Forced browsing, also called forceful browsing, is an attack technique against badly protected websites and web applications, which allows the attacker to access resources that they should not be able to access. Such resources may contain sensitive information. Forced browsing is a common web application…
Step-by-step configuration with Azure DevOps services
You can integrate your Invicti Premium account with Azure DevOps Services. This integration lets you send all the vulnerabilities discovered using Invicti to Azure DevOps, where you can manage them as issues. This article shows how to set up your Azure DevOps account and how…
Invicti Exhibiting at Global Appsec 2020 Virtual
Invicti will take part in the Global Appsec 2020 Virtual conference, organized by the OWASP Foundation. The conference is a way to engage with the OWASP community, explore education, uncover solutions, network with like-minded AppSec and DevSecOps pros, and geek-out over the Hands-on Special Events…
What Are Open Redirects?
Open redirect is a type of web application security issue that allows attackers to use your business reputation to make phishing attacks more effective. If you allow open redirects, an attacker can send a phishing email that contains a link with your domain name and…
Invicti Exhibiting at Infosecurity Online 2020
Infosecurity Online is the one-stop-shop for the most innovative ideas and networking opportunities in information and cybersecurity. You can find us by navigating to the Invicti Infosecurity Online virtual booth on October 20-22, 2020. Our team will be available to discuss the latest automated features…
The Importance of Validating Fixes – Lessons from Google
Zohar Shachar, an Israeli security researcher, recently revealed the details of a bounty that he received approximately a year ago from Google. The security issue that he found was an advanced cross-site scripting (XSS) vulnerability in Google Maps. There was one detail about this case…
New Research Reveals Companies Are Losing the Web Application Security War
Half of organizations say that vulnerabilities are found faster than they can be fixed AUSTIN, Texas – Sept. 22, 2020 – Invicti, a global leader in automated web application security testing, teamed up with Dimensional Research to learn how effectively companies are handling web application…
How Well Are Enterprises Handling Web Application Security?
Enterprises are continuously battling criminals on many fronts. It’s an all-out war against enemies that are well-hidden and remain unpredictable. And the stakes are high – an effective, multi-stage attack can cripple the business or even lead to its complete downfall. Fortunately, most enterprises now…
Security Misconfigurations and Their Consequences for Web Security
The term security misconfiguration is very generic and applies to any security issue that is not a result of a programming error but a result of a configuration error. Security misconfigurations have been defined as a separate category in the 2017 OWASP Top-10 list (category…