2023-05-16 08:21
For another year, RSAC brought together thousands of cybersecurity professionals for four days of expert perspectives, groundbreaking innovation, and best practices.For some of our team memb… Read More
Blog Directory > Technology Blogs > Jscrambler technology Blog >
Jscrambler Blog
blog.jscrambler.com
Tags:
payment
jscrambler
script
thirdparty
security standards
routing
false
vue draggable
javascript
testing
Jscrambler is a Web startup that works on highly innovative security products to protect Web and Mobile Applications. Its flagship product, Jscrambler, is a JavaScript protection solution that has so far been used by more than 28.000 companies and individuals, across 145 countries. It is trusted by Fortune 500 companies and organizations in a number of sectors, including Finance, Advertising, Media and Gaming. It makes applications self-defensive and resilient against tampering, malware injection, IP and code theft, among other attacks. Jscrambler's blog covers topics related with JavaScript, Web Development and Security.
2023-05-03 08:21
Testing our entire application to identify bugs, website performance, and poor UI/UX functionalities is essential. End-to-End testing can assist in solving all of these issues as it involves… Read More
2023-04-24 07:54
Integrating Jscrambler with GitHub will make it easier for users to include Jscrambler’s Code Integrity protection in their build pipeline.
The users have the action ready on the GitHu… Read More
2023-04-11 14:37
Server-side rendering (SSR) is the technique of generating the page on the server side and then once it's ready, sending it over to the client side to hydrate. SSR is also good from a searc… Read More
2023-04-04 08:33
A kanban board is a management tool that tracks and manages the team's activity in an organization or personal projects. It has a sequence of columns with different tracking categories or ac… Read More
2023-03-21 11:08
Jscrambler has joined the PCI Security Standards Council (PCI SSC) as a new Principal Participating Organization. Jscrambler will help drive the future of global payment security with a stra… Read More
2023-03-14 10:29
The Payment Card Industry (PCI) Data Security Standard (DSS) is a well-known general data security standard that is applicable to all organizations that store, process, or transmit payment c… Read More
2023-03-07 12:22
PCI DSS 4.0 contains two new requirements designed to protect against (requirement 6.4.3) and detect (requirement 11.6.1) e-commerce skimming attacks. These two new requirements are a best p… Read More
2023-02-28 17:42
In this tutorial, you'll learn the basics of how to route pages in your Next.js application. Throughout the course of this tutorial, I'll try to explain the different types of routing availa… Read More
2023-02-22 10:06
E-commerce websites are at constant risk of data skimming attacks because of unprotected JavaScript that runs on the payment page. More than 99% of all websites use JavaScript in some form… Read More
2023-02-14 10:00
Service workers are JavaScript workers that run in the background of a web page, act as a proxy between the web browser and the server, and can be used to manipulate the DOM (Document Object… Read More
2023-02-07 09:28
“I don’t have full control and visibility of third-party scripts on my website.”That is the most common concern we heard from security and risk professionals at PCI London… Read More
2023-01-31 11:30
Unit testing is an important phase of software development. It helps in adding new enhancements without breaking the existing application features. There are a number of tools and frameworks… Read More
2023-01-24 09:03
Millions of people shop online every day using payment cards. The move to e-commerce was accelerated by the pandemic, particularly in companies and areas where an online transactional presen… Read More
2023-01-11 10:04
As a Vue developer, you've probably heard of the terms Vuex and Vue.observable; both are used to control the state of your application, but one is rather lengthy and tough for a newbie to g… Read More
2022-12-05 09:54
Authors: Pedro Fortuna, Pedro Marrucho, David AlvesIn the last few years, we’ve seen Magecart or Web Skimming Attacks become common. They operate in campaigns, trying to hit as many t… Read More
2022-11-08 15:30
It has been almost twelve years since I first attended an OWASP event, the OWASP Summit 2011 in Portugal, and it was memorable. Unlike conferences, which are more formal, the purpose of the… Read More
2022-10-28 08:21
In this blog post, let's learn about the lesser known vulnerability known as HTTP Parameter Pollution or HPP, which affects multiple modern applications. We will go over what's the reasons… Read More
2022-09-30 13:24
One of VueJS's features is functional components, which is another option for how we can write our components. It allows us to design stateless components quickly. If you are a developer wh… Read More
2022-09-09 08:36
Data is one of the essences of any application. For a web app to be functional it requires the data to flow from one part of the application to another. From a React or Angular application'… Read More
