Security Insights

NIS2 updates EU cybersecurity rules, clarifying responsibilities and raising the bar for protection across vital sectors.

A story about how we found a critical vulnerability in the Dutch Electoral Council (Kiesraad) development infrastructure.

Template Injection is a common issue in web apps. Here’s how it works, why it matters, and simple ways to handle it.

Today’s spotlight: Local File Inclusion (LFI) vulnerability. Learn its impact, severity, and how to prevent this critical flaw.

Cross-Site Request Forgery (CSRF) exploits trust in cookies to hijack user actions. Discover risks, impact, and prevention.

Cross-site scripting (XSS) is the #1 Bug Bounty finding on our platform. Discover why it’s so common and how to prevent it.

SQL can expose or alter entire databases with a single query tweak. Here’s what it is and how to defend against it.

Broken access control via IDOR can expose accounts and data. Learn how it happens, its impact, and how to mitigate it.

When Kaseya was hit by ransomware, DIVD had warned months earlier. We sat down with its volunteers to unpack what went wrong.