Hot Topics

application threats

Naming Conventions

Breaking the Chain of Data Access: The Importance of Separating Human and Application Users

| | AI, application threats, data access, human access, Imperva Threat Research
Data, the lifeblood of any organization, relies on the database as its beating heart. As a result, businesses invest heavily in designing and monitoring all access to it. In traditional literature, there ...
Blog
Understanding Business Logic Abuse and Its Detection Challenges

Understanding Business Logic Abuse and Its Detection Challenges

| | Application Security, application threats, Business Logic Attack
Digital modernization and automation have been on a rapid trajectory for the last 5 years and were thrust forward at an even faster pace when the COVID-19 pandemic and subsequent lockdown period ...
Blog
CVE-2023-29552: Abusing the SLP Protocol to Launch Massive DDoS Amplification Attacks

CVE-2023-29552: Abusing the SLP Protocol to Launch Massive DDoS Amplification Attacks

| | Application Security, application threats, ddos, DDoS attack, Imperva Threat Research
On April 25, 2023, researchers at Bitsight and Curesec jointly discovered a high-severity vulnerability — tracked as CVE-2023-29552 — in the Service Location Protocol (SLP), a legacy Internet protocol. What is SLP ...
Blog

New Vulnerability in Popular Widget Shows Risks of Third-Party Code

| | Application Security, application threats, Data Security, Industry Perspective, Research Lab, Research labs
The Americans with Disabilities Act (ADA) includes requirements on companies falling within its scope to ensure their websites are accessible to individuals with disabilities. These requirements have created a strong incentive for ...
Blog