Skip to content

AppSec Observer

Contrast's application security blog provides the latest trends and tips in DevSecOps through instrumentation and security observability.

Subscribe Now
    Topics
    Contrast Security discovers Netflix OSS Genie bug that can lead to RCE during file upload

    Contrast Security discovers Netflix OSS Genie bug that can lead to RCE during file upload

    Genie is a federated big data orchestration and execution engine developed and open sourced by Netflix.

    Cybersecurity Insights with Contrast CISO David Lindner | 5/17/24

    Cybersecurity Insights with Contrast CISO David Lindner | 5/17/24

    Insight #1 Would you rather a. keep finding more vulnerabilities and building that security backlog until it leads your..

    Cybersecurity Insights with Contrast CISO David Lindner | 5/10/24

    Cybersecurity Insights with Contrast CISO David Lindner | 5/10/24

    Insight #1 The Cybersecurity and Infrastructure Security Agency’s (CISA’s) Known Exploited Vulnerabilities (KEV) list..

    Cybersecurity Insights with Contrast CISO David Lindner | 5/3/24

    Cybersecurity Insights with Contrast CISO David Lindner | 5/3/24

    Insight #1 Here we go again: Verizon’s new Data Breach Investigations Report (DBIR) is out, and once again,..

    Cybersecurity Insights with Contrast CISO David Lindner | 4/26/24

    Cybersecurity Insights with Contrast CISO David Lindner | 4/26/24

    Insight #1 AI is clearly becoming a problem, with headlines capturing incidents such as a deepfake audio impersonating..

    Cybersecurity Insights with Contrast CISO David Lindner | 4/19/24

    Cybersecurity Insights with Contrast CISO David Lindner | 4/19/24

    Insight #1 One of the most significant errors an organization can make is assuming they are not a target. This belief..

    Cybersecurity Insights with Contrast CISO David Lindner | 4/12/24

    Cybersecurity Insights with Contrast CISO David Lindner | 4/12/24

    Insight #1 I was at the Kernelcon conference last week and heard that Gen AI is going to wreck development because..

    Cybersecurity Insights with Contrast CISO David Lindner | 4/5/24

    Cybersecurity Insights with Contrast CISO David Lindner | 4/5/24

    Insight #1 A recent report found that security and privacy concerns are holding back the use of artificial intelligence..

    CISA asks software devs to stamp out ‘unforgivable’ SQL injection vulnerabilities

    CISA asks software devs to stamp out ‘unforgivable’ SQL injection vulnerabilities

    On Wednesday, March 27, CISA and the FBI issued a cry for help: We need to stamp out SQL injection vulnerabilities, and..