We found a new Java gadget chain in the Mojarra library, one of the most used implementation of the JSF specification.

Here at SecureAuth, we’re excited to announce the release of the latest version of Impacket, our collection of Python classes for working with network protocols, and much more.  Impacket release 0.9.24 is available today and includes a lot of new features…

Here's a deep dive into what high severity alert known as CVE-2021-25742 really is and what it means for today’s organizations.

Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks.

Microsoft found a vulnerability (CVE-2021-30892) that could allow an attacker to bypass System Integrity Protection (SIP) in macOS. We shared our findings with Apple via coordinated vulnerability disclosure, and a fix was released October 26.

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

You can pretend to be Slackbot, and that’s not great..

Anatomy of a Linux Ransomware Attack - While 85% of ransomware attacks target Windows systems, Linux is becoming an increasingly popular ta

Anatomy of a Linux Ransomware Attack - While 85% of ransomware attacks target Windows systems, Linux is becoming an increasingly popular ta

Posted in r/netsec by u/c0nsumer • 2 points and 0 comments

We guard your domain, so you have pace of mind. Domain Monitoring and Proactive Phishing Protection.

Open Source Vulnerability Disclosure Program. Contribute to parikhakshat/openvdp development by creating an account on GitHub.

Even in 2021, Aon’s Security Testing practice occasionally receives requests from our clients for penetration testing of systems accessible over dialup modem.  These legacy systems have sometimes been running for decades, and often have never undergone any…

This is the story behind the latest FreeSWITCH advisories and one sleepless night we ended up with 4 vulnerabilities that needed reporting. Then, one more vulnerability found due to a bug in our own software. We tell how these flaws were discovered, reported…

EMBArk - The firmware security scanning environment - GitHub - e-m-b-a/embark: EMBArk - The firmware security scanning environment

Many companies are using cloud services such as Microsoft 365 for email, file sharing and communicating. If an attacker gains access to valid credentials that allows them to authenticate to the acc…

Intro This report will go through an intrusion from July that began with an email, which included a link to Google’s Feed Proxy service that was used to download a malicious Word document. Up…

In this guide you will learn how to install and protect WordPress with the Open Source Web Application Firewall (WAF) ModSecurity. We will also install the latest protection rules from the OWASP Core Rule Set (CRS). A WAF is a great addition to the Cyber…