Skip to content

Commit

Permalink
deploy: d64fa5c
Browse files Browse the repository at this point in the history
  • Loading branch information
ronilichtman committed Feb 4, 2025
1 parent 825ce09 commit 17dd1d3
Show file tree
Hide file tree
Showing 3 changed files with 46 additions and 1 deletion.
23 changes: 23 additions & 0 deletions 2025/2-secret-leakage/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -465,6 +465,15 @@
</span>
</a>

</li>

<li class="md-nav__item">
<a href="#related-owasp-resources" class="md-nav__link">
<span class="md-ellipsis">
Related OWASP Resources
</span>
</a>

</li>

<li class="md-nav__item">
Expand Down Expand Up @@ -712,6 +721,15 @@
</span>
</a>

</li>

<li class="md-nav__item">
<a href="#related-owasp-resources" class="md-nav__link">
<span class="md-ellipsis">
Related OWASP Resources
</span>
</a>

</li>

<li class="md-nav__item">
Expand Down Expand Up @@ -814,6 +832,11 @@ <h2 id="how-to-prevent">How To Prevent<a class="headerlink" href="#how-to-preven
<li>Automate the process of secret rotation to reduce the impact of exposed credentials.</li>
<li>Use tools that support secret versioning and automated updates in dependent services.</li>
</ul>
<h2 id="related-owasp-resources">Related OWASP Resources<a class="headerlink" href="#related-owasp-resources" title="Permanent link">&para;</a></h2>
<ul>
<li><a href="https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html">OWASP Secrets Management Cheat Sheet</a></li>
<li><a href="https://github.com/OWASP/wrongsecrets/">OWASP WrongSecrets project</a></li>
</ul>
<h2 id="references">References<a class="headerlink" href="#references" title="Permanent link">&para;</a></h2>
<ul>
<li>38TB of data accidentally exposed by Microsoft AI researchers - <a href="https://www.wiz.io/blog/38-terabytes-of-private-data-accidentally-exposed-by-microsoft-ai-researchers">link</a></li>
Expand Down
22 changes: 22 additions & 0 deletions 2025/4-insecure-authentication/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -507,6 +507,15 @@
</span>
</a>

</li>

<li class="md-nav__item">
<a href="#related-owasp-resources" class="md-nav__link">
<span class="md-ellipsis">
Related OWASP Resources
</span>
</a>

</li>

<li class="md-nav__item">
Expand Down Expand Up @@ -712,6 +721,15 @@
</span>
</a>

</li>

<li class="md-nav__item">
<a href="#related-owasp-resources" class="md-nav__link">
<span class="md-ellipsis">
Related OWASP Resources
</span>
</a>

</li>

<li class="md-nav__item">
Expand Down Expand Up @@ -795,6 +813,10 @@ <h2 id="how-to-prevent">How to Prevent<a class="headerlink" href="#how-to-preven
<li><strong>Standardize OAuth Implementations:</strong> Avoid custom practices that deviate from OAuth standards to minimize security gaps.</li>
<li><strong>Conduct Regular Security Audits:</strong> Periodically review authentication methods to identify and eliminate deprecated or insecure configurations.</li>
</ul>
<h2 id="related-owasp-resources">Related OWASP Resources<a class="headerlink" href="#related-owasp-resources" title="Permanent link">&para;</a></h2>
<ul>
<li><a href="https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html">OWASP Authentication Cheat Sheet</a></li>
</ul>
<h2 id="references">References<a class="headerlink" href="#references" title="Permanent link">&para;</a></h2>
<ul>
<li><a href="https://help.salesforce.com/s/articleView?id=sf.remoteaccess_disable_username_password_flow.htm&amp;type=5">Salesforce: Disabling Insecure Authorization Flows</a></li>
Expand Down
2 changes: 1 addition & 1 deletion 2025/search/search_index.json

Large diffs are not rendered by default.

0 comments on commit 17dd1d3

Please sign in to comment.