Blog

Planning Your 2019 Cyber Security Budget: A How-To Guide

|by Venu Rao
As we have entered the new year, all of us are busy planning our IT budgets for the year. Have you discovered how to plan your cybersecurity budget for 2019? If not, then let’s investigate some facts and figures as to why cybersecurity should remain the highest priority in creating your IT budget....

A (Very) Brief History of the World Wide Web

|by Leslie Morgan
  Since its creation exactly 30 years ago, the world wide web has completely changed how we interact with our peers, shop, and even find love. Despite originally being created for research purposes, it is now a tool used by nearly every corporate and personal entity on the planet. Entire commun...

Cyber Monday: Prime time to secure your e-commerce business

|by [email protected]
Cyber Monday is the carnival of retailers and consumers. Businesses offer exclusive deals on products and services during this period and shoppers have merry time buying goodies in bulk. However, this is also the time when hackers are active in their business causing security breaches, frauds and wh...

Cyber Security breaches that shook 2018

|by [email protected]
Security breaches are more than someone breaking into a bank or ATM. In the cyber era, breaking into an organization’s systems and getting hold of sensitive data would have as strong an impact as any other major crime would. 2018 was the year of countless cybercrime instances. We have shortlisted ...

Why Should Companies migrate from SDLC to Secure SDLC

|by [email protected]
Security has always been considered a luxury by most enterprises, the majority being SMBs. But looking at the recent sophisticated attacks like Facebook’s Data Hack that almost put 50 million Users at risk, we have learned that hackers have complex attack strategies under their sleeves. This makes...

Why cybersecurity is essential for small businesses

|by [email protected]
Cybersecurity is a common term for every business but how seriously is it taken? Small businesses often have no budget set aside for cybersecurity which means no security team or vendors. It’s a misconception that small businesses go unnoticed by cybercriminals. Small businesses are more vulnerabl...

Persistent XSS to Steal Passwords – Paypal

|by [email protected]
Note: This bug has been reported via Paypal bug bounty program and is fixed now. POC FIRST? There are days when we get to test different applications with third party integrations such as payment gateways, logging etc etc. Same way we got to test one of our client application that uses braintree as ...

XSS by tossing cookies

|by [email protected]
All cross site scripting vulnerabilities cannot be exploited easily and would need a vulnerablity chain to exploit them For example a self XSS that only executes in your profile, here is how whitton used minor OAuth flaws to exploit a cross site scripting in Uber https://whitton.io/articles/uber-tur...