What Are Passkeys and How Does Passwordless Authentication Work?
Passkeys replace passwords with phishing-resistant keys. Here is how passwordless sign-in works and how Canadian organizations roll it out.
What Are Security Logging and Monitoring Failures and How Do You Prevent Them?
Security logging and monitoring failures let attackers hide in your network for months. Here is how to record, watch, and alert the right way.
What Are Software and Data Integrity Failures and How Do You Prevent Them?
Software and data integrity failures let attackers slip hostile code through your updates, dependencies, and build pipeline. Here is how to stop them.
What Are Identification and Authentication Failures and How Do You Prevent Them?
Identification and authentication failures rank seventh on the OWASP Top 10. Learn how attackers break logins and sessions, and how to shut each path down.
What Are Vulnerable and Outdated Components and How Do You Prevent Them?
Vulnerable and outdated components rank sixth on the OWASP Top 10. Learn why known flaws go unpatched and how to find and fix them in your software.
What Is Security Misconfiguration and How Do You Prevent It?
Security misconfiguration appears in 90% of tested applications. Learn where it hides and how to prevent it in your organization.
What Is Insecure Design and How Do You Prevent It?
Insecure design is a flaw built into your architecture, not your code. See why OWASP ranks it the fourth web risk and how to prevent it.
What Are Cryptographic Failures and How Do You Prevent Them?
Cryptographic failures expose sensitive data through weak or missing encryption. See why OWASP ranks it the second web risk and how to prevent it.
What Is Broken Access Control and How Do You Prevent It?
Broken access control lets one user reach another’s data by changing a number. See why OWASP ranks it the top web risk and how to shut it down.
What Is Server-Side Request Forgery (SSRF) and How Do You Prevent It?
Server-side request forgery turns your own trusted server into an attacker’s tool. See how SSRF works and how your team shuts it down.