2022-08-24 19:55
Each year, Gartner creates more than 100 Hype Cycles across various domains to help clients track the maturity and future potential of innovations. The Hype Cycle for Application Security… Read More
2022-07-28 10:25
In this post, we will address the role of OWASP’s MASVS-R, the Mobile Application Security Verification Standard, the application standard for mobile applications security, and how we… Read More
2022-07-01 08:20
Cross-site scripting is a vulnerability that happens when there’s an injection of malicious code to run on a regular webpage. This piece of code can go on to cause unauthorized actions… Read More
2022-06-21 13:27
E-commerce skimming, also known as form-jacking or Magecart attacks, represents the majority of criminal attacks against payment card data. They are simple to do and are hidden from the mer… Read More
2022-06-15 17:18
Introduction
We introduced MITRE ATT&CK in our previous blog post where we explored threat intelligence. In this post, we’ll take a look at every aspect of MITRE ATT&CK in deta… Read More
2022-06-03 08:35
When you have a complex mobile application structure or many screens in your application, handling navigation can become tricky. However, with open-source libraries like React Navigation, t… Read More
2022-05-25 15:26
Are you a gamer? Are you a child of the 80s and 90s? If the answer to these two questions is yes, this might be the best post you see today. Those classic games you played in the arcade wit… Read More
2022-05-20 06:48
In this blog post, we explore how there is a rise in bots attacking organizations using credential stuffing attacks and why there is a need to understand them for better and more secure mit… Read More
2022-05-10 15:08
In recent years, we have seen the technologies used for creating web products develop rapidly, and JavaScript became the predominant language of the Web. In fact, JavaScript is part of 97%… Read More
2022-05-05 16:04
About a month ago, we came across a report about the discovery of another magecart infection. Even though this infection was first detected in a known consumer electronics retailer, the sam… Read More
2022-04-22 16:04
Phishing attacks are a form of social engineering attacks and are responsible for more than 80% of the reported security incidents.In this blog post, we are going to talk about the browser i… Read More
2022-04-08 14:04
Storage means a space for putting things for future use. From a web application perspective, storage can be broadly classified into two types: server-side storage and client-side storage. S… Read More
2022-03-30 17:03
In this blog post, we explore how organizations can use public threat intelligence frameworks like Alienvault OTX, MITRE, and others alike, to enrich data into actionable intel to thwart fu… Read More
2022-03-15 17:34
The ongoing digital acceleration has brought on a lot of new challenges to companies, as technology changes rapidly and plays a bigger role across a myriad of sectors. But what does this sh… Read More
2022-01-20 17:36
Infinite Scrolling is a way to implement pagination in mobile devices. It is common among mobile interfaces due to the limited amount of space. If you use social media applications like Ins… Read More
2022-01-14 17:38
Over the last couple of years, we have witnessed the acceleration of the shift towards digitalization due to the COVID-19 pandemic. And with each new year, come new trends in the software d… Read More
2021-12-23 09:27
In the era of digitalization, there’s no doubt the online world has become a central piece of the average person’s life. From healthcare to financial services, we see new player… Read More
2021-12-09 16:23
What are Magecart web skimming attacks?
Magecart is a collective name given to cybercriminals who inject digital credit card skimmers (or web skimmers) into e-commerce and payment websites… Read More
2021-11-30 18:48
Nowadays, strict GDPR laws and regulations make it imperative for web applications to be as safe as possible. Not only from a legal point of view but also from a business perspective, it is… Read More
2021-11-11 15:45
As the web development ecosystem grew, with frameworks and libraries becoming the status quo, build tools quickly became an essential part of the dev toolchain. Gulp has been one of the mos… Read More
2021-10-28 15:15
When your Angular application loads, all the application modules are loaded whether they’re required or not. Now, it may not sound like much of an issue if the application is a small… Read More
2021-10-22 16:00
With e-commerce displaying no signs of slowing down since the start of the COVID-19 pandemic, the Magecart cyber-criminal syndicate is thriving. By evolving their web skimmers to become har… Read More
2021-10-14 08:26
If your business operations involve any type of web or mobile app, it’s likely that the source code of these apps represents a very important part of your company’s intellectual… Read More
2021-10-08 16:49
What is intellectual property theft?
