# BeDefended Newsroom

> Research articles and security guides from the BeDefended team on application, cloud, mobile, AI and smart contract security.

## Web application security
- [The Complete Guide to CORS (In)Security](https://newsroom.bedefended.com/cors-security/): How CORS and the Same-Origin Policy work, how misconfigurations are exploited, and how to configure CORS securely.
- [Implementing secure CORS on Tomcat](https://newsroom.bedefended.com/implement-secure-cors-tomcat/): Why Tomcat's default CORS configuration is insecure and how to fix it.
- [When brute force prevention can turn in DoS](https://newsroom.bedefended.com/brute-force-prevention-dos/): Why account lockout can enable denial of service, and safer ways to stop brute-force attacks.

## AI security
- [Secure Coding with AI](https://newsroom.bedefended.com/secure-coding-with-ai/): Why AI-generated code is often insecure and how to write secure code with AI coding assistants.
- [Webinar about the Security of AI-generated code](https://newsroom.bedefended.com/webinar-security-ai-generated-code/): Common vulnerabilities in AI-generated code and how to reduce them.

## Smart contract and Web3 security
- [Why Smart Contract security matters](https://newsroom.bedefended.com/why-smart-contract-security-matters/): Smart contracts, decentralized applications and their main security risks.
- [How to protect your Decentralized Application](https://newsroom.bedefended.com/how-to-protect-decentralized-application/): Practical steps to secure a smart contract and DApp before release.

## Cloud security
- [It's time to secure your AWS Cognito configuration](https://newsroom.bedefended.com/secure-aws-cognito-configuration/): Common AWS Cognito misconfigurations and how to harden them.

## Mobile and reverse engineering
- [Hooking React Native Applications with Frida](https://newsroom.bedefended.com/hooking-react-native-applications-with-frida/): Instrumenting and modifying a React Native app's JavaScript bundle at runtime with Frida.
- [Avoid Tapjacking on Cordova apps](https://newsroom.bedefended.com/prevent-tapjacking-cordova-apps/): How tapjacking affects Cordova hybrid apps and how to prevent it.
- [How good is your JavaScript obfuscation?](https://newsroom.bedefended.com/how-good-javascript-obfuscation/): Evaluating how much protection JavaScript obfuscation actually provides.

## Conferences and webinars
- [Webinar about Secure Code Review](https://newsroom.bedefended.com/webinar-secure-code-review/): Why secure code review is central to modern application security.
- [Webinar on Proactive Strategies for Early Detection of Vulnerabilities](https://newsroom.bedefended.com/webinar-on-proactive-strategies-for-early-detection-of-vulnerabilities/): Detecting vulnerabilities early through secure code review.
- [BeDefended on stage at HackInBo 2018](https://newsroom.bedefended.com/bedefended-on-stage-at-hackinbo-2018/): Talk on CORS insecurity at HackInBo 2018.
- [BeDefended on stage at HackInBo 2022](https://newsroom.bedefended.com/bedefended-on-stage-at-hackinbo-2022/): Talk on smart contract insecurity at HackInBo 2022.