Just Mobile Security·Jul 22When Security by Obscurity Blinds the WAF: From Client-Side Encryption to Critical SQL Injection —…TL;DR#1: In the first part of this post, we covered how Just Mobile Security’s offensive and research team identified a recurring pattern…
Just Mobile Security·Jul 22When Security by Obscurity Blinds the WAF: From Client-Side Encryption to Critical SQL Injection —…Mapping Client-Side Encryption Across LATAM Banking and Fintech Apps
The0bzervAnt·May 29HTTP authentication under the microscopeDuring a recent networking and cybersecurity lab, I worked on setting up an Apache web server and studying how HTTP authentication…
Prashanth Ambalavanan·Apr 1Why Stolen Session Cookies Work on a Different Device — And Why That’s Not a Bug. Can we fix it?Every time someone walks into a coffee shop and connects to the wrong WiFi, they may hand over every session they have open. Here’s exactly…
