SQL Injection Vulnerability: Identification and Prevention Methods

The FBI and CISA released a Secure by Design alert calling for the elimination of SQL injection vulnerabilities. This post covers SQLi causes and detection

Intro to NMAP

Explore our essential tool for network security and vulnerability detection, perfect for both beginners and experts

What happened to CVE-2022-23529? And what can we learn from it?

This post digs into how the node_jsonwebtoken vulnerability, CVE-2022-23529, went from being widely heralded as a critical issue to being a non-issue.

Application Security 202: Vulnerabilities Accepted

Studying how to accept vulnerabilities and secure applications

Quick Bites – Finding Open Windows File Shares

How to find open Windows network file shares and secure them with publicly available tools. Lock down your network shares!

Digging Between the Couch Cushions – CouchDB CVE-2021-38295 Breakdown

In this blog post we’re going to take a look at the recent CouchDB vulnerability, CVE-2021-38295, which I was credited with discovering.

[Update] Using Components with Known Vulnerabilities

You would like to imagine that the attacker crafted a new exploit, leveraging a zero-day vulnerability that no one has any protection against.

Brass Tacks: Experts Endorse Frequent Vuln Assessments

This article explains why it is so important to have regular vulnerability assessments and how Secure Ideas’ Scout services can help.

Using Components with Known Vulnerabilities

When dealing with cyber vulnerabilities, there are lots of threats that are unknown and ever changing that can put users at risk. 

Industry Issues: New Vulnerabilities and Marketing Problems

As a consultant, I spend a lot of my time working with organizations and staff to help them improve their security.