Updated August 20, 2026
XSS still starts when untrusted HTML reaches the browser
Learn about cross-site scripting attacks, master how XSS attacks occur, know the various attack types, understand the XSS prevention methods, and…
Alfrik OpidiLibrary
Secure coding notes
How injection still happens, how auth fails, and what actually holds. The 2020 to 2022 archive is being rewritten. Newer pieces follow the XSS standard.
Alfrik Opidi
June 28, 2022
Ruby Malware and Prevention Methodology
A comprehensive look at Ruby malware and prevention methods for secure coders.
Lisa Haas
June 21, 2022
Five Ruby Malware Threats to Be Aware of
A comprehensive look at the leading Ruby malware attacks developers should be aware of.
Lisa Haas
June 15, 2022
How to Automate Server Hardening
A general view of the server hardening and how to automate it using a variety of different tools.
Lisa Haas
June 8, 2022
What is the Diffie-Hellman Key Exchange and How Does it Work?
A general view of the Diffie-Hellman Key Exchange cryptography method and how effective it can be for cybersecurity.
Lisa Haas
June 1, 2022
Server Attack Prevention
A server is essentially a computer (hardware and software) whose function is to store information, provide services, run programs, and more. Only…
Lisa Haas
May 18, 2022
Zero Trust Model for Effective Security
A general view of the Zero Trust architecture and how effective it can be for cybersecurity in large and small companies.
Lisa Haas
May 11, 2022
Everything You Need to Know to Understand Credential Stuffing
A detailed discussion on credential stuffing and methods of retaining confidentiality.
Lisa Haas
May 4, 2022
AWS S3: Is It Really That Secure?
An analysis of security leaks occurring on the AWS S3 server and how to solve the problem.
Lisa Haas
April 28, 2022
Snort, Intrusion Detection, and Unauthorized Use
A general view of intrusion detection and intrusion prevention softwares with specific examination of Snort and Snort rules.
Lisa Haas
January 10, 2022
Open Source Solutions for Cybersecurity Log Management
A comprehensive explanation of the evolution of open source solutions for cybersecurity log management, including BSD syslog protocol, IETF syslog…
Lisa Haas
December 23, 2021
The Use of Playbooks in Vulnerability Management
A comprehensive study on using playbooks and how they impact a business’s cybersecurity.
Lisa Haas
December 22, 2021
Vulnerabilities in Internet of Things (IoT) Devices
Diving into the role of vulnerabilities in the Internet of Things and the future of IoT devices.
Lisa Haas
December 13, 2021
Penetration Testing in Flask Application
All you need to know about penetration testing in Flask applications along with a helpful guide to two of the most common pen testing tools for…
Lisa Haas
December 8, 2021
Using Cryptography for Security in Django App
A tutorial on encrypting data on your Django app to secure it so that it cannot get compromised during an attack.
Lisa Haas
November 29, 2021
How to Securely Deploy Your Django Application to Heroku
A tutorial for setting up Django, preparing for deployment, setting up a data management service, securing your application and deploying it.
Lisa Haas
November 22, 2021
How To Guard Django Application Against Cross-Site Scripting
A comprehensive description of different types of cross-site scripting of XSS attacks and ways to fortify your application against them.
Lisa Haas
November 16, 2021
Code Audit: How to Ensure Compliance for an Application
A detailed explainer on source code auditing, its objectives and advantages, and its methods: dynamic, static, and manual analysis.
Lisa Haas
November 7, 2021
How to Secure a PHP Based API Using JWT
learn about the JWT tool that helps improve the security of web based communications and how to implement it in your PHP based applications.
Lisa Haas
November 1, 2021
Serverless Architecture Vulnerabilities and How to Prevent Them
Serverless is becoming commonplace but it also has its vulnerabilities. Here’s what you can do about it.
Lisa Haas
November 1, 2021
How To Use HTTP Headers To Secure Your Web Applications
Learn how HTTP security headers can protect your web app. How to use HTTP Strict Transport Security, X-Frame-Options, Content Security Policy, & more.
