PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

OWASP Top 10: The Risk of Cryptographic Failures

hackerone.com | blog | #web-security | #cryptography | #data-protection | #owasp | #application-security | #vulnerability-classes
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Explains what cryptographic failures are and why OWASP Top 10 ranks them highly: weak or misused cryptography can expose credentials, payment data, and personal information during storage and transmission.
Published
Collected

Related coverage

blog · netspi.com
Manual vs. Automated Testing
GE found no automated tool catches more than about 35% of the vulnerabilities manual testing uncovers, making the case for pairing scanners with skilled human analysis to lift detection accuracy.
blog · hackerone.com
GDPR and Pentesting: What You Need to Know
An overview of GDPR obligations for handling EU personal data, covering Article 32 security measures, enforcement fines against Amazon and Meta, and how regular pentesting supports compliance.
blog · hackerone.com
The Importance of Credential Rotations: Best Practices for Security and Data Protection
HackerOne explains how regular credential rotation limits breach impact, citing the 2021 Travis CI leak, and outlines the planning and cross-team effort required.
blog · hackerone.com
Securing video streaming in sub-Saharan Africa
Showmax CTO Jan Spitalnik explains how the African streaming service uses bug bounties to protect customer data and studio content, calling invited attacks painful but the best security investment.
blog · hackerone.com
What the California Consumer Privacy Act Means For You
A primer on CCPA: from 2020 California consumers can access, delete and opt out of the sale of their personal data, with obligations for businesses handling data on 50,000+ consumers or earning over $25M.
blog · hackerone.com
What percentage of your software vulnerabilities have GDPR implications?
Analysis suggests up to a quarter of bug bounty reports touch consumer data and thus carry GDPR implications; LocalTapiola's internal hackathon found 14% did, prompting a GDPR-focused bonus bounty.
Back