Security News

Students Build Open Source Web-Based Threat Modeling Tool (Threatpost)
2015-04-01 19:00

Students at St. Mary's University in Canada released to open source a web-based threat modeling tool called Seasponge that they hope will provide an alternative to Microsoft's free tool.

Critical Vulnerabilities Affect JSON Web Token Libraries (Threatpost)
2015-04-01 18:58

Critical vulnerabilities exist in several JSON Web Token (JWT) libraries – namely the JavaScript and PHP versions – that could let an attacker bypass the verification step.

Critical vulnerabilities in JSON Web Token libraries (Reddit)
2015-04-01 07:38

Justifying the Cost of Web Application Security (IT Toolbox Blogs)
2015-03-31 14:38

Day FOUR of the GitHub web assault: Activists point fingers at 'China's global censorship' (The Register)
2015-03-31 00:38

Feds Demand Reddit Identify Dark Web Drug Forum Users (WIRED)
2015-03-30 18:38

Dark Web vendors offer up thousands of Uber logins starting at $1 each (ArsTechnica)
2015-03-28 18:38

Release of Web Application Firewall shadowd 1.1 + Benchmark (Reddit)
2015-03-28 17:38

Red Hat Squid web-proxy is not deleting files willy-nilly (ZDNet)
2015-03-25 14:38

Microsoft enlists web security pariah Adobe to help build Spartan (The Register)
2015-03-25 02:38