--- title: Best Vulnerability posts of 2023 | daily.dev description: The most upvoted Vulnerability posts of 2023, curated by the daily.dev community. canonical: https://daily.dev/tags/vulnerability/best-of/2023 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/vulnerability/best-of/2023 og:type: website og:site_name: daily.dev og:title: Best Vulnerability posts of 2023 | daily.dev og:description: The most upvoted Vulnerability posts of 2023, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Vulnerability — 2023 1. 1 [](/posts/top-10-secure-coding-practices-z5j-qhonu "Top 10 Secure Coding Practices") Article DZone · 4y Top 10 Secure Coding Practices This guide will share the top ten secure coding practices that every developer should know. Security breaches rose 20.5% in 2021 as cybercriminals became more sophisticated during the global pandemic. We'll cover the most common forms of cyber attacks that you need to be aware of as a developer. 66 4 2. 2 [](/posts/hackers-tools-must-have-tools-for-every-ethical-hacker-ho0i1j13t "Hackers Tools: Must-Have Tools for Every Ethical Hacker") Article DEV · 3y Hackers Tools: Must-Have Tools for Every Ethical Hacker Ethical hacking is a crucial practice in ensuring the security of computer systems and networks. Having the right tools at your disposal is essential for effective, ethical hacking. 38 1 3. 3 [](/posts/owasp-api-security-top-10-secure-your-apis-uxrbtxfne "OWASP API Security Top 10 – Secure Your APIs") Article freeCodeCamp · 3y OWASP API Security Top 10 – Secure Your APIs The OWASP API Security Top 10 is a standard reference guide highlighting the most critical web API vulnerabilities. We just published a course on the freeCodeCamp.org YouTube channel that will teach you about each security risk and techniques to fortify your APIs against potential threats. 35 4. 4 [](/posts/easy-csrf-bypass-hrhtuxpyl "Easy CSRF bypass") Article InfoSec Write-ups · 3y Easy CSRF bypass Cross-Site Request Forgery is an attack that forces an end user to execute unwanted actions on a web application in which he/she is currently authenticated. There should be no protection in place to track users’ requests or any kind of protection like asking secret questions for an update. 26 1 5. 5 [](/posts/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps-zzgjm2xsc "Google Cloud mitigated largest DDoS attack, peaking above 398 million rps") Article Community Picks · 3y Google Cloud mitigated largest DDoS attack, peaking above 398 million rps Google mitigated the largest DDoS attack to date, peaking above 398 million requests per second (rps). The attack used a novel technique called HTTP/2 Rapid Reset based on stream multiplexing. Google coordinated with industry partners to understand the attack mechanics and collaborated on mitigations. The attack vulnerability has been designated as CVE-2023-44487 with a CVSS score of 7.5\. Any enterprise or individual serving an HTTP-based workload may be at risk and should apply relevant patches or verify server vulnerability. 14 6. 6 [](/posts/15-essential-tools-for-hackers-supercharge-your-penetration-testing-toolkit--kusenftag "15 Essential Tools for Hackers: Supercharge Your Penetration Testing Toolkit!") Article InfoSec Write-ups · 3y 15 Essential Tools for Hackers: Supercharge Your Penetration Testing Toolkit! 15 Essential Tools for Hackers: Supercharge Your Penetration Testing Toolkit! We’ll explore 15 indispensable tools that will enhance your skills as a hacker and provide maximum value for your efforts. These tools are essential for anyone seeking to secure their systems effectively. 14 7. 7 [](/posts/ethical-hacking-ngpcypgmz "Ethical Hacking") Article System Weakness · 4y Ethical Hacking Ethical hacking, also known as ‘white hat’ hacking, is the practice of using hacking techniques for the purpose of identifying and resolving security vulnerabilities in computer systems and networks. Ethical hackers play a crucial role in keeping our digital world safe, says Imila Maheshan. 14 8. 