Security News from Acunetix

06 Apr 2022

Invicti’s Spring 2022 AppSec Indicator highlights unrelenting direct-impact flaws

The spring 2022 edition of the Invicti AppSec Indicator has arrived hot off the presses, and it underscores some alarming trends for severe web vulnerabilities. The data shows that direct-impact flaws are still showing up in customer scan results at alarming rates. Worse still, these...

Read more

The post Invicti’s Spring 2022 AppSec Indicator highlights unrelenting direct-impact flaws appeared first on Acunetix.

---

Critical alert – Spring4Shell RCE (CVE-2022-22965 in Spring)

On March 31, 2022, a serious zero-day vulnerability was discovered in the Spring framework core, which is an open-source framework for building enterprise Java applications. The vulnerability, dubbed Spring4Shell (similar to Log4Shell) or Springshell, was identified as CVE-2022-22965 (at the time of writing, not yet...

Read more

The post Critical alert – Spring4Shell RCE (CVE-2022-22965 in Spring) appeared first on Acunetix.

---

Download a Copy of Invicti's Web Application Buyer's Guide

More Recent Articles

• 7 web application security best practices

• Common password vulnerabilities and how to avoid them

• How often should you test your critical web applications?

• Trends that underscore the seriousness of the cybersecurity skill gap

• Acunetix introduces IAST updates improving vulnerability and misconfiguration detection as well as scan coverage

For any enquiries, you may send us an email at sales@sgen.com.au or call 02 9416 0416.