Lisa Haas
October 21, 2021
How To Secure Your Project With OWASP ZAP
How to secure your project with OWASP ZAP (Zed Attack Proxy) – a tool that lets you test the robustness of your application against vulnerabilities.
Lisa Haas
October 10, 2021
How Java.Security Works
java.security is a package that provides all the related security-based classes, interfaces, and enums for Java-based applications. Here is a…
Lisa Haas
September 30, 2021
Is Your Varnish A Ticking Security Vulnerability?
What exactly is an HTTP accelerator? What are the vulnerabilities? and is your current Varnish installation secure?
Lisa Haas
September 26, 2021
A Guide to Hardening an Ubuntu Based LAMP
How to secure Ubuntu based web server & how to secure an environment for running LAMP based web applications.
Lisa Haas
September 26, 2021
Ways To Secure Your AWS VPC
Your AWS VPC may not be as secure as you need it to be. Here are some ways to increase the security of your AWS infrastructure.
Lisa Haas
September 22, 2021
Secure Your Node.js Application With Proper Error Handling
Here is a quick guide on how to secure Node.js application with proper error handling.
Lisa Haas
September 9, 2021
Securing Mobile Applications in the Cloud
Understanding different cloud models and what steps to take to secure them in order to secure your application
Lisa Haas
August 29, 2021
Insider Threats: The Frequently Overlooked Cybersecurity Concern
A look the security vulnerabilities that exist within an organization and how they can be neutralized or minimized.
Lisa Haas
August 22, 2021
Common Hacking Techniques You Should Know About
Some of the common hacking techniques that are used to attack websites and what can be done to prevent them.
Lisa Haas
August 22, 2021
Input Validation: Client-Side & Server-Side Cybersecurity Deterrent
The value of input validation and how client-side and server-side implementation can make your software significantly more secure.
Lisa Haas
August 9, 2021
Brute Force and Dictionary Password Attacks – Why You Should Be Concerned about Them?
A comprehensive look at what brute force attacks and dictionary password attacks are and how they can be used by hackers to gain access into accounts.
Lisa Haas
August 8, 2021
How To Use JWTs in Express.js
JSON Web Tokens – or JWT – is an easy way to let us authenticate users without the need for sessions. Here is how you implement it in Express.js
Lisa Haas
August 4, 2021
7 PHP Security Resources to Keep on Your Radar
Learn 7 tools that will help you improve the security of your PHP apps with very little effort.
Lisa Haas
August 1, 2021
How Kotlin is Better Than Java at Solving Long-Standing Security Risks
How and why Kotlin is more secure than Java? What are the security risks that Java faces that Kotlin solves?
Lisa Haas
July 18, 2021
7 Ways to Enhance Database Security
All you need to know about different ways you can enhance database security for your application.
Lisa Haas
July 8, 2021
Secure Authentication – Everything You Need to Know
All you need to know about securing the authentication process on web apps, including the different methods of security authentication, how to go…
Lisa Haas
July 7, 2021
AI and Cybersecurity: a Paradox or a Contradiction?
Artificial intelligence can help enterprises to stay secure, and it can pose a cybersecurity threat. What does this mean for C-suite and developers?
Lisa Haas
June 27, 2021
Most Common Web Security Vulnerabilities and How to Patch Them
All you need to know about web security vulnerabilities like SQL injection and XSS and how we can avoid them.
Lisa Haas
June 23, 2021
What is Helmet.js & Why it is a Security Best Practice For Express.js
Express is one of the most popular frameworks for rapid application development in Node.js. But securing your headers can be cumbersome to do….
Lisa Haas
June 23, 2021
NIST Zero Trust Architecture
All you need to know about zero trust architecture, its components, its network requirements and when and how it should be deployed in your system.
Lisa Haas
June 17, 2021
Is Serverless Secure?
Serverless is supported by major cloud providers such as AWS, Google Cloud, and Microsoft Azure. But how secure is it? And what can we do to…
Lisa Haas
June 7, 2021
Fixing the Most Common Security Vulnerabilities in PHP Powered Websites
Learn about common PHP vulnerabilities, the risks associated with them and how you can fix them to keep your web apps secure.
