Category: Checkmarx
CVE-2020-35774: twitter-server XSS Vulnerability Discovered
After researching twitter-server, the Checkmarx Security Research Team discovered a reflected cross-site scripting (XSS) vulnerability, assigned CVE-2020-35774, that exists in the administration panel of twitter-server in the “histograms”Preventing Developer Burnout in the Age of Rapid Software Delivery
This increased pace and immense pressure surrounding software development have made burnout an even bigger reality than before, at a time when developers couldn’t be more essential to maintaining business continuity. The negative consequences of2020 Checkmarx Partner Awards – APJ, EMEA & LATAM
2020 has been a year like no other and it has certainly demonstrated just how creative, determined, and committed our partners are as they have worked to support customers who are undergoing huge challenges while confronting increasing pressure2021 Software Security Predictions: Our Experts Weigh In
Nevertheless, with all of the adjustments that took place, the world of cyber attacker vs. cyber defender did not change much, other than the attack surface and threat landscape expanded beyond anyone’s ability to measure. As a result, we onceSeven Ways We’ve Helped our Partners Transform to Digital Reality During COVID
Among organizations that experienced a sudden and dramatic interruption to “business as usual” were the many resellers that market software around the world. These businesses–many of them our valued partners here at Checkmarx–still needed toHow Agencies Can Take Advantage of DevSecOps and Automation to Accelerate ATOs
To discuss how agencies can take advantage of DevSecOps, while meeting their ATO and security requirements in the same timely fashion, Checkmarx and CloudBees, along with the Institute for Critical Infrastructure Technology and CybersecurityDrupal Core: Behind the Vulnerability
This article covers the technical facets of CVE-2020-13663 that were made public by Checkmarx in June 2020, but whose details were never discussed publicly, and serves as part 1 of breaking down the vulnerabilities identified during our DrupalApache Unomi CVE-2020-13942: RCE Vulnerabilities Discovered
Given that Unomi contains an abundance of data and features tight integrations with other systems, making it a highly desired target for attackers, the Checkmarx Security Research Team analyzed the platform to uncover potential security issues.Checkmarx Solutions Now Available for Purchase on AWS Marketplace
In case you’re unfamiliar, AWS Marketplace is a curated, digital catalogue that helps customers around the globe find, buy, and use third-party software and services that run on AWS. Checkmarx is excited to announce that our solutions are nowErez Yalon: A Security Leader in the API Economy
To spread awareness around API risks and encourage developer secure coding practices when using APIs, Erez Yalon, Checkmarx’s Director of Security Research, has taken a proactive approach to addressing this topic. His expertise and thoughtLoad More