Web Application

A web application firewall (WAF) filters malicious HTTP/S traffic SQL injection, cross-site scripting, credential stuffing, and API abuse — before it reaches your applications. Cloudflare is our top WAF pick for 2026 on the strength of protection-per-dollar and...

Web Application Pentesting Tools are essential to the penetration testing process for web-based applications. In this article, we list some of the free Web Application Pentesting Tools. We all know very well that in the old days, hacking was quite difficult...

Web filtering solutions monitor and block internet traffic to specific websites, applications, or content categories deemed risky, inappropriate, or non-compliant with organizational policies. These tools enforce acceptable use policies, protect networks from cyber threats, safeguard sensitive data, and boost productivity...

Threat actors often exploit the cloud services for cryptomining, as doing so allows them to abuse the huge computational resources available.  This enables them to significantly maximize their mining efficiency without bearing any cost. Cybersecurity analysts at Wiz recently identified that...

The widely used PHP programming language has been discovered with a new remote code execution vulnerability deemed critical severity. Further, this vulnerability is related to a previously discovered and patched vulnerability, CVE-2012-1823, associated with arbitrary code execution. However, PHP has patched...

Security experts have disclosed advanced methods for bypassing Web Application Firewalls (WAFs) on a large scale, and they have also introduced a new Burp Suite plugin to facilitate this process. Shubham Shah, a co-founder of Assetnote and an experienced bug...

ZAP is a free and open-source web application security scanner. It is designed to be utilized by expert penetration testers as well as individuals who are new to application security.  It has received Flagship status and has been one of...

Dastardly is a powerful web vulnerability DAST (Dynamic Application Security Testing) scanner developed to assist organizations in effectively safeguarding their web applications.  It is a free, lightweight web application security scanner for your CI/CD pipeline from the makers of Burp Suite. Particularly,...

A brand-new release of Burp Suite 2023.6, tailored for both Professional and Community users, has been rolled out recently by PortSwigger. This new Burp Suite 2023.6 comes with a multitude of advancements and several bug fixes. Renowned for its informal...

Patchstack security researchers recently warned that 'Advanced Custom Fields' and 'Advanced Custom Fields Pro' WordPress plugins are at risk of cross-site scripting attacks (XSS).  These WP plugins, installed on millions of websites, may be vulnerable to security breaches. The 'Advanced Custom...