Lisa Haas
May 31, 2021
Ansible Security Best Practices
Ansible is good for automation. But how secure is your automation? Here are some ways to increase the security of your Ansible module easily.
Lisa Haas
May 30, 2021
TLS Security: TLS/SSL Explained
What is TLS? Why does it matter? And how do you enable it for your Apache, Tomcat, and Java Spring Boot application? Read more to find out.
Lisa Haas
May 30, 2021
How To Secure Your JavaScript Backend via Node.js and Express.js
There’s more to it than just using JavaScript. It’s also how you use Express.js and implement security measures in node.js
Lisa Haas
May 17, 2021
Why You Should Be Performing Continuous Security Testing On Your Systems
Security testing is often the last thought but it should be a first. Here are the reasons why and what you can do about it.
Lisa Haas
May 3, 2021
Incorporating Security in SDLC
All you need to know about the benefits of including security in your software development life cycle and how to incorporate it.
Lisa Haas
April 29, 2021
Session Management: An Overview
A quick and comprehensive read on session management, cookies, and best practices to follow in session management.
Lisa Haas
April 26, 2021
CIS’s Top 20 Controls
Focus on the top 20 controls detailed by the Center for Internet Security that provide the best practice guidelines keeping security of…
Lisa Haas
April 19, 2021
How To Secure Your Firebase Database with Database Rules
Many devs are working with default rules and struggle to secure their Cloud Firestore databases. Here’s a quick guide on how to effectively secure…
Lisa Haas
April 12, 2021
Is MongoDB Actually Safe to Use?
A comprehensive introduction to data encryption and database encryption, the difference between the two and methods of encryption.
Lisa Haas
April 5, 2021
Integrating a Security-First Approach into Your Team
There’s more to a security-first approach than just code. Here’s how to look at security in a cohesive approach rather than just a single entity.
Lisa Haas
March 31, 2021
IAM Roles and Keeping Your AWS Account Secured
It’s tempting to give admin permissions to your developers, but it is a growing security problem that teams need to understand the repercussions.
Lisa Haas
March 24, 2021
Data and Database Encryption
A comprehensive introduction to data encryption and database encryption, the difference between the two and methods of encryption.
Lisa Haas
March 22, 2021
OWASP Secure Coding Checklist
All you need to do to secure your software from security threats as per OWASP.
Lisa Haas
March 17, 2021
Defense In-Depth (DiD) Strategy
All about the Defence In-Depth (DiD) strategy of system security.
Lisa Haas
March 15, 2021
Why Refactoring Is Essential To Security
A concise dive into the benefits of refactoring your backend code for robustness and increased security.
Lisa Haas
March 14, 2021
Is Agile Threatening Code Security?
A quick guide on how to set up AWS code pipelines and how it can benefit your agile processes.
Lisa Haas
March 8, 2021
Cross-Site Request Forgery (CSRF) Attacks
What is Cross-Site Request Forgery, differences between CSRF and XSS attacks, impact of CSRF attacks, how CSRF work, and how to prevent them.
Lisa Haas
March 3, 2021
How To Prevent IDOR Attacks
Insecure Direct Object (IDOR) attacks target your website’s security. Here’s how you can prevent IDOR attacks.
Lisa Haas
March 1, 2021
Securing Enterprise Networks From Backdoors
Backdoor attacks can be detrimental to your data security. Here’s all you need to know about securing enterprise networks from backdoors.
Lisa Haas
February 24, 2021
End-to-End Encryption For Data Security
All you need to know to get involved in end-to-end encryption for keeping your data secure.
Lisa Haas
February 22, 2021
Penetration Testing in Python Like the Pros
Discover advanced tools and books you can use to learn pro-level penetration testing in Python.
Lisa Haas
February 21, 2021
Don’t Trust Your Users – Data Cleaning in Node.js
A quick look into how you can keep your data clean from vulnerabilities and inconsistencies.
Lisa Haas
February 10, 2021
How Good Is Angular, Really?
A comprehensive review of Angular as a framework, its special features, and testability.
