Defending Against BOLA: Hardening Enterprise API Gateways in Distributed Microservices
A practical guide to hardening enterprise API gateways against BOLA, broken authorization, abusive clients, and lateral movement in distributed microservices.
A practical guide to hardening enterprise API gateways against BOLA, broken authorization, abusive clients, and lateral movement in distributed microservices.
Introduction This tutorial covers How to Set Up a Static IP Address on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LYNIS-2023-001 Related CVEs: CVE-2019-13033 CVE-2020-13882 Upstream summary: In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is […]
🟡 Medium ⏱ 5–30 min Last verified: 14 March 2021 Affected versions: Windows Server 2012 R2 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]
🟠 High ⏱ 5–30 min Last verified: 14 March 2021 Affected versions: Windows Server 2016 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
Transform a Vue.js autocomplete component into an accessible one with the help of ARIA attributes
How 157 people from all over the world built and scaled coronastatus.no — an open source web application that enables people to self-report symptoms of COVID-19 — using the cloud provider’s infrastructure.
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202101-23 Related CVEs: CVE-2020-28948 CVE-2020-28949 CVE-2020-36193 CVE-2018-1000888 Upstream summary: Multiple vulnerabilities have been discovered in PEAR Archive_Tar. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 15–45 min Last verified: 14 March 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29812, IBM Support Bulletin CVE: CVE-2021-29812 NVD summary: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript […]
URL: https://www.progressiverobot.com/kotlin-let-run-also-apply-with/ In this tutorial, we'll be implementing some of the important standard library functions available in Kotlin. The kotlin-stdlib provides us with useful [higher order functions](/community/tutorials/kotlin-lambda-higher-order-functions) implementing idiomatic patterns. We'll see how they make programming in Kotlin so easier and faster. The functions that we're going to discuss below are: let run also apply […]