Remove 2021 Remove Applications Remove Authentication Remove Open Source
article thumbnail

Top 5 Security Trends for CIOs

CIO Business Intelligence

Multifactor authentication fatigue and biometrics shortcomings Multifactor authentication (MFA) is a popular technique for strengthening the security around logins. With MFA, the website or application will send a text message or push notification to the user with a code to enter along with their password.

Trends 124
article thumbnail

If You’re Only Doing WAF, You’re Doing API Security Wrong

ForAllSecure

Some organizations have begun using Web Application Firewalls (WAFs) to protect their APIs, but this isn’t a true solution to API security. An application programming interface (API) allows various computer programs to work together by sharing data. What do APIs do? Unfortunately, that’s already happened.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Technology Short Take 136

Scott Lowe

Welcome to Technology Short Take #136, the first Short Take of 2021! The popular open source cryptography library known as Bouncy Castle has uncovered a severe authentication bypass vulnerability. Want to enable logging in every AWS service that exists (as of 2021)? Operating Systems/Applications.

Linux 60
article thumbnail

Technology Short Take 155

Scott Lowe

Along those lines, one of their latest articles discusses how to achieve identity-based mutual authentication leveraging eBPF. marks the first release of the open source container orchestration platform that is signed using Sigstore (more details here ). Operating Systems/Applications. Cloud Computing/Cloud Management.

article thumbnail

The Hacker Mind Podcast: Fuzzing Message Brokers

ForAllSecure

Jonathan Knudsen from Synopsys joins The Hacker Mind to discuss his presentation at SecTor 2021 on fuzzing message brokers such as RabbitMQ and VerneMQ, both written in Erlang, demonstrating that any type of software in any environment can still be vulnerable. Vamosi: The idea behind Open Source is great.

article thumbnail

The Hacker Mind Podcast: Hacking APIs

ForAllSecure

And in May of 2021 Researchers disclosed that the Peloton API authentication was broken. Wilde: Now, for me the storyline was interesting right so when it was reported I think in late January, it was completely open right like this is right no authentication at all because well we didn't tell anybody about it.

article thumbnail

The Hacker Mind Podcast: Hacking APIs

ForAllSecure

And in May of 2021 Researchers disclosed that the Peloton API authentication was broken. Wilde: Now, for me the storyline was interesting right so when it was reported I think in late January, it was completely open right like this is right no authentication at all because well we didn't tell anybody about it.