Intellectual property theft (also called IP theft) refers to someone illegitimately taking possession of someone else’s proprietary inventions or… Read More
2021-09-29 15:14
Every mobile application has a splash screen and an app icon, and together they provide the first impression. An app icon is displayed in various places, such as on an app store, on the dev… Read More
2021-09-23 13:44
We are thrilled to announce that Jscrambler has just raised $15 million in Series A financing, in a round led by Ace Capital Partners and with participation from existing investors Sonae IM… Read More
2021-09-15 16:10
Gartner, the world's leading research and advisory company, has recognized Jscrambler as a Sample Vendor in the Hype Cycle for Application Security 2021.
Jscrambler's code integrity enables… Read More
2021-09-10 16:01
Development teams are building, testing, and shipping code faster than ever before. Today, we know that security has a role to play at the early stages of the DevOps workflow, but these sec… Read More
2021-09-01 15:13
Next.js is an open-source React-based framework built on top of Node.js that is aimed at developing web apps. It includes handy features such as hybrid static & server rendering, TypeSc… Read More
2021-08-26 14:45
Firebase is a service provided by Google where the back end is provided as a service for use in applications. Its database (Firebase Realtime Database) is a NoSQL database where data is sto… Read More
2021-08-18 16:39
The JavaScript language lives in a browser. Actually, let's rephrase that: a web browser has a separate part inside of it, called the JavaScript engine. This engine can understand and run J… Read More
2021-08-13 13:41
As the demand for faster product development continues to grow, developers increasingly rely on code snippets from external sources, especially JavaScript libraries and frameworks. This res… Read More
2021-07-21 08:55
Welcome back to Jscrambler 101! A collection of tutorials on how to use Jscrambler to protect your JavaScript. This tutorial covers Jscrambler version 7.2.
Introduction
Last time, on Jscram… Read More
2021-07-15 14:27
The Covid-19 pandemic has propelled eCommerce forward and increased the number of people buying online. The problem here is that cyber attackers are taking advantage of the increased eComme… Read More
2021-07-07 10:41
Forms are an integral part of the web application development scheme, and there are many different ways we can use a form. For instance, you can have multiple forms on a page or you can hav… Read More
2021-07-01 11:43
Firebase is a Backend as a Service (BaaS) that provides a variety of services for web and mobile app development. Most of the mobile apps built using React Native and Expo require knowing t… Read More
![[Case Study] How A Major Airline Is Mitigating Magecart Attacks With Jscrambler](https://cdn.blogarama.com/images/posts_thumbs_site_id/11085/1108528-1906420632.w320.jpg "[Case Study] How A Major Airline Is Mitigating Magecart Attacks With Jscrambler")
2021-06-23 10:18
If you are a cybersecurity aficionado you have likely heard of the Magecart cybercriminal groups. Very active since 2018, they are known for injecting web credit card skimmers on e-commerce… Read More
2021-06-14 15:34
If you are already familiar with the concept of data leakage, you are likely also familiar with its consequences. But what about the mechanics behind it? And even more importantly, how do y… Read More
![[Case Study] Jscrambler Helps Neobanks Protect JavaScript](https://cdn.blogarama.com/images/posts_thumbs_site_id/11085/1108528-1330072592.w320.jpg "[Case Study] Jscrambler Helps Neobanks Protect JavaScript")
2021-06-09 16:51
Leading Neobanks like Revolut, Nubank, Starling Bank, and many others keep challenging the banking industry and setting new standards — but all these Neobanks have their own challenge… Read More
2021-06-02 09:02
Before submitting data to the server, it's really important to validate if it's in the expected format. In this Angular tutorial, you'll learn how to add validations in Angular Reactive for… Read More
2021-05-27 16:22
In the wake of several recent supply chain attacks, such as the one from SolarWinds or even the recent one that led to the Celsius Networks phishing attack many are advocating for stricter… Read More
2021-05-05 16:04
Reinventing the wheel is a waste of time and effort. Let's take the example of building a car. If you try to create an engine from scratch each time you build a car, it will take quite some… Read More
