Private proof-of-vaccination app Portpass exposed personal information, including the driver's licences, of what might be hundreds of thousands of users by leaving its website unsecured. 

Do you think that Telegram servers are coded by monkeys?

Cybersecurity via offshore IT developers can help your business stay safe. Remove vulnerabilities & prevent your app, website, enterprise software from hackers.

A hacker manifest Real-World Scenarios, Labs, and Attacks

all paths lead to clouds. Contribute to ovotech/gitoops development by creating an account on GitHub.

Human readable timestamps

TLS.support is a free diagnostic tool and REST API for testing browser and client TLS version and cipher support. The service also checks browsers and clients for common TLS-related issues and misconfigurations.

Fake Protocol Server. Contribute to fofapro/fapro development by creating an account on GitHub.

Cloud-native applications have evolved into a standardized architecture consisting of multiple loosely coupled components called microservices (implemented as containers), supported by code for providing application services called service mesh. Both of these…

Fake Protocol Server. Contribute to fofapro/fapro development by creating an account on GitHub.

Crucial's Ballistix MOD Utility v.<= 2.0.2.5 is affected by multiple Privilege Escalation (LPE) vulnerabilities in the MODAPI.sys driver.

In this post, I’ll exploit a use-after-free (CVE-2021-30528) in the Chrome browser process that I reported to escape the Chrome sandbox. This is a fairly interesting bug that shows some of the subtleties involved in the interactions between C++ and Java in…

The vast majority of websites now support encrypted connections over HTTPS. This prevents eavesdroppers from monitoring or tampering with people’s web activity and is great for privacy. However, HTTPS is optional, and all browsers still support plain unsecured…

Network, recon and offensive-security tool for Linux systems. - GitHub - medpaf/hawk: Network, recon and offensive-security tool for Linux systems.

This version contains few improvements and features:
First, the network map had upgraded by adding additional fields that enables to get insights about domain users and the amount of data transferr...

Posted in r/netsec by u/vesvault • 1 point and 0 comments

Determining the overall security posture of consumer electronics is an exceedingly hard task. In this post, we analyze four 'budget' devices.