AppSec Observer

Contrast's application security blog provides the latest trends and tips in DevSecOps through instrumentation and security observability.

Topics

21 December 2021

With Log4j being such a ubiquitous library embedded in tens of millions applications across the Java ecosystem, it’s..

18 December 2021

The Apache Software Foundation provided another update to log4j (version 2.17.0) to address a new CVE-2021-45105 on..

16 December 2021

We monitor many thousands of applications with Contrast Assess (IAST), Contrast SCA, and Contrast Protect (RASP) so we..

16 December 2021

The information below is no longer current against the evolving security landscape. See [updated guidance] again on..

16 December 2021

Contrast is releasing SafeLog4j, a free and open-source, general purpose tool that can detect/verify vulnerable log4j..

14 December 2021

Log4Shell has done an excellent job of making the case for Runtime Application Self-Protection (RASP). Here’s the quick..

13 December 2021

Scala developers ship quickly, using the power of a scalable language as their ideas move from concept to prototype and..

11 December 2021

The world’s most used logging framework was just hit by the Log4j2 exploit, but DevSecOps teams can quickly identify..

11 December 2021

This week, Contrast Security proved that we could detect the Log4j2 vulnerability that caused CVE-2021-44228 and stop..

Prev 34 35 36 37 38 Next