Black-box web application vulnerability scanners attempt to automatically identify
vulnerabilities in web applications without access to the source code. However, they do so …

Request forgery attacks are among the oldest threats to Web applications, traditionally
caused by server-side confused deputy vulnerabilities. However, recent advancements in …

The adoption and popularization of mobile devices, such as smartphones and tablets,
accentuated after the second decade of this century, has been motivated by the growing …

Artificial intelligence (AI)-based cybersecurity services offer significant promise in many
scenarios, including malware detection, content supervision, and so on. Meanwhile, many …

Container-based architectures, with their highly volatile runtime configurations, rapid code
changes, and dependence on third-party code, have raised security concerns. The first step …

Web applications are the public-facing components of information systems, which makes
them an easy entry point for various types of attacks. While it is often the responsibility of …

The COVID-19 pandemic affected humanity and changed impacted people's habits
worldwide. The necessity for social distancing has led to increasing remote working and …

Server-side requests (SSR) are a potent and important tool for modern web applications, as
they enable features such as link preview and web hooks. Unfortunately, naive usage of …

Server-side request forgery (SSRF) is a security vulnerability that arises from a vulnerability
in web applications. For example, when the services are accessed via URL the attacker …

Microservice architectures decompose web applications into loosely-coupled, distributed
components that interact with each other to provide an overall service. While this popular …