Articles Tagged “Vulnerability”
3 articles tagged “Vulnerability”, newest first.
-
Registered Information Security Specialist Exam, Spring 2024 (Reiwa 6) PM Q1 Commentary — JWT alg=none, API Authorization, and Interim WAF Mitigation
Using the Registered Information Security Specialist Examination's Spring 2024 (Reiwa 6) PM Q1 as a case study, this article explains JWT's alg=none, API aut...
-
Registered Information Security Specialist Exam, Autumn 2023 (Reiwa 5) Afternoon Q1 Commentary — The Stored XSS Where 16 Reviews Show Up as Only 2
Using Question 1 from the afternoon session of the Autumn 2023 (Reiwa 5) Registered Information Security Specialist Examination as the case study, this artic...
-
What Website Clients Should Know Too — Using IPA's 'How to Secure Your Website' as a Checklist
What standard should you use to check your company website's security against? This article explains the 11 vulnerabilities and countermeasures covered in IP...