IT Security Expert Blog

A UK view on Cyber, Information & IT Security by Security Expert Dave Whitelegg. Everything Cyber Security from simple advice to contemplating advanced and future trends. The blog focuses on the latest developments & issues within the UK Cyber Security, including Hacking, Privacy (GDPR), Malware, Identity Theft and regulatory compliance like PCI DSS & ISO27001:2013, all will be explained in an easy to understand way.

Tuesday, 12 December 2017

Scan your app to find and fix OWASP Top 10 - 2017 vulnerabilities

Following the updated release of OWASP Top Ten (2017), I have updated my IBM developerWorks article "Scan your app to find and fix OWASP Top 10 - 2017 vulnerabilities", which was released on the IBM Developer Works website today
Posted by Dave Whitelegg at 23:30 No comments:
Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest
Labels: application security, ibm, OWASP
Newer Posts Older Posts Home
Subscribe to: Posts (Atom)
Click here for the IT Security Expert Website
Part of the

Cyber Security Expert Website
Tweets by @SecurityExpert Dave Whitelegg Media Info

Subscribe To

Posts
Atom
Posts
All Comments
Atom
All Comments

Search IT Security Expert Blog

Blog Archive

  • ►  2018 (20)
    • ►  October (1)
    • ►  September (4)
    • ►  August (1)
    • ►  July (2)
    • ►  June (1)
    • ►  May (2)
    • ►  April (1)
    • ►  March (2)
    • ►  February (3)
    • ►  January (3)
  • ▼  2017 (38)
    • ▼  December (1)
      • Scan your app to find and fix OWASP Top 10 - 2017 ...
    • ►  November (2)
    • ►  October (3)
    • ►  September (7)
    • ►  August (4)
    • ►  June (5)
    • ►  May (5)
    • ►  April (3)
    • ►  March (3)
    • ►  February (2)
    • ►  January (3)
  • ►  2016 (23)
    • ►  December (4)
    • ►  November (4)
    • ►  October (2)
    • ►  September (4)
    • ►  August (1)
    • ►  July (1)
    • ►  June (1)
    • ►  May (1)
    • ►  April (2)
    • ►  March (1)
    • ►  February (1)
    • ►  January (1)
  • ►  2015 (12)
    • ►  December (1)
    • ►  November (1)
    • ►  October (1)
    • ►  September (1)
    • ►  June (3)
    • ►  May (1)
    • ►  March (1)
    • ►  February (1)
    • ►  January (2)
  • ►  2014 (21)
    • ►  November (1)
    • ►  September (2)
    • ►  July (2)
    • ►  June (4)
    • ►  May (1)
    • ►  April (2)
    • ►  March (3)
    • ►  February (4)
    • ►  January (2)
  • ►  2013 (33)
    • ►  December (1)
    • ►  October (4)
    • ►  September (6)
    • ►  August (6)
    • ►  July (3)
    • ►  June (4)
    • ►  May (1)
    • ►  April (2)
    • ►  March (2)
    • ►  February (2)
    • ►  January (2)
  • ►  2012 (32)
    • ►  December (2)
    • ►  November (5)
    • ►  October (5)
    • ►  September (1)
    • ►  August (13)
    • ►  July (2)
    • ►  June (2)
    • ►  March (1)
    • ►  January (1)
  • ►  2011 (14)
    • ►  November (1)
    • ►  October (1)
    • ►  September (2)
    • ►  August (1)
    • ►  June (1)
    • ►  April (1)
    • ►  March (3)
    • ►  February (1)
    • ►  January (3)
  • ►  2010 (17)
    • ►  November (1)
    • ►  October (1)
    • ►  September (2)
    • ►  August (1)
    • ►  July (1)
    • ►  May (1)
    • ►  April (3)
    • ►  March (3)
    • ►  February (3)
    • ►  January (1)
  • ►  2009 (29)
    • ►  December (1)
    • ►  November (3)
    • ►  October (2)
    • ►  August (1)
    • ►  July (4)
    • ►  June (3)
    • ►  May (1)
    • ►  April (2)
    • ►  March (4)
    • ►  February (4)
    • ►  January (4)
  • ►  2008 (26)
    • ►  December (3)
    • ►  November (2)
    • ►  October (3)
    • ►  September (2)
    • ►  July (2)
    • ►  June (3)
    • ►  May (1)
    • ►  April (1)
    • ►  March (4)
    • ►  February (1)
    • ►  January (4)
  • ►  2007 (60)
    • ►  December (6)
    • ►  November (14)
    • ►  October (4)
    • ►  September (8)
    • ►  August (6)
    • ►  July (6)
    • ►  June (9)
    • ►  May (7)

