Web/API Penetration Test Blog by turingpoint

The Log4Shell zero-day vulnerability is considered highly security-critical. It allows attackers to execute arbitrary code.

The new coalition agreement aims to strengthen the law on the Internet and advance society in terms of cyber security.

There are three new categories in the OWASP Top 10 and the prioritization of some already known categories has changed.

Numerous versions you can use for the Node Package Manager update may be contaminated with malicious code, according to repository officials.

This disclosure capability of GraphQL is both strength and weakness at the same time and should be tested accordingly.

The reasons for penetration testing are numerous and yet, from a legal perspective, they are often in a gray area.