AppSec Observer: vulnerabilities (4)

Open-Source Python Salt CVEs and the Cisco Server Breach

Hackers recently exploited two critical vulnerabilities (CVEs) in SaltStack’s "Salt" management framework in order to..

Contrast Labs: Mapping Risk Profiles for Select OWASP Top 10 Vulnerabilities to Understand Their AppSec Risk

At Contrast Security, the Contrast Labs team is charged with numerous things. Part of this charter includes looking at..

Contrast Labs: CVE-2020-11444: Privilege Escalation Vulnerability in Sonatype Nexus Repository Manager

In this time of COVID-19, social distancing, stay at home, shelter in place, and all the other things that force us to..

What Vulnerabilities and Attacks Matter? Insights from Contrast Labs’ AppSec Intelligence Report

The threat landscape is constantly evolving, growing in sophistication as well as volume and velocity. This presents..

Contrast Labs: Google Sheets Stored XSS Vulnerability in COVID-19 Table

3 Steps to Manage Vulnerabilities. Lessons from Surviving a Zombie Infestation.

Whether you’re scoping out your strategic survival plan in the event of a potential Zombie Apocalypse or drafting up..

Elite Performers Choose Simpler Tools

I was fascinated to read this year’s Accelerate State of DevOps Report 2019 which now represents six years of research..