2021-04-22 16:22
The rapid advancement of technology and digital acceleration we are currently witnessing has played a very important role across all industry sectors. This is especially relevant when we ar… Read More
2021-04-16 18:33
In the early hours of April 14, multiple users of the rewards-earning cryptocurrency platform Celsius Networks started reporting a suspicious email that they received.The email appeared to… Read More
2021-04-08 10:41
Even three years after the Spectre vulnerability was discovered, it continues to pose a concern, as it can still be exploited by attackers. Google recently published a proof-of-concept expl… Read More
2021-03-31 15:14
The camera feature in a mobile device allows it to capture pictures and record videos, making it very helpful in many circumstances. By using the expo-camera library the process of adding t… Read More
2021-03-26 15:53
Although remote work is not a new concept, it has substantially increased its traction since the Covid-19 pandemic started. A significant number of companies were forced to operate remotely… Read More
2021-03-18 13:02
Today is an exciting day for us as we announce joining the PCI Security Standards Council as a new Participating Organization. This means we will work together with PCI SSC to help guarante… Read More
2021-03-11 14:44
Today, we're thrilled to announce the partnership between Jscrambler and GitLab, which also marks an improved integration between both technologies.
GitLab is surely a name that most develo… Read More
2021-03-10 16:25
Over the years, we have seen more and more data breaches and leaks. In fact, the number of exposed records in Q1 2020 was 273% higher than the same period in 2019. What used to be something… Read More
2021-02-25 11:04
Geolocation in React Native applications is the ability to fetch the geographic position of the device when it is connected to the internet. It takes advantage of an API that provides the c… Read More
2021-02-11 17:44
This blog post aims to provide the most detailed and comprehensive guide to JavaScript obfuscation in 2021.Familiarity with JavaScript and npm is a plus, but not necessary to follow this gu… Read More
2021-01-27 17:50
Docker builds images automatically by reading the instructions from a Dockerfile -- a text file that contains all commands, in order, needed to build a given image.
The explanation above… Read More
2021-01-20 11:23
While dealing with mobile application security, we often hear of the OWASP Mobile Top Ten list - as its name implies, it’s a list of the top ten security risks associated with mobile… Read More
2021-01-14 17:53
Cyber attacks have already been making some significant headlines in 2021. Organizations are facing increasingly complex challenges, especially when it comes to Web security.Follwing the ex… Read More
2021-01-08 13:18
Redux Persist is a library that allows saving a Redux store in the local storage of an application. In React Native terms, Asyncstorage is a key-value based, unencrypted, asynchronous stora… Read More
2020-12-22 16:15
Digital certificate management, while promoting cybersecurity, can still lead to a variety of different issues and frustrations among DevSecOps teams. Managing potentially thousands of diff… Read More
2020-12-17 11:33
The time has come to put the native driver and mongoose to the test and benchmark how each one performs.
Mongoose is a huge help with MongoDB and offers a bunch of useful features in Node… Read More
2020-12-14 17:31
Perhaps you’ve heard the phrase “every company is an app company” before. Mobile apps have effectively transformed whole industries like transportation, media, retail, and… Read More
2020-12-11 18:06
As any software developer will know, it's vital you keep learning to improve your game and stay on top of things. This is especially important in the JavaScript ecosystem, where things keep… Read More
2020-11-25 13:06
After going through the adventure of deploying a high-availability MongoDB cluster on Docker and sharing it publicly, I decided to complement that tutorial with some security concerns and t… Read More
![Enterprise JavaScript Security [INFOGRAPHIC]](https://cdn.blogarama.com/images/posts_thumbs_site_id/11085/1108528-3736850205.w320.jpg "Enterprise JavaScript Security [INFOGRAPHIC]")
2020-11-18 16:58
A web banking app; a streaming service; a global e-commerce website; a mobile wallet. What do these all likely have in common? Their logic is built with JavaScript.
