Chinese scientists claim to built the world's fastest supercomputer, even faster than Google Sycamore

Perception Point researchers have discovered a vulnerability in macOS which allows an attacker to bypass App Sandbox restrictions. The vulnerability was disclosed to Apple, and the fix was announced on the latest macOS Monterey 12.0.1 security update on October…

Password Hunter in Active Directory. Contribute to oldboy21/LDAP-Password-Hunter development by creating an account on GitHub.

What happens when SAST tools do more than just scanning? What if security scanners abuse their privileges?

This blog serves as the first part of our series that deep dives into Microsoft Defender for Endpoint on AWS.

BugBuntu Linux. Contribute to halencarjunior/BugBuntu development by creating an account on GitHub.

Simple S3 Bucket Testing Software. Contribute to halencarjunior/sss3 development by creating an account on GitHub.

Posted in r/netsec by u/vesvault • 1 point and 0 comments

Despite all the efforts of fixing Cross-Site Scripting (XSS) on the web, it continuously ranks as one of the most dangerous security issues in software. In particular, DOM-based XSS is ...

TL;DR: We have found no evidence that the new Trojan Source method has been used to sneak in backdoors in any of the WordPress plugins listed on WordPress.org (CVE-2021-42694 and CVE-2021-42574) A new vulnerability affecting the supply chain of Source Code…

A recently detected attack campaign involving threat actor Nobelium has caught our attention due to an attack vector our team has previously researched – Cloud Shadow Admins – that the adversary...

Approximately 40 percent of mobile phones may be uniquely identified via Bluetooth signals

Posted in r/netsec by u/4lreadytekken • 12 points and 9 comments

This class teaches Intel x86 reset vector firmware (aka BIOS). It requires you to have taken Arch1001, Arch2001, and Dbg1015.

Introducing the new Kubeconfig Canarytoken A while back we asked: “What will an attacker do if they find an AWS API key on your server?” (We are pretty convinced they will try to use it, and when t…

Threema boldly claims to be more secure than Signal. Does this hold up to scrutiny?

One of the great features of service meshes in Kubernetes is the ability to have an out-of-the-box zero-application-changes solution that delivers a powerful security feature: mTLS (mutual Transport Layer Security). But… why do we need mTLS? It’s because…

Posted in r/netsec by u/prabhus • 1 point and 0 comments