Recent Searches

Home
Making the Right AppSec Decisions
Webinar: Public Sector Digital Transformation and Secure Software

Webinar: Public Sector Digital Transformation and Secure Software

Fill form to unlock content

Loading, please wait

Error - something went wrong!

Watch the Webinar

Thank you!

Previous Video

Webinar: US Public Sector ICIT - DevSecOps Readiness
Next Video

On the Road: Ep.3 | Security Education for Developers

Recommended Resources

“CuteBoi” Detected Preparing a Large-Scale Crypto Mining Campaign on NPM Users

Over a thousand packages and users were created on NPM using an automated process in the past few days. Is it a phase one of an upcoming attack? Checkmarx SCS team detected over 1200 npm packages...

Read Now
Considerations and Steps for Adopting Managed AppSec Security Tests

To outsource or not to outsource: that is the question. At least, that’s one question you may be asking yourself if you’re trying to decide how to optimize your business’s approach to application...

Read Now
Open Source Software Supply Chain Risks and Attack Vectors: How Checkmarx Can Help

A good developer is an efficient developer and part of being an efficient developer is not re-inventing the wheel for every project or solution. As a result, many of us leverage the benefits of...

Read Now
Amazon Confirmed and Fixed a High Severity Vulnerability of Broken Authentication in Amazon Photos Android App

Our research team at Checkmarx found that the Amazon Photos Android app could have allowed a malicious application, installed on the user’s phone, to steal their Amazon access token. The Android...

Read Now
Spring Function Cloud DoS (CVE-2022-22979) and Unintended Function Invocation

2 security issues found on spring function cloud. The Spring Framework application provides a flexible and comprehensive method for programming and configuring Java-based enterprise applications....

Read Now
Checkmarx Fusion - Why Correlation Matters

Watch Now
Solution Brief – Checkmarx One Application Security Platform

Read Now
How to Get a Pragmatic AppSec Program in Place? …at the Speed of DevOps and Agile!

In recent blog posts we discussed the need for AppSec programs and which frameworks are available to build a program. At Checkmarx we view it as the utmost importance that our customers get the...

Read Now
KPIs and Other Metrics for Measuring the Impact of Outsourced AppSec Testing

Deciding to outsource application security testing to a managed service provider is one step toward simplifying your AppSec testing strategy and improving the impact of test results. But simply...

Read Now
NPM Replicator Remote Code Execution Deserialization

NPM, the package manager for Node.js, is an open source project that serves as a critical part of the JavaScript community and helps support one of the largest developer ecosystems. According to...

Read Now
New Technique Used by Attackers in NPM to Avoid Detection

Checkmarx SCS team recently detected several malicious NPM packages using a new evasion technique, enhancing dependency confusion attacks to help malicious packages avoid detection. This novel...

Read Now
Solution Brief-FUSION-Checkmarx Correlation Engine

Read Now
The Case for Correlation in the World of AppSec Testing

Most developers and AppSec pros understand the value of Application Security Testing. From running security scans early during software development to running a final scan after an application...

Read Now
Key Considerations for Building a Proper AppSec Program for Modern Application Development

Many firms’ security efforts are focused solely on deploying technologies, applying “best practices,” and responding to a never-ending stream of security alerts and threats. As a result, security...

Read Now
Banking on the Cloud - The challenges and opportunities of the cloud transition

Read Now
GitHub RepoJacking Weakness Exploited in the Wild by Attackers

A logical flaw in GitHub allows attackers to take control over thousands of repositories, enabling the poisoning of popular open-source packages. This flaw is yet to be fixed and the steps to...

Read Now
Attacker Caught Hijacking Packages Using Multiple Techniques to Steal AWS Credentials

What Happened? Multiple supply chain attacks from the same attacker were reported today by s0md3v. (1) PHP package hautelook/phpass with over 2.5 million installations was hijacked using the...

Read Now
ESG Highlights Software Supply Chain Security

Open Source Software is an established part of modern application developmentSupply Chain Security presents challenges which Application Security Testing must addressSolutions include new...

Read Now
Open Source Licenses – Insights and Metrics

Every developer and organization which uses open source dependencies in their code should know what open source licenses are and what are the risks that an organization faces when using open...

Read Now
ESG Showcase - Comprehensive Open Source Supply Chain Security: Going Beyond SCA and SBOMs

Read Now

Return to Home