Lisa Haas
February 9, 2021
7 Best PyCharm Plugins For 2021
PyCharm plugins make your Python development secure, productive, and enjoyable. Learn about the top 7 best plugins for 2021.
Lisa Haas
February 8, 2021
Can Functional Programming Protect Your Code Against Vulnerabilities?
How not sharing states, enforcing immutability, preventing side effects, and using declarative methods can help secure your code.
Lisa Haas
February 3, 2021
What Is Man In The Middle (MitM) Attack
Learn all about MAC layer Man in the Middle attacks on networks.
Lisa Haas
February 3, 2021
Penetration Testing as a Service: A Practical Guide
Learn what is Penetration Testing as a Service (PTaaS), and what capabilities a cloud-based pentesting delivery platform offers.
Lisa Haas
January 31, 2021
What is Malicious Code: A Comprehensive Guide
What are the types of malicious code? How can you identify, remove, and prevent it? Learn more about different malware concepts.
Lisa Haas
January 26, 2021
Penetration Testing Types and Methodologies
Penetration testing types targeting the network, applications, physical security, and more, as well as few distinct approaches to pentesting.
Lisa Haas
January 21, 2021
Linux Penetration Testing: 4 Great Tools and a Quick Tutorial
Discover linux penetration testing tools such as Kali Linux and BackBox, and get a quick tutorial to get started with penetration testing on Kali.
Lisa Haas
January 20, 2021
All About Azure Penetration Testing
All about Azure penetration testing: what is the difference between Microsoft’s red and blue teams, and how to conduct penetration testing on your…
Lisa Haas
January 19, 2021
Penetration Testing Steps: Anatomy of a Successful Pentest
Learn about the 7 penetration steps – scope, reconnaissance, vulnerability assessment, pentest, lateral movement, risk analysis, and pentest report.
Lisa Haas
January 14, 2021
Best Practices For Flask Security
All about the best practices one should follow to optimize security for the Flask micro-framework.
Lisa Haas
January 12, 2021
All You Need to Know About Format String Vulnerabilities
All about format string vulnerabilities that continue to be one of the most crucial input vulnerabilities in the Information Security Domain.
Lisa Haas
January 10, 2021
How to Defend Your Website Against Denial of Service Attacks
Learn about how to defend your website against denial of service attacks – the world’s most common and yet dangerous cybersecurity attack.
Lisa Haas
January 10, 2021
Integer Overflow Attack and Prevention
All you need to know about the detrimental yet easily-preventable Integer Overflow attack.
Lisa Haas
January 6, 2021
All About Doki Malware
This is all you need to know about the recently-created Doki Malware and how to defend yourself against it.
Lisa Haas
January 3, 2021
Get the Best of SOAR Today with Better Security Tools
All about SOAR – a more comprehensive approach to security that ensures nothing falls between the cracks.
Lisa Haas
December 30, 2020
API Security Testing: Is Your API Really Secure?
Discover four quick API security tests, a detailed API security checklist, and great open source tools you can use to test your APIs.
Lisa Haas
December 28, 2020
What Does “Good Code” Look Like And How To Achieve It
In this guide, we will go over the ingredients required for writing a good code and how to achieve it.
Lisa Haas
December 23, 2020
Penetration Testing vs Vulnerability Scanning: How to Choose?
Learn key differences between penetration testing and vulnerability scanning, and which test is best for your organization.
Lisa Haas
December 21, 2020
How to Protect Against Buffer Overflow Attack
All about buffer overflow attacks, which continue to be one of the most crucial vulnerabilities in the Information Security Domain.
Lisa Haas
December 14, 2020
Spaghetti Code: A Recipe For Vulnerable Code & How To Fix It
Spaghetti code poses a vulnerable risk to your data and database if not properly secured. Learn what it means and how to fix it.
Lisa Haas
December 14, 2020
Protecting Your Site From Broken Link Hijacking
Your site’s broken links might be one of your biggest security threats, learn how to get your site protected from broken links hijacking.
Lisa Haas
December 7, 2020
Preventing Path Traversal
How to prevent the path traversal vulnerability, a web security risk that allows the attacker to read unrecognized files on the application server.
