X

AppSec Observer

Contrast's application security blog provides the latest trends and tips in DevSecOps through instrumentation and security observability.

Subscribe Now
    Topics
    Contrast discovers CSRF vulnerability in NSA’s SkillTree training platform that allows attackers to modify content
    Joseph Beeton, Senior Application Security Researcher, Contrast Security

    Contrast discovers CSRF vulnerability in NSA’s SkillTree training platform that allows attackers to modify content

    Read more
    Contrast Security discovers Netflix OSS Genie bug that can lead to RCE during file upload
    Joseph Beeton, Senior Application Security Researcher, Contrast Security

    Contrast Security discovers Netflix OSS Genie bug that can lead to RCE during file upload

    Read more
    Critical zero-day Confluence RCE vulnerability blocked by Contrast Runtime Security
    Joseph Beeton, Senior Application Security Researcher, Contrast Security

    Critical zero-day Confluence RCE vulnerability blocked by Contrast Runtime Security

    Read more
    Contrast discovers MLflow framework zero-day that threatens to poison machine language models
    Joseph Beeton, Senior Application Security Researcher, Contrast Security

    Contrast discovers MLflow framework zero-day that threatens to poison machine language models

    Read more
    Contrast Assess uncovers Spring-Kafka deserialization zero day
    Joseph Beeton, Senior Application Security Researcher, Contrast Security

    Contrast Assess uncovers Spring-Kafka deserialization zero day

    Read more
    Contrast discovers zero-day flaw in popular Quarkus Java framework
    Joseph Beeton, Senior Application Security Researcher, Contrast Security

    Contrast discovers zero-day flaw in popular Quarkus Java framework

    Read more