formal and comprehensive set of guidelines to help organizations define their security policies, assess cybersecurity posture, and improve resilience....
View ArticleClik here to view.
September 2022 update for Invicti Enterprise On-Demand
We’re delighted to share the September 2022 update for Invicti Enterprise On-Demand. The highlights of this release are the improved Jira integration and a new reports option in the Jenkins...
View ArticleSo you think cross-site scripting isn’t a big deal?
Cross-site scripting (XSS) vulnerabilities have always been the most numerous class of web application security issues. They are easy to introduce but much harder to find and remediate, which...
View Article