8 [](/posts/the-top-10-nmap-scripts-to-unlock-network-security-k3o2yr9mt "The Top 10 Nmap Scripts to Unlock Network Security") Article Community Picks · 3y The Top 10 Nmap Scripts to Unlock Network Security The Top 10 Nmap Scripts to Unlock Network Security Nmap scripts are a powerful tool in your toolkit. They offer a wide range of functionalities, from network discovery to vulnerability assessment and penetration testing. In this article, we'll dive deep into the top 10 N map scripts that every cyber security professional should know. 11 9. 9 [](/posts/docker-vulnerability-scanning-102---going-deeper-lyqt2f9fc "Docker Vulnerability Scanning 102 - Going Deeper") Article Noted · 4y Docker Vulnerability Scanning 102 - Going Deeper Docker Vulnerability Scanning 102 - Going Deeper Let's dive deeper into Docker Vulnerability management and security with part 2 of our series. Use Trivy to find vulnerabilities & IaC misconfigurations, SBOM discovery, Cloud scanning, Kubernetes security risks, and more. 11 10. 10 [](/posts/bloomberg-blazingmq-a-modern-high-performance-open-source-message-queuing-system-yyvzsqsoj "bloomberg/blazingmq: A modern high-performance open source message queuing system") Article Pointer · 3y bloomberg/blazingmq: A modern high-performance open source message queuing system BlazingMQ is an open source distributed message queueing framework. It focuses on efficiency, reliability, and a rich feature set for modern-day workflows. BlazingMQ's back-end (message brokers) has been implemented in C++, Java, and Python. 10 11. 11 [](/posts/secure-code-reviews-t8gqhzrbt "Secure Code Reviews") Article DZone · 3y Secure Code Reviews Secure code review is essential for ensuring software applications' security and integrity. By examining the codebase for potential vulnerabilities and weaknesses, developers can identify and address security issues. This article will discuss some best practices for conducting a thorough and effective secure code review. 10 1 [See all Vulnerability archives](/tags/vulnerability/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/vulnerability/best-of/2023#page","url":"https://daily.dev/tags/vulnerability/best-of/2023","name":"Best Vulnerability Posts of 2023","description":"The most upvoted Vulnerability posts of 2023, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/vulnerability/best-of/2023#items","numberOfItems":11,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/top-10-secure-coding-practices-z5j-qhonu","name":"Top 10 Secure Coding Practices"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/hackers-tools-must-have-tools-for-every-ethical-hacker-ho0i1j13t","name":"Hackers Tools: Must-Have Tools for Every Ethical Hacker"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/owasp-api-security-top-10-secure-your-apis-uxrbtxfne","name":"OWASP API Security Top 10 – Secure Your APIs"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/easy-csrf-bypass-hrhtuxpyl","name":"Easy CSRF bypass"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps-zzgjm2xsc","name":"Google Cloud mitigated largest DDoS attack, peaking above 398 million rps"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/15-essential-tools-for-hackers-supercharge-your-penetration-testing-toolkit--kusenftag","name":"15 Essential Tools for Hackers: Supercharge Your Penetration Testing Toolkit!"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/ethical-hacking-ngpcypgmz","name":"Ethical Hacking"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/the-top-10-nmap-scripts-to-unlock-network-security-k3o2yr9mt","name":"The Top 10 Nmap Scripts to Unlock Network Security"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/docker-vulnerability-scanning-102---going-deeper-lyqt2f9fc","name":"Docker Vulnerability Scanning 102 - Going Deeper"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/bloomberg-blazingmq-a-modern-high-performance-open-source-message-queuing-system-yyvzsqsoj","name":"bloomberg/blazingmq: A modern high-performance open source message queuing system"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/secure-code-reviews-t8gqhzrbt","name":"Secure Code Reviews"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Vulnerability","item":"https://daily.dev/tags/vulnerability"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/vulnerability/best-of"},{"@type":"ListItem","position":5,"name":"2023"}]}]} ```