Lisa Haas
December 6, 2020
Angular and Firebase Authentication Integration
In this tutorial, we will be focusing on implementing Firebase authentication with an Angular application.
Lisa Haas
November 22, 2020
3 Types of Security Vulnerabilities That Affect Your Code
Three common security vulnerabilities that affect your code. These weaknesses can be potentially exploited and affect your software security.
Lisa Haas
November 18, 2020
Monitoring JavaScript Files For Bug Bounty
Learn how to monitor and protect your javascript files using bug bounty tools such as Bug-Bounty-Toolz and JSmon by Robre.
Lisa Haas
November 3, 2020
Accidental Vulnerabilities vs. Malicious Releases
What is the difference between open source accidental vulnerabilities and malicious vulnerabilities, or supply chain attacks, and how to minimize…
Lisa Haas
October 26, 2020
Top 5 MySQL Vulnerabilities and How to Fix Them
In this article, we are going to explore and and find a fix to the top MySQL vulnerabilities in order to secure our data.
Lisa Haas
October 19, 2020
React Vulnerabilities Checklist
React has a smaller attack surface than other frameworks, however, this doesn’t mean we should not include security best practices into our…
Lisa Haas
October 8, 2020
What Are Injection Attacks and How to Protect Against Them
In this article we will be outlining some of the best practices that need to be followed in order to make your code more secure against injection…
Lisa Haas
September 28, 2020
Foundations of Writing Secure Code
To write secure code you need to follow some best practices and use the right toolset. In this article we will be outlining some of the best…
Lisa Haas
September 14, 2020
Best Python Open Source Security Tools
In this article we explore some of the best Python open-source code scanning, loose type checking, and other security tools.
Lisa Haas
August 24, 2020
Most Common Security Vulnerabilities Using JavaScript
We dive into common JavaScript vulnerabilities, the risks they pose, and how developers can address these vulnerabilities to keep their web…
Lisa Haas
July 30, 2020
Secure Coding Done Right.
In this article we put together a list of practices that offer a solid foundation for building more secure applications.
Lisa Haas
July 27, 2020
Fixing Common Go Vulnerabilities
Go is Google’s programming language released in 2009. It’s a statically typed, compiled and open source programming language. In this article, we…
Lisa Haas
July 22, 2020
The cost of unsecured code
How & why unsecure code can put intellectual property, consumer trust, business operations, and organizational services at risk, and how to avoid…
Lisa Haas
July 13, 2020
Best Practices for Docker Security For 2020
In this post, we will dive into the most important things every Docker user should keep in mind to secure their deployments.
Lisa Haas
July 6, 2020
Understanding and Preventing LDAP Injection
This article will walk you through LDAP injection, a type of attack used to exploit applications that rely on user input to construct LDAP statements.
Lisa Haas
June 29, 2020
Updating Open Source Dependencies Is a Pain, but Also the Key for Your AppSec
Why open source outdated dependencies have become a huge blind spot for developers & how you can deal with that.
Lisa Haas
June 8, 2020
How Improper Input Validation Can Lead To xPath Injections
In this article, we dive into the problem of input validation and sanitization, by showing how it serves as a gateway to vulnerabilities such as…
Lisa Haas
June 1, 2020
Secure Coding Best Practices
Matthew Butler covers the basics of the threat landscape and development best practices.
Lisa Haas
June 1, 2020
Secure Architecture and Testing Best Practices
Matthew Butler covers the threat landscape and best practices for writing secure code, looking at architecture design choices & testing strategies.
Lisa Haas
May 25, 2020
Finding and Fixing C++ Vulnerabilities
In this article, we will dive into common C/C++ vulnerabilities, including integer overflows, incorrect type conversion, and string vulnerabilities.
Lisa Haas
May 18, 2020
Python Security Practices You Should Maintain
In this article, we’ll explore best practices for securing python code from the simplest practices to the hardest one.
Lisa Haas
May 11, 2020
All you need to know about AngularJS Security
This article is designed to help you develop secure Angular applications. It dives into Angular security best practices that can ensure your…
Lisa Haas
