From Equifax to Capital One
There’s something in the water with web application security.
Last week, Capital One disclosed a data breach caused by a web application misconfiguration. Equifax is still cleaning up after its 2017 data breach, the result of an unpatched bug in a web application.
Flaws in web applications are abundant and easy to manipulate, making them a target for bad actors. Each new application or device adds to an already healthy pool of vulnerabilities and risk.
Read the full article, including Cymulate’s CEO’s take on the Capital One and Equifax breaches:
READ MORE
Featured Resources
View More Resources
blog
When Monitored Content Strikes Back: Account Takeover in Microsoft Purview
Cymulate found a stored XSS flaw in Microsoft Purview that exposed reviewer tokens and enabled privileged account takeover.
blog
Cymulate Launches MCP Server and Claude Plugin
How Cymulate transforms exposure validation from a destination platform into an AI-native security capability Security teams have more data than ever before, but
blog
Cymulate Cowork: Engineering Cyber Defenses at Machine Speed
Cymulate Cowork uses agentic AI to automate exposure validation, prioritize risk and accelerate cyber defense workflows.