Web Security RSS Feeds

Directory17 web security feeds · 44 articlesShow all languages →

Latest

Web Security articles

SAML Vulnerabilities and Attacks: A Practical Security Guide

Master SAML and SSO security with this in-depth guide to web hacking and AppSec. Learn how to exploit and defend against real-world SAML vulnerabilities — signature stripping, XML signature wrapping, comment injection, and the 2025 wave of digest-confusio

technologycybersecurityprogramming

pentesterlab.com·Tech by Flipboard·1d ago·15 min read

Authentication token storage in modern web apps: A security-focused analysis of localStorage, cookies, and in-memory approaches

Insighttechnologyprogramming

Shared by @tech-trending.bsky.social ↗

neciudan.dev1mo ago

A Comprehensive Guide to HTTP Strict Transport Security (HSTS): Implementation, Preloading, and Best Practices

technologyprogramming

Shared by @undercode.bsky.social ↗

undercodetesting.com1mo ago

Why many web developers struggle to understand CORS and why it matters

Opiniontechnologyprogramming

fosterelli.co1mo ago

Comprehensive Guide to SSRF Testing: From URL Parameters to Cloud Metadata Exploitation

The Ultimate SSRF Testing Bible: How Hackers Pivot from URL Parameters to Cloud Metadata in 2026 + Video - "Undercode Testing": Monitor hackers like a pro.

technologycybersecurityprogramming

undercodetesting.com·Tech by Flipboard·2mo ago·6 min read

Detectify: Automated Web Security Scanner for Vulnerability Detection

Detectify is a web security scanner that performs fully automated tests to identify security issues on your website. It tests your website for over 1000 vulnerabilities, including OWASP Top 10, and can be used on both staging and production environments.

technologycybersecuritybusiness

opsmtrs.com·Tech by Flipboard·2mo ago·3 min read

Understanding WebAuthn credential protection policy and discoverable credentials

Pilcrow's personal website.

Insighttechnologyprogrammingweb securitypilcrowonpaper.com·Hacker News: Front Page·2mo ago·3 min read

User Frustration with Cloudflare's Security Interstitials and Brand Perception

Opiniontechnologybusiness

news.ycombinator.com3mo ago

Let's Encrypt's Challenge: Creating Intentionally Broken Certificates for Testing

Insighttechnologyprogramming

letsencrypt.org4mo ago

Website Uses Anubis Proof-of-Work System to Protect Against AI Scraping

Newstechnologyprogramming

wesnoth.org4mo ago

Server Security Block: HTTP 400 Error Message

400

Newstechnologyweb security

phys.org4mo ago

Firefox 148 Introduces Standardized Sanitizer API for Enhanced XSS Protection

Newstechnologyprogramming

hacks.mozilla.org5mo ago

Site Blocks Outdated Browsers to Combat LLM Training Crawlers

You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace, the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most