Today, every single Fort… Read More
2020-11-11 11:31
Welcome back to Jscrambler 101! A collection of tutorials on how to use Jscrambler to protect your JavaScript. This tutorial covers Jscrambler version 7.1.
Introduction
Last time, on Jscram… Read More
![Understanding JavaScript Obfuscation [INFOGRAPHIC]](https://cdn.blogarama.com/images/posts_thumbs_site_id/11085/1108528-1378418352.w320.jpg "Understanding JavaScript Obfuscation [INFOGRAPHIC]")
2020-11-03 18:30
JavaScript obfuscation isn't an easy topic to address.
Many still dismiss obfuscation on the basis of "obscurity isn't security", while dismissing the fact that obfuscation is actually a se… Read More
2020-10-21 17:31
Working with hybrid mobile app frameworks makes life easier for developers as they are able to write code once and build mobile applications that run on the main platforms with no extra eff… Read More
2020-10-16 11:28
Forms are an essential part of a mobile app — specifically, to handle user interactions that are available behind an authorization.
To ensure seamless user experience, a form componen… Read More
2020-10-07 13:17
Magecart groups have made many successful attacks on high-profile companies over the past two years. In a Magecart attack, attackers covertly inject credit card skimming code into the check… Read More
2020-10-01 17:02
The Animated library from React Native provides a great way to add animations and give app users a smooth and friendlier experience.
In this tutorial, let's explore a way to create a header… Read More
2020-09-29 10:00
The Department of Justice and the Federal Trade Commission have been issuing more scam alerts since the pandemic outbreak. Attackers are creating apps that use the same branding as official… Read More
2020-09-25 17:05
Gartner, the world's leading research and advisory company, has recognized Jscrambler as a Sample Vendor in the Hype Cycle for Application Security, 2020 and the Hype Cycle for Endpoint Sec… Read More
2020-09-24 14:44
Sometimes, we encounter situations when it's not feasible to develop a full-fledged backend from the ground up. In such situations, we rely on services like Firebase to speed up development… Read More
2020-09-16 14:10
Node.js is an extremely popular and open-source JavaScript runtime environment to create server-side applications.
This tutorial will explain how to integrate Jscrambler seamlessly into the… Read More
2020-09-08 15:09
Before we dive deep into what symmetric ciphers are and how important they are in our daily lives, there are two theoretical concepts that need to be reviewed to better understand them: (Ps… Read More
2020-09-01 14:25
Prologue
In a previous post, we showed how to automate a PostgreSQL fault-tolerant cluster with Vagrant and Ansible.
This kind of setup makes our database cluster resilient to server failur… Read More
2020-08-28 13:29
A common use case to display data when developing mobile apps with React Native is in the form of a list.
Two common ways exist in React Native to create lists: ScrollView and FlatList. Eac… Read More
2020-08-18 10:51
At last, sport is slowly but surely returning — albeit looking very different to what we all remembered.The global lockdown has seen OTT streaming services soar in popularity and usag… Read More
2020-08-11 09:10
This week, Deloitte — the largest professional services network in the world — has released the 2019 edition of its Technology Fast 500™ ranking.For the last 19 years, thi… Read More
2020-08-06 13:07
There are times when you have to handle CPU-intensive tasks in web applications. CPU-intensive tasks can be anything like a complex calculation or some logic with too many iterations. Such… Read More
2020-08-04 16:35
The cybersecurity attacks on the likes of British Airways, Macy’s and Forbes, amongst others, have been widely reported. What they all had in common was that they were targeted by Mag… Read More
2020-07-28 10:43
I often get asked if it's possible to build a resilient system with PostgreSQL.
Considering that resilience should feature cluster high-availability, fault tolerance, and self-healing, it's… Read More
Subscribe to Jscrambler
Get updates delivered right to your inbox!