The HTML Sanitizer is a great new API that allows web developers to filter untrusted HTML natively in the browser rather than use a JavaScript library such as DOM Purify. Microsoft created a similar A

rediscovering and developing a weaponized exploit for a command injection vulnerability in Orbi wifi systems that was reported and patched last year.

Windows RPC enumeration, discovery, and auditing via NtObjectManager. We will audit the vulnerable RPC interfaces that lead to PetitPotam, discover how they have changed over the past year, and overcome some common RPC auditing pitfalls.

Application security issues found by Assetnote

Attackers are always on the lookout to gain access to credentials, which are a critical asset to protect and are widespread throughout the organization.

Walking away from vendor certification can actually accelerate your application security program to new levels

“Some details are more important than […]

ONEKEY identified multiple issues affecting these devices leading to unauthenticated remote command execution.

qazzou19's short video with ♬ A mysterious scene of the near future like Blade Runner(994826)

Scanning 1.7 million Australian domains and finding 1.62 million SPF & DMARC email security issues.

One student sent us an email and asked “why most of websites implements a session id that seems to be a content hashed?”. Well, it’s important to discuss at this time why protecting session id must be done, and how it is evolved.
The obligatory disclaimer:…

Little words about me

Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration - GitHub - firefart/hijagger: Checks all maintainers of all NPM and Pypi packages for hija...

This blog post explains three vulnerabilities detected in the AWS IAM Authenticator where all of them were caused by the same code line.

CVE-2022–35412

Explore and run machine learning code with Kaggle Notebooks | Using data from CVE (Common Vulnerabilities and Exposures)

A large-scale phishing campaign that attempted to target over 10,000 organizations since September 2021 used adversary-in-the-middle (AiTM) phishing sites to steal passwords, hijack a user’s sign-in session, and skip the authentication process, even if the…

Azure Site Recovery is a suite of tools aimed at providing disaster recovery services for cloud resources. It provides utilities for…

Cosign and Connaisseur allow us to secure the Kubernetes deployment with signature verification, ensures that our images do not change.