The Daily Swig (@DailySwig) header
The Daily Swig (@DailySwig) profile picture

The Daily Swig

@DailySwig

Web security news and views. The latest on bug bounty programs, technical research, hacking tools, and more. DMs open for tips.

portswigger.net/daily-swig
Joined July 2017
  • Tweets6.9K
  • Following390
  • Followers10.9K
137Media
Photo by The Daily Swig (@DailySwig)Photo by The Daily Swig (@DailySwig)Photo by The Daily Swig (@DailySwig)Photo by The Daily Swig (@DailySwig)Photo by The Daily Swig (@DailySwig)Photo by The Daily Swig (@DailySwig)Photo by The Daily Swig (@DailySwig)Photo by The Daily Swig (@DailySwig)Photo by The Daily Swig (@DailySwig)Photo by The Daily Swig (@DailySwig)
We’re going teetotal: PortSwigger announces the closure of The Daily Swig portswigger.net/daily-swig/w…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
22
27
25
114
57,506
This month’s #BugBountyRadar: Fresh targets from Grindr and Miro, infosec drama with XSS Hunter’s new host, and Belgium rolls out the red carpet for ethical hackers portswigger.net/daily-swig/b…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
1
4
2,458
Attackers could have created counterfeit driving licenses by exploiting a vulnerability – now patched – in the website of India’s road transport ministry (credit @_RobinJustin_) portswigger.net/daily-swig/i…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
2
1
6
2,894
Password managers part II: The Daily Swig looks at enterprise-grade tech capable of managing login credentials, encryption keys, API tokens and more portswigger.net/daily-swig/a…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
2
3
1,374
Chromium bug allowed SameSite cookie bypass on Android devices portswigger.net/daily-swig/c…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
5
6
1,291
‘Standard web app security tests result in false negatives for web APIs’ – @hAPI_hacker on the need for bespoke defenses against increasingly popular attacks portswigger.net/daily-swig/m…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
2
11
2,009
Deserialized web security roundup: Twitter 2FA backlash, GoDaddy attack campaign, and XSS Hunter adds e2e encryption portswigger.net/daily-swig/d…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
3
3
858
The US National Institute of Standards and Technology is planning a major reform of its Cybersecurity Framework, an authoritative guideline on managing cybersecurity risk portswigger.net/daily-swig/n…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
3
3
892
Maintainers of new XSS Hunter fork add end-to-end encryption following backlash over privacy fears portswigger.net/daily-swig/n…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
1
7
1,066
A flaw in ClamAV anti-malware software has resulted in a vulnerability in Cisco security products portswigger.net/daily-swig/c…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
1
1
1
801
Weaknesses in the CVSS system have been highlighted through new research, with existing metrics blamed for 'overhyping' vulnerabilities portswigger.net/daily-swig/c…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
3
2
849
API security expert Corey J Ball (@hAPI_hacker) on how to ‘arm the testers, and help prevent that next API-related data breach’ portswigger.net/daily-swig/m…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
5
1
21
5,214
Belgium will protect ethical hackers under a nationwide safe harbor framework announced this week portswigger.net/daily-swig/b…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
2
6
1,092
A HTTP request smuggling bug has been patched in HAProxy portswigger.net/daily-swig/h…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
4
6
1,067
Belgium launches Europe’s first nationwide safe harbor for ethical hackers portswigger.net/daily-swig/b…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
14
3
35
9,365
Although Apache Kafka software has not transformed into a giant insect, it has spawned a serious security bug portswigger.net/daily-swig/r…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
3
1
7
1,613
Part one of our two-part series looks at the security pros and cons of consumer-focused password managers and what they can offer users portswigger.net/daily-swig/p…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
1
2
771
Deserialized web security roundup: KeePass dismisses ‘vulnerability’ report, OpenSSL gets patched, and Reddit admits phishing hack portswigger.net/daily-swig/d…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
3
3
686
Research into chaining OAuth flaws tops annual @PortSwigger web hacking list for 2022 (kudos @fransrosen) portswigger.net/daily-swig/o…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
1
15
39
8,529
Zero-day XSS bugs impacting four enterprise management platforms uncovered by @rapid7 portswigger.net/daily-swig/r…
PortSwigger — Web security tools, training and research

PortSwigger — Web security tools, training and research

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

portswigger.net
1
3
681
Load more