Mitigating clickJacking — the DevSecOps way!
ID: 0f980888-b250-5223-b4e0-f832689f3ccf
STIX ID: report--0f980888-b250-5223-b4e0-f832689f3ccf
Feed Name: Snyk Blog
Threat Score
The report describes responding to bug-bounty findings that some internal subdomains lacked X-Frame-Options protection, exposing them to clickjacking. The team used OWASP Amass for DNS enumeration and Security Headers Checker (with jq) to locate vulnerable endpoints, remediated the issues, and instituted daily scans and tests to prevent regressions.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.