Skip to content

AppSec Observer

Contrast's application security blog provides the latest trends and tips in DevSecOps through instrumentation and security observability.

Subscribe Now
    Topics
    owasp-logo-389492-edited.png

    Join Us On December 12th – OWASP Bay Area MeetUp

    BAY AREA OWASP MEETUP | Tuesday, Dec. 12th, 6:30-9:00 PM Application security professionals are invited to attend the..

    demo-amoroso1117.png

    Unify Security Across Teams – See How Contrast Does it in a 60-Minute Product Demonstration

    More than ever before, the security of running enterprise applications is a shared responsibility between security,..

    Interview with Software Security Experts

    Interview with Software Security Experts

    Ed Amoroso, former CISO of AT&T, and Founder and CEO of TAG Cyber, sat down for a conversation with Contrast Security..

    How Visibility and Data Unite Engineering, Security & Operations: Dev + Sec + Ops = DevSecOps

    More than ever before, the security of a running application is a shared responsibility: The security team needs to..

    Redirects from Third-party JavaScript on Equifax Lead to More Hacks

    As we mentioned last week, Equifax continues to make headlines and ramifications of building sites with insecure code..

    USAToday.png

    Still Making Headlines – Struts 2 and the Equifax Breach

    Yes, we have all seen the headlines. But, don’t think that the issues that arose from the Equifax breach and the Struts..

    EQUIFAX-struts-webinar0917.png

    Struts 2, Equifax and You

    It's hard to overstate what's happening here. The FBI, New York and Massachusetts Attorneys General, and Congress are..

    A Week of Web Application Hacks and Vulnerabilities

    A Week of Web Application Hacks and Vulnerabilities

    Wow, what a week! Our industry is rippling from all the news surrounding the latest Struts 2 vulnerability and the..

    VULNERABILITY ALERT: CVE-2017-9805 – Struts S2-052 Exploit Released, Protection Offered

    VULNERABILITY ALERT: CVE-2017-9805 – Struts S2-052 Exploit Released, Protection Offered

    On Tuesday, September 5, 2017, a critical new Remote Code Execution (RCE) vulnerability was disclosed against all..