A set of security action items, built around OWASP SAMM, that you and your company can work to complete while balancing your company's ability to quickly execute and grow.

How to securely confine the zathura application to a SELinux domain.

The advisory describes a vulnerability ONEKEY identified when hunting for bugs to craft exploit chains for PWN2OWN 2021. Read advisory!

Learn how to increase the security of PHP applications, with code examples, to make them more robust and less prone to cyber-attacks.

New attack on certificate transparency reveals previously unknown domains!

Part 2

On May 27th, I reported a handful of security vulnerabilities to VMWare impacting their vRealize Operations Management Suite (vROps) appliance. In this blog ...

Posted by sanitybit - 130 votes and 1 comment

This is the last part of our SD-PWN series where we present severe vulnerabilities in four of the leading SD-WAN vendors. This time…

BlueHound - pinpoint the security issues that actually matter - GitHub - zeronetworks/BlueHound: BlueHound - pinpoint the security issues that actually matter

Learn how to quickly inventory, attack, and remediate network shares configured with excessive permissions assigned to SMB shares in Active Directory environments.

What is Reconnaissance in 'Hacking Terms'?

Cryptominers are one of the main cloud threats today. Detecting crypto miners is a complex task, but machine learning could help to develop a robust detection algorithm.

AWSGoat : A Damn Vulnerable AWS Infrastructure. Contribute to ine-labs/AWSGoat development by creating an account on GitHub.

The recent rise of HTTP Request Smuggling has seen a flood of critical findings enabling near-complete compromise of numerous major websites. However, the threat has been confined to attacker-accessib

A deep dive into an in-the-wild Android exploit Guest Post by Xingyu Jin, Android Security Research This is part one of a two-part guest...

Update History
Aug. 10, 2022
Adding clarifying details on activity involving active directory.
Aug. 10, 2022
Update made to the Cisco Response and Recommendations section related to MFA.