26/02/2022 Intro to Smart Contract Security and reverse engineering of int overflow dApp security is a whole new world where we should re-learn and change our perspective on security concepts. In this...
28/01/2022 A $10,000 security bug: Identify, exploit and effectively fix SSTI in 2016, Uber paid out $10,000 for a security bug that could result into RCE. In this live workshop, we...
19/01/2022 Parser Differential: A security vulnerability that we are going to live with Parser differential is a security design flaw impacting millions of environment. It is the design flaw behind serious security attack...
06/12/2021 What you see is not what interpreter sees! 1000! Wondering why? Watch December secure programming free workshop
03/12/2021 Two Overlooked Unicode vulnerabilities - Secure Programming Live Workshop The answer is 1000! Wondering why? What you see is not what interpreter sees! Watc the video below. Event: 7...
17/11/2021 Dangerous casting of Number type in JavaScript/TypeScript In our first Defensive Programming principle we learnt that if we are dealing with weakly typed languages, we must first...
04/11/2021 Go 1.18 comes with two exciting security features It is exciting for me to see two new (security) features that will be added to Go. This will shift...
20/10/2021 Not normalising before validation bypasses security checks A security patch that was added to Apache’s httpd to prevent path traversal vulnerability was still vulnerable. This vulnerability was...