Prithvi Bisht
Leveraging Security Headers for Better Web App Security
Modern browsers support quite a few HTTP headers that provide an additional layer in any defense-in-depth strategy. If present in an HTTP response, these headers enable compatible browsers to enforce certain security properties.
Peleus Uhley
OWASP, IR, ML, and Internal Bug Bounties
A few weeks ago, I traveled to the OWASP Summit located just outside of London. The OWASP Summit is not a conference. It is a remote offsite event for OWASP leaders and the community to brain storm on how to improve OWASP.
gsandhu
Lessons Learned from Improving Transport Layer Security (TLS) at Adobe
Transport Layer Security (TLS) is the foundation of security on the internet. As our team evolved from primarily consultative role to solve problems for the entire company, we chose TLS as one of the areas to improve.
Karthik Thotta Ganesh
Getting Secrets Out of Source Code
Secrets are valuable information targeted by attackers to get access to your system and data. Secrets can be encryption keys, passwords, private keys, AWS secrets, Oauth tokens, JWT tokens, Slack tokens, API secrets, and so on.
Cynthia Spiess
Developing an Amazon Web Services (AWS) Security Standard
Adobe has an established footprint on Amazon Web Services (AWS). It started in 2008 with Managed Services, and expanded greatly with the launch of Creative Cloud in 2012 and the migration of Business Catalyst to AWS in 2013.
mkalra
Evolving an Application Security Team
A centralized application security team, similar to ours here at Adobe, can be the key to driving the security vision of the company. It helps implement the Secure Product Lifecycle (SPLC) and provide security expertise within the organization.
Antonio Sanso
Critical Vulnerability Uncovered in JSON Encryption
If you are using go-jose, node-jose, jose2go, Nimbus JOSE+JWT or jose4 with ECDH-ES please update to the latest version. RFC 7516 aka JSON Web Encryption (JWE) Invalid Curve Attack.
Taylor Lobb
Building Better Security Takes a Village
Hacker Village was introduced at Adobe Tech Summit in 2015. The Hacker Village was designed to provide hands-on, interactive learning about common security attacks that could target Adobe systems and services.
Chris Parkerson
Identity and Access Management in the Enterprise Environment
Click here to read this article.
Chris Parkerson
Building a Team of Digital Marketing Security Champions
Click here to read this article.