XSS Auditors – Abuses, Updates and Protection

IP Disclosure of Servers Behind WAFs Using Wordpress XML-RPC

Frame Injection Attacks

SameSite Cookies by Default in Chrome 76 and Above

Content-Type and Status Code Leakage

Separating Subdomains From Third-Party Hosted WWW Domains

WordPress XSS Vulnerability Can Result in Remote Code Execution (RCE)

Application Security is Vital Throughout SDLC

Behind the Scenes of Onion Services

Transforming Self-XSS Into Exploitable XSS

The End of CoinHive and the Rise of Cryptojacking

Introducing the Security of Cookies Whitepaper

This blog post announces the publication of a Security of Cookies Whitepaper by Netsparker security researchers. The white paper discusses why cookies are used in applications, how they work, their attributes, and how to modify them. It analyzes the protection and security of session cookies, concluding with recommendations for extra measures.