"security is as important as the website’s content and seo, and thousands of websites are hacked because of misconfiguration or lack of security. if you are a website owner or security engineer looking to protect your website from attacks by clickjacking, code injection, mime types, cross site scripting, cookie hijacking etc. then this article will help you in a great way..."

"offensive security drives defensive security. we're sharing a collection of saas attack techniques to help defenders understand the threats they face..."

"this is a comprehensive guide to content security policy (csp). if you build websites for a living, csp is an important concept to know, understand, and implement to protect your users from cross-site scripting (xss) injection attacks. this post covers (almost) everything you need to know about csp..."

"we have compiled a list of some of the best practices to prevent api key leakage and keep secrets and credentials safe. secrets management doesn’t have a one-size-fits-all approach, so this list considers multiple perspectives so you can be informed in deciding to or not to implement strategies..."

"apple has just made life more difficult for mobile ad networks and other third parties who track you around the web and push stuff to you or sell your data. with the latest change of rules for developers, apple is taking aim at fingerprinting, a sneaky technique that some apps may use to covertly spy on you and your device..."

"for the cost of two cups of coffee, one man half a world away held a $25-million empire hostage, in one of the highest-profile domain disputes stemming from a rising tide of cybersquatting originating in india..."

"recent research by the university of wisconsin-madison found that “a significant percentage” of extensions in chrome — about 12.5% — have received permissions from users that enable them to access sensitive personal information. the paper mainly focuses on passwords..."

"you don’t want to take your online security for granted, especially when you have a business that’s accessible via the internet. while many of us are used to assessing risks about what threats can become problems for our businesses, it can be easy to overlook the growing threat of online fraud. it’s best to be very proactive, so here are six ways you’ll be able to ensure your security and keep operations rolling smoothly..."

"a hands-on beginner's guide to what xss attacks are and how to prevent them..."