Stopping Business Logic Attacks: Why a WAF is no Longer Enough - Karl Triebes - ASW #255
19 September 2023 - 1 hour 15 minsThe majority of attacks are now automated, with a growing number of attacks targeting business logic via APIs, which is unique to every organization. This shift makes traditional signature-based defenses insufficient to stop targeted business logic attacks on their own. In this discussion, Karl Triebes shares how flaws in business logic design can leave applications and APIs open to attack and what tools organizations need to effectively mitigate these threats.
This segment is sponsored by Imperva. Visit https://securityweekly.com/imperva to learn more about them!
In the news segment, a slew of XSS in Azure's HDInsights, CNCF releases fuzzing and security audits on Kyverno and Dragonfly2...
Series Episodes
Scam Baiting, AI, and the New Grift Economy, Part 1 - Rinoa Poison - SWN #566
35 mins
24 March Finished
Can AI help critical infrastructure, the state of the cyber market, and weekly news - Mike Privette, Kara Sprague - ESW #451
1 hour 42 mins
23 March Finished
Ahab and Peewee Herman, Zoom, Vibe Hacking, SharePoint, Meta, AgeID, Josh Marpet - SWN #565
33 mins
20 March Finished
Hacking IP KVMs & Reversing with Radare2 - Sergi Àlvarez - PSW #918
2 hours 10 mins
19 March Finished