Post Categories

Data Protection data breach Home Security Hacking privacy Security Awareness PCI DSS cyber security roundup Payment Card Fraud malware Patching Encryption ID Theft ransomware DPA password security Microsoft GDPR hackers web application security DDoS Social Media Wifi Security Cyberwar cyber nation-state Cyber Crime ICO yahoo Mobile Security adobe Network Security talktalk Fraud ibm iot Cloud Security NCSC RSAC Snowden Threat application security wannacry OWASP Risk Management Vulnerability Management Big Data GCHQ Terrorism facebook infographic nhs NSA Third Party Security Compliance Twitter brexit cryptocurrencies dark web petya APT10 APT28 Apache Apple British Airways CCTV Policies Windows XP amazon appscan botnets enterprise security football incident management podcast BYOD Car Security Cisco Cobalt Cryptojacking Currys Dixons carphone Heartbleed Intel Magecart Meltdown Mirai Physical Security SHA-1 Spectre anti-virus aws bitcoin cyber insurance data retension dixons equifax firewall kaspersky lenovo tor AMD APT3 APT37 APTC23 CeX Cyber Bullying Cyber Essentials FASTR Gaming Hacktivism Huawei ISO27001 Krack MH370 O365 PC World PoisonTap PokemonGo RAA Security Today Typeform Uber adware artificial intelligence awards blueborne book review career deltacharlie dropbox drown hidden cobra locky moneytaker outpost24 piracy scam snapchat spyware superfish telegram winzip

Most Popular Posts of All Time

  • Facebook Live Oyster Pearl Party Scams
    A little off-topic but recently I've been asked so many times about the Pearl Parties live broadcasts appearing all over Facebook status...
  • Securely Wiping your Personal Data from the iPhone
    It seems like every year Apple release a better 'must have' version of the amazing iPhone, sparking a rush to upgrade by the masses...
  • Reducing your Risk of Credit Card & Identity Fraud
    Here's my 15 tips to help reduce your personal risk of credit card fraud and identify fraud. Oh when I say identify fraud\theft, I mean ...
  • WinZip Encryption Password Security
    Post Updated - See  WinZip Encryption Password Security (2017) Recently I have received several Emails asking about WinZip encryption, and...
  • UK Shops with Minimum Spend OR Charges for Accepting Card Payments
    I really love those new Visa World Cup Football TV and the Barclaycard Contactless Card commercials (see below). These ads depic...
  • Why isn’t the GCHQ & NSA Privacy Invasion Socially Accepted?
    Post Snowden it is easy to jump on the media bandwagon, cry foul that GCHQ and the NSA have gone too far, forsaking our Privacy for Securit...
  • Web Application Security: AppScan Tutorial
    Recently I was approached to write a security tutorial for the IBM developerWorks website, specifically about IBM Rational AppScan. AppScan ...

Cyber Security News Stream

Tweets by @SecurityToday

Other Security Blogs

  • Google Online Security Blog
    Android Protected Confirmation: Taking transaction security to the next level - Posted by Janis Danisevskis, Information Security Engineer, Android Security *[Cross-posted from the Android Developers Blog]* In Android Pie, we introduce...
    2 hours ago
  • Securosis Highlights
    Disrupt:Ops: Why Everyone Automates in Cloud - Posted under: Why Everyone Automates in Cloud If you see me speaking about cloud it’s pretty much guaranteed I’ll eventually say: Cloud security starts ...
    3 hours ago
  • Help Net Security - News
    Financial industry unites to enhance data security, innovation and consumer control - Financial institutions, fintech firms and industry groups launched the Financial Data Exchange (FDX), a non-profit organization to unify the financial se...
    6 hours ago
  • Schneier on Security
    West Virginia Using Internet Voting - This is crazy (and dangerous). West Virginia is allowing people to vote via a smart-phone app. Even crazier, the app uses blockchain -- presumably because ...
    8 hours ago
  • SecurityWatch
    Dublin Information Sec 2018: take note of this advice to embed lessons from a data breach - When assembling an incident response team, it’s worth including someone whose job is to take notes. It might seem like a small point, but it’s a […] The ...
    3 days ago
  • Krebs on Security
    Supply Chain Security 101: An Expert’s View - Earlier this month I spoke at a cybersecurity conference in Albany, N.Y. alongside Tony Sager, senior vice president and chief evangelist at the Center for...
    6 days ago
  • Network Security Blog
    Lucky Break - One of the things I do from time to time is throw out an open ended question on Twitter. Sometimes I’m making a point, sometimes I just want to amuse myse...
    4 weeks ago
  • Latest articles from SC Magazine UK
    400% increase in POS malware variants across US Thanksgiving weekend - Proofpoint researchers have written a blogpost detailing a 400 percent increase in Point-of-Sale malware variants across Thanksgiving weekend in the US.
    1 year ago
  • The Ashimmy Blog
    2016 Social Security Blogger Award Voting is Open Now! - OK everyone, the Social Security Blogger Award Voting is now open! You can vote for the winners at: https://www.surveymonkey.com/r/TMRP8Z5 A couple of thin...
    2 years ago
  • SpiderLabs Anterior
    TrustKeeper Scan Engine Update – February 4, 2015 - The latest update to the TrustKeeper scan engine that powers our Trustwave Vulnerability Management product (including both internal and external vulnerabi...
    3 years ago

Support Bloggers Rights

Bloggers' Rights at EFF

About Me

My photo
Dave Whitelegg
View my complete profile

ShareThis

Disclaimer

This is a personal website, all views or opinions represented in this blog are personal to Dave Whitelegg and guest bloggers that post, and do not represent the views or opinions of any business or organisation. All content provided on this blog is for informational purposes only. The owner of this blog makes no representations as to the accuracy or completeness of any information on this site or found by following any link on this site. The owner will not be liable for any errors or omissions in this information nor for the availability of this information.
All original content copyright David Whitelegg 2007-2016. You may not use any original content with. Awesome Inc. theme. Powered by Blogger.