Security

Summary IDOR stands for Insecure Direct Object Reference which is a vulnerability that falls under the broken access control category. In brief, this vulnerability arises when an application uses user-supplied input to access an object directly. Using insecure direct object reference vulnerability it is possible to gain horizontal privilege escalation…

Here at Benchling, interaction with services is a large part of our business, from employees interacting with the software-as-a-service products with which we conduct our daily business, all the way down to interactions between the services that make up the Benchling application platform itself. Secure authentication and authorization to services…

Co-authored with Vaughn Marshall Recent software supply chain compromises of significant scale, such as Log4j & SolarWinds, have demonstrated a need to reevaluate how software is delivered and consumed. …

Oracle Cloud Infrastructure Network Firewall is a next-generation managed network firewall and intrusion detection and prevention service for Oracle Cloud Infrastructure (OCI) virtual cloud network (VCN), powered by Palo Alto Networks®. Customers may choose to migrate to OCI network firewall from Checkpoint for various reasons, of course, and this tool…

#4 of my Tech Predictions for 2023 — The one thing that irritates me the most about being online is passwords! I can’t remember them, they don’t transfer well from device to device, and I keep getting messages that they have been compromised in a data leak. The good news is that they will be a thing of the past very soon. Due to a new standard: Passkeys. For as long as anyone cares to remember, passwords have been a source of frustration for both users and security people.

Building the passbolt community in 2023 — At the end of last year, passbolt got in touch with us about doing some community work. …

What do Passkeys actually solve? Authentication methods have progressed significantly over time. In the early days of computing, authentication was often based on simple forms of identification, such as a user ID and password. However, as technology has advanced and cyber threats have become more sophisticated, authentication methods have become more complex and multifaceted. Multi-Factor…

If you find value in this story, consider making a donation to the [HS]2 program. It prepares a group of first-generation and/or low-income students of color to succeed in college by empowering them with STEM-based skills, a family of driven peers…