@w3things.comOne wrong CSP configuration, and your site might break loudly or silently.
A dead contact form is obvious. Missing analytics or fonts? Not so much.
I'm putting together a practical CSP guide for W3Things.
Want to know when it's out? w3things.com/newsletter/
@bastacon.bsky.social🔐 Security-Update verpasst?
Christian Wenz zeigte auf der #bastacon, wie Du Deine Web-Apps besser schützt:
• OWASP Top Ten 2025
• Kritische Sicherheitsrisiken
• ASP.NET Core & Blazor
🎬 Das Video ist nur ein Vorgeschmack
@thedailytechfeed.comWordPress Bricksforge users must update now: RCE flaw lets attackers execute PHP without authentication. #WordPress #Security #Bricksforge #RCE #WebSecurity #PluginVulnerabilities https://thedailytechfeed.com/critical-bricksforge-bug-lets-attackers-execute-php-remotely-without-login/
@webperfreport.bsky.social🎉 WebPerformance Report Week #41 is out! ✅
Join our growing community:
⚡ Performance Report
🛡️ Security Report
♿ Accessibility Report
📊 Analytic Report
🔎 SEO Report
Explore our report catalog 👉 webperformancereport.com#Catalog
@ppc.landICYMI: Explaining reverse proxy #ReverseProxy #WebSecurity #CDN #ServerManagement #NetworkArchitecture
@marketingnews.bsky.socialICYMI: Explaining reverse proxy #ReverseProxy #WebSecurity #CDN #ServerManagement #NetworkArchitecture
@itimagined.bsky.socialDNS filtering can stop employees from opening known phishing and malware sites, even when they click a bad link. Ask your IT provider whether it’s enabled on office computers and work devices used away from the office.
#CyberSecurity #DNSFiltering #SmallBusinessIT #WebSecurity #ITImagined
@cyberlensai.bsky.socialA scanner that only says 'missing headers' is a smoke alarm with one sensor. Useful, but incomplete. Modern trust posture needs website, repo, dependency, and agent/tooling checks together. #WebSecurity
@grizzlypumpkin.comA backup is only useful if you can restore it.
Website maintenance means more than updates: backups, monitoring, security and knowing what to do when something fails.
@techfieldday.comIs the web relying too heavily on Let’s Encrypt for site encryption?
On this clip from the Tech Field Day News Rundown, host Alastair Cooke and analyst Jay Cuthrell break down Cloudflare’s move to launch its own free public certificate authority.
@cyberlensai.bsky.socialIndie hackers: do you run any security check before launching a landing page or connecting Stripe/auth/email tools, or is it mostly ship first and harden later? #BuildInPublic #WebSecurity
@cybercod.bsky.socialStop relying solely on automated scanners for OWASP Top 10. They miss the complex logic flaws that humans catch. Pro-tip: Focus your manual testing on business logic—that’s where the real bugs hide. #CyberSecurity #WebSecurity #InfoSec
@zachzang.bsky.socialA template engine that fetches user-supplied URLs is an RFI finding
Attacker-controlled remote includes escalate to code execution, not just a bad fetch.
#CPTS #PenTesting #WebSecurity #AppSec
Full CPTS explanation, free: https://navyduck.com/cpts/web-application-penetration-testing/q203
@thedailytechfeed.comJapan faces massive data leaks via API abuse & Metabase zero-day—millions exposed. #Security #DataBreach #APIAbuse #Metabase #Cybersecurity #WebSecurity https://thedailytechfeed.com/major-surge-in-web-data-leaks-hits-japan-exposes-millions-of-records/
@thedailytechfeed.com100+ hacked sites show fake Cloudflare verifications to push LunexStealer. Malware variants exploit drivers, extensions, and browser security gaps. #Malware #WebSecurity #LunexStealer https://thedailytechfeed.com/100-sites-hijacked-with-fake-cloudflare-checks-to-push-lunexstealer/
@securityonline.bsky.socialThe WordPress 7.1.3 security update is a WordPress security release that fixes stored XSS, SQL injection and more. Update your site now.
#WordPress #WordPress713 #XSS #SQLInjection #WebSecurity #CMS #PatchNow #Vulnerability
@ayeshappdev.bsky.socialYour app isn't hacked because of hackers.
It's hacked because of .env files.
16 reasons vibecoders get hacked:
#AyeshaAppDev #VibeCoding #WebSecurity #AppDevelopment #BuildInPublic
@securityonline.bsky.socialA WordPress libheif RCE chain and its PoC are now public. The libheif vulnerability turns an HEIC upload into code execution. Patch to 1.23.3.
#WordPress #libheif #RCE #ImageMagick #HEIC #PoC #WebSecurity #Vulnerability
Le fuzzing web est la première étape d'un pentest réussi, mais encore faut-il avoir les bonnes word lists. Les limites des listes publiques coûtent parfois cher en mission.
#Cybersécurité #Pentest #WebSecurity #RedTeam
🎧 Web: bit.ly/3TlTzfD
🎧 Spotify: bit.ly/4j3I5I0
🎧 YouTube: bit.ly/4hvmS8M
