August 2021 Summaries

Detectify has taken on challenges related to their payment processes as opportunities for improvement, with a focus on streamlining both the billing and checkout experiences. By switching subscription and billing services, they initially encountered errors that required manual correction, prompting the establishment of a cross-functional forum with relevant stakeholders to understand and resolve these issues collaboratively. This approach reduced errors to a manageable level and distributed problem-solving skills across more team members, effectively shifting ownership to appropriate teams. Concurrently, they improved the frontend checkout process to increase conversion rates by planning and executing changes based on urgency and complexity, ensuring a seamless experience for customers. These efforts not only enhanced the checkout process but also fostered a culture where problems are seen as opportunities for innovation, emphasizing communication and collaboration to drive better solutions and greater value for customers.

Detectify, a SaaS security company, has partnered with Hackers for Change to provide non-profit organizations with free, industry-quality cybersecurity services, aiming to protect them from increasing cyber threats. This collaboration leverages the expertise of ethical hackers to equip charities with the necessary tools to safeguard their data, which is particularly crucial as these organizations become more frequent targets for cybercriminals. Hackers for Change not only enhances the security of non-profits but also trains future cybersecurity professionals, offering them practical experience. Detectify's web application scanner, Deep Scan, plays a pivotal role in this partnership by enabling nonprofits to identify and address critical security vulnerabilities. The partnership also extends to events like Black Hat USA, where Detectify engaged the ethical hacking community to support Hackers for Change financially. Both organizations are committed to fostering a stronger, more secure digital community through their combined efforts.

Detectify's Crowdsource ethical hacker community has identified several security vulnerabilities across various platforms, which have been promptly integrated into the Detectify scanner for user protection. Notable vulnerabilities include remote code execution (RCE) issues in VMware vCenter and Apache Tapestry, file disclosure threats in Express Handlebars, and SQL injection vulnerabilities in OpenProject, ISPConfig, and SonicWall SMA 100. Additionally, cross-site scripting (XSS) flaws were found in Cisco ASA/FTD, Grafana, OX Appsuite, and EPrints, while WooCommerce and ElasticSearch faced SQL injection and memory disclosure threats, respectively. A path traversal vulnerability in Eclipse Jetty and a command injection issue in Hasura GraphQL Engine further underscore the diverse nature of these reported threats, highlighting the ongoing need for robust cybersecurity measures.

Detectify, a SaaS security company utilizing the expertise of ethical hackers, announced its participation in the Black Hat cybersecurity conference, held both online and in-person in Las Vegas, Nevada. The company, known for automating hacker research to enhance web application security, showcased its Deep Scan and Asset Monitoring solutions that automatically detect critical vulnerabilities and misconfigurations in web applications. Attendees had the opportunity to meet cybersecurity influencer Alissa Knight, who filmed an episode of her show at the event and discussed API security testing. Additionally, Detectify encouraged participants to vote for their favorite "hacker hero," with each vote leading to a donation to Hackers for Change, supporting charities in securing their systems.