Data Breaches
Data Scraping Prevention Checklist for Web Assets
Automated bots harvest your public data faster than manual attackers, turning your own marketing content into a target for credential stuffing and social engineering.
web security
Everything Phish Herald has reported about web security: 6 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Clickjacking Prevention Checklist: Secure Web Interfaces
Standard browser protections now block most clickjacking attempts, but legacy interfaces and embedded frames remain vulnerable to user interface redress attacks.
Vulnerabilities
Web Application Firewalls: 6 Common Misunderstandings to Avoid
Web application firewalls filter traffic based on signatures, not intent, leaving logic flaws and authenticated attacks largely invisible to standard rule sets.
Vulnerabilities
Prevent Open Redirect Vulnerabilities: A Technical Prevention Checklist
Open redirects bypass browser security checks by masquerading as trusted domains, allowing attackers to steal session tokens or facilitate phishing campaigns without hosting their own infrastructure.
Vulnerabilities
What Is Cache Poisoning: How It Works and How to Stop It
Web cache poisoning allows attackers to serve malicious content to thousands of users by tricking servers into storing and re-serving tampered responses.
Vulnerabilities
Organisations urged to review Wordfence data on WordPress flaws disclosed 28 Sep-4 Oct 2026 to secure platforms
Organisations should review the latest Wordfence Intelligence data on WordPress flaws disclosed between 28 September and 4 October 2026.