Open in app
Sign inGet started
Latest Stories
After The Equifax Hack We Examined the Latest Apache Struts Code

After The Equifax Hack We Examined the Latest Apache Struts Code

In light of the recent news that the Equifax hack was a result of an old version of Apache Struts being exploited, we analyzed the latest…
Go to the profile of Vanessa Henderson
Vanessa Henderson

Announcing PHP Language Support

Vanessa Henderson

The Equifax Hack: What all companies need to know and do to prevent it from happening to them

Vanessa Henderson

SGL: Mapping the open-source genome for fun and profit

Vanessa Henderson

Delving into the four recent RubyGems vulnerabilities

Vanessa Henderson

Exposing External XML Entity Attacks in Android IntelliJ Plugin

Vanessa Henderson

Diving into Directory Traversal Vulnerabilities in Open-Source

Vanessa Henderson
Research and Development
Delving into the four recent RubyGems vulnerabilities

Delving into the four recent RubyGems vulnerabilities

A few days ago, a blog was released by RubyLang and RubyGems stating that they had fixed multiple vulnerabilities. The four vulnerabilities…
Go to the profile of Vanessa Henderson
Vanessa Henderson
SGL: Mapping the open-source genome for fun and profit

SGL: Mapping the open-source genome for fun and profit

For a long-time we have known that the current state-of-the-art of vulnerability research in open-source code does not scale. That current…
Go to the profile of Vanessa Henderson
Vanessa Henderson
Exposing External XML Entity Attacks in Android IntelliJ Plugin

Exposing External XML Entity Attacks in Android IntelliJ Plugin

IntelliJ is an IDE that a lot of developers know and love. Not only does it provide an intuitive UI but it also gives us plugins for all…
Go to the profile of Vanessa Henderson
Vanessa Henderson
Diving into Directory Traversal Vulnerabilities in Open-Source

Diving into Directory Traversal Vulnerabilities in Open-Source

On August 8th, 2017 SAP released a set of security patches for its applications. Among the vulnerabilities that they fixed was a directory…
Go to the profile of Vanessa Henderson
Vanessa Henderson
Open-source Packages with Malicious Intent

Open-source Packages with Malicious Intent

Why re-invent the wheel?
Go to the profile of Vanessa Henderson
Vanessa Henderson
Un-patched for months, could Cisco 0-day lead to another round of WannaCry?

Un-patched for months, could Cisco 0-day lead to another round of WannaCry?

For the last few weeks, we all got our ears torn out by story after story of WannaCry this, WannaCry that. Not long ago, there was a…
Go to the profile of Ming Yi
Ming Yi
Continuous Verification: A new method to secure programs

Continuous Verification: A new method to secure programs

Building secure software is the holy grail of computer science. On one end of the spectrum we have methods like formal verification that…
Go to the profile of Asankhaya Sharma
Asankhaya Sharma
About SourceClearLatest StoriesArchiveAbout MediumTermsPrivacyTeams