Invicti's Web Application Security Blog Updates for 05 Jan 2023

View this email in your browser Weekly Update – 05 Jan 2023 Dynamic code analysis: What it is and isn't in application security testing If you're searching around for information on dynamic code analysis in application security, you may be surprised to learn there's no such thing. Time to set the record straight on the correct (and incorrect) meanings of dynamic analysis. The post Dynamic code analysis: What it is and isn't in application security testing appeared first on Invicti.   5 reasons why web security is crucial to avoid ransomware Web vulnerabilities are a key part of many ransomware attack chains, even those that start from a phishing email. This post puts together five reasons why eliminating web vulnerabilities is vital to prevent ransomware attacks. The post 5 reasons why web security is crucial to avoid ransomware appeared first on Invicti.   How to choose a DAST solution: An 8-step evaluation checklist DAST solutions play a critical role in application security testing. Being technology-agnostic, they can provide visibility into the security of complex modern web applications – but only if the product matches your unique needs. This post provides an easy-to-read checklist to help you ask the right questions when choosing a DAST tool. The post How to choose a DAST solution: An 8-step evaluation checklist appeared first on Invicti.   SSRF vulnerabilities caused by SNI proxy misconfigurations SNI proxies are load balancers that use the SNI extension field to select backend systems. When misconfigured, SNI proxies can be vulnerable to SSRF attacks that provide access to web application backends. The post SSRF vulnerabilities caused by SNI proxy misconfigurations appeared first on Invicti.   More Recent Articles From zero trust to strategic partnerships in government: Reflecting on DoDIIS Worldwide 2022 SAST vs. DAST: How to compare web application security testing tools Updates to ISO 27001/27002 raise the bar on application security and vulnerability scanning How to select a DAST scanner How to scan for MongoDB injection vulnerabilities – and how to fix them Copyright © 2023 Invicti, All rights reserved. You are receiving this email because you opted in as a Blog Subscribers. Our mailing address is: Invicti 220 Industrial Blvd Ste 102 Austin, Texas 78745 Add us to your address book Want to change how you receive these emails? You can update your preferences or unsubscribe from this list