--- title: "Web Security Archives - Cybr" url: https://cybr.com/tag/web-security/ --- From the blog # Web Security Read Cybr articles tagged Web Security. Browse the archive ## Latest articles 10 on this page - September 1, 2023 ### Request forgeries (CSRF, XSRF, SSRF) In 2020, CheckPoint Research announced multiple vulnerabilities in the popular social media application named TikTok. One of the found vulnerabilities allowed an attacker to delete… Read article [Request forgeries (CSRF, XSRF, SSRF)](https://cybr.com/application-security-archives/request-forgeries-csrf-xsrf-ssrf/) - July 7, 2023 ### Static Application Security Testing (SAST) What if you could take multiple senior developers and security experts, distill them into a tool, and then have the ability to run that tool… Read article [Static Application Security Testing (SAST)](https://cybr.com/explained-series/static-application-security-testing-sast-explained-in-180-seconds/) - June 16, 2023 ### Proxy Servers Proxy servers are a topic that you can expect to get quizzed on in the CompTIA Security+ exam. To make sure you can answer questions… Read article [Proxy Servers](https://cybr.com/certifications-archives/proxy-servers/) - May 8, 2023 ### What is HashiCorp Vault and why should you know about it? Vault is an open-source secrets management tool used to automate access to secrets, data, and systems. This blog post comes from our Explained in 180… Read article [What is HashiCorp Vault and why should you know about it?](https://cybr.com/explained-series/what-is-hashicorp-vault-and-why-should-you-know-about-it/) - January 19, 2022 ### How a pentester struggled with bug bounties until this new mindset helped him breakthrough “It was a long, arduous, journey to finding my first bug.” Then one day, Hakluke attended a talk by @shubs that changed his mindset about how to approach bug bounties and helped him breakthrough in finding his first bugs. Read article [How a pentester struggled with bug bounties until this new mindset helped him breakthrough](https://cybr.com/ethical-hacking-archives/how-a-pentester-struggled-with-bug-bounties-until-this-new-mindset-helped-him-breakthrough/) - December 7, 2020 ### What is Cross-Site Scripting (XSS)? According to both OWASP and CWE, Cross-Site Scripting is one of the top 10 most dangerous web application security risks, and for good reason: OWASP’s… Read article [What is Cross-Site Scripting (XSS)?](https://cybr.com/beginner-archives/what-is-cross-site-scripting-xss/) - September 26, 2020 ### 4 steps to getting started securing applications A lot of times, especially when you join smaller organizations, there are no (or very few) formal processes in place. The approach taken to secure… Read article [4 steps to getting started securing applications](https://cybr.com/career/4-steps-to-getting-started-securing-applications/) - August 17, 2020 ### What are SQL Injections (SQLi)? Introduction to powerful techniques We’ve talked about what SQL is, but now, let’s talk about one of the most common and dangerous web-based attacks: SQL injections (aka SQLi). In… Read article [What are SQL Injections (SQLi)? Introduction to powerful techniques](https://cybr.com/beginner-archives/what-are-sql-injections-sqli-introduction-to-powerful-techniques/) - June 15, 2020 ### What is Information Leakage, and how do you prevent it? One of the most commonly found flaws in web applications and mobile applications is information leakage. But what is information leakage, why is it a… Read article [What is Information Leakage, and how do you prevent it?](https://cybr.com/cybersecurity-fundamentals-archives/what-is-information-leakage-and-how-do-you-prevent-it/) - April 20, 2020 ### Simple Guide to Checking for WordPress Vulnerabilities It should come as no surprise that WordPress has a massive target on its back given how popular a platform it has become. To add… Read article [Simple Guide to Checking for WordPress Vulnerabilities](https://cybr.com/beginner-archives/simple-guide-to-checking-for-wordpress-vulnerabilities/)