Invicti's Web Application Security Blog Updates for 05 Dec 2024

View this email in your browser Weekly Update – 05 Dec 2024 Ducks, dinosaurs, and XSS: A little knowledge is a dangerous thing in security Security vulnerabilities are often misunderstood and underestimated. Based on superficial application security knowledge, you might say that cross-site scripting is people putting script tags in form fields. And that's basically true—but only in the same way as saying ducks are basically dinosaurs. Allow me to explain. The post Ducks, dinosaurs, and XSS: A little knowledge is a dangerous thing in security appeared first on Invicti.   More Recent Articles CWE Top 25 for 2024: XSS, SQLi, buffer overflows top the list Brainstorm tool release: Optimizing web fuzzing with local LLMs How to prevent SQL injection How the BEAST attack works: Reading encrypted data without decryption System prompt exposure: How AI image generators may leak sensitive instructions Copyright © 2024 Invicti, All rights reserved. You are receiving this email because you opted in as a Blog Subscribers.                                                                         Invicti Security Corp 1000 N Lamar Blvd Suite 300, Austin, TX 78703, United States Want to change how you receive these emails? You can update your preferences or unsubscribe from this list