Last month, during Ekoparty, Blue Frost Security published a Windows challenge. Since having a Windows exploitation challenge, is one of a kind in CTFs, and since I’ve found the challenge interesting and very clever, I’ve decided to post about my reverse…

### Summary
An attacker could, through a link or website, take over the computer of a Visual Studio Code user and any computers they were connected to via the [Visual Studio Code Remote Developmen...

This post contains a chain of vulnerabilities I responsibly disclosed to Riot Games in November of 2016. I’m publicly disclosing it now as…

Leaders in Information Security

Aqua Nautilus discovers Redigo, new previously undetected Go-based malware that targets Redis servers to gain domination on the compromised machine

NVIDIA released a security update fixing 25 GPU display driver vulnerabilities that could lead to code execution, denial of service, and more.

Real-time HTTP Intrusion Detection. Contribute to kitabisa/teler development by creating an account on GitHub.

This write-up won’t be an intense discussion on security code review techniques this time. We’ll simply let do all the hard work by a third party: CodeQL.

New software supply chain vulnerabilities use artifact poisoning and attack the software development pipelines on projects using GitHub Actions.

OWASP Top 10 CI/CD Security Risks on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.

When your startup is struggling to find its product-market fit, security is the last thing on your mind - and according to security expert Matt Spitz, that’s perfectly fine! Matt is Vanta's Head of Engineering and he joins this week's episode of Dev Interrupted…

DoS Attacks are Dead: Demystifying Practical DoS Attacks.

Beside bug fixes this release introduces many new features. You are invited to celebrate the new EMBA version with us.


Spread the word and secure the Internet of Things with EMBA!



Since versio...

Last Minute Patch Thwarts Pwn2Own Entries

Recently, we encountered an obscure security measure while researching GitHub repositories: the popular repository namespace retirement. This security measure was implemented by GitHub to protect (popular) repositories against repo jacking (i.e. hijacking…

The mission of the CVE® Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities.