--- title: "Application Security Archives - Cybr" description: "Posts, tutorials, and general information about Application Security." url: https://cybr.com/tag/application-security/ --- From the blog # Application Security Read Cybr articles tagged Application Security. Browse the archive ## Latest articles 10 on this page - September 1, 2023 ### Request forgeries (CSRF, XSRF, SSRF) In 2020, CheckPoint Research announced multiple vulnerabilities in the popular social media application named TikTok. One of the found vulnerabilities allowed an attacker to delete… Read article [Request forgeries (CSRF, XSRF, SSRF)](https://cybr.com/application-security-archives/request-forgeries-csrf-xsrf-ssrf/) - August 29, 2023 ### Directory / Path Traversal Just like you have directories on your PC, laptop, and mobile phones, web servers also have directories. For example, if you were to purchase web… Read article [Directory / Path Traversal](https://cybr.com/certifications-archives/directory-path-traversal/) - August 25, 2023 ### HashiCorp Vault \[Cheat Sheet\] We wrote a blog post introducing and explaining what Vault is, when it’s useful, and how to get started using it to manage your secrets.… Read article [HashiCorp Vault \[Cheat Sheet\]](https://cybr.com/cloud-security/hashicorp-vault-cheat-sheet/) - August 11, 2023 ### How crypto miners hijack AWS accounts (Cryptojacking GUI-Vil Case Study) This is the story of how you print free money. It’s a story that involves an AWS account, a threat actor named GUI-Vil, and unauthorized… Read article [How crypto miners hijack AWS accounts (Cryptojacking GUI-Vil Case Study)](https://cybr.com/cloud-security/how-crypto-miners-hijack-aws-accounts-cryptojacking-gui-vil-case-study/) - July 7, 2023 ### Static Application Security Testing (SAST) What if you could take multiple senior developers and security experts, distill them into a tool, and then have the ability to run that tool… Read article [Static Application Security Testing (SAST)](https://cybr.com/explained-series/static-application-security-testing-sast-explained-in-180-seconds/) - June 13, 2023 ### AWS WAF Made Simple: Protect Your Web Apps In The Cloud AWS built its own Web Application Firewall and named the service AWS WAF, and we’re going to take a detailed look at how we can… Read article [AWS WAF Made Simple: Protect Your Web Apps In The Cloud](https://cybr.com/cloud-security/aws-waf-made-simple-protect-your-web-apps-in-the-cloud/) - May 8, 2023 ### What is HashiCorp Vault and why should you know about it? Vault is an open-source secrets management tool used to automate access to secrets, data, and systems. This blog post comes from our Explained in 180… Read article [What is HashiCorp Vault and why should you know about it?](https://cybr.com/explained-series/what-is-hashicorp-vault-and-why-should-you-know-about-it/) - July 18, 2022 ### Hashing use cases In practice, what is hashing used for? How is it being used in the real world? Let’s take a look at a few common hashing… Read article [Hashing use cases](https://cybr.com/certifications-archives/hashing-use-cases/) - July 3, 2022 ### Multifactor authentication (MFA) factors and attributes Password-based authentication has been proven time and time again to be a vulnerable form of authentication. One of the best defenses is using Multifactor Authentication,… Read article [Multifactor authentication (MFA) factors and attributes](https://cybr.com/cybersecurity-fundamentals-archives/multifactor-authentication-mfa-factors-and-attributes/) - June 25, 2022 ### Encrypted versus hashed passwords. What’s the difference? As you study for the CompTIA Security+ exam, it’s important that you understand the differences between plaintext, encrypted, and hashed passwords. It’s common to hear… Read article [Encrypted versus hashed passwords. What’s the difference?](https://cybr.com/certifications-archives/encrypted-versus-hashed-passwords-whats-the-difference-comptia-security/) 1[2](https://cybr.com/tag/application-security/page/2/)[3](https://cybr.com/tag/application-security/page/3/) [Next](https://cybr.com/tag/application-security/page/2/)