/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 tom.vg
Timing Attacks in the Modern Web - tom.vg
| | mike.sherov.com
The Rise of Man In The Middle (MITM) Based Session Hijacking Attacks | Mike Sherov
3.8 parsecs away

Travel
| | Most websites offer personalized experiences powered by a "logged in" mode. In order to remember who a user is, sites place a cookie containing a unique...
| | bogs.io
bogs.io | Complete Guide to CSRF
1.9 parsecs away

Travel
| | CSRF stands for Cross-Site Request Forgery and is one of the most "popular" web application vulnerabilities
| | www.sjoerdlangkemper.nl
Preventing CSRF with the same-site cookie attribute
3.9 parsecs away

Travel
| | Cookies are typically sent to third parties in cross origin requests. This can be abused to do CSRF attacks. Recently a new cookie attribute was proposed to disable third-party usage for some cookies, to prevent CSRF attacks. This post will describe the same-site cookie attribute and how it helps against CSRF.
| | blog.talosintelligence.com
Threat Advisory: Critical Apache Log4j vulnerability being exploited in the wild
59.9 parsecs away

Travel
| Update History DateDescription of UpdatesDec. 20, 2021 Additional coverage and IOCs; additional detection capabilities for customers via Cisco Global Threat Alerts. Dec. 18, 2021 Additional mitigation guidance; updated coverage information. Dec. 17, 2021 Added additional vulnerability and mitigation information; added section on guidance for developers; timeline. Dec. 16, 2021 Added