A tool to find folders excluded from AV real-time scanning using a time oracle - GitHub - bananabr/TimeException: A tool to find folders excluded from AV real-time scanning using a time oracle

In January it was reported in the mainstream media a 2FA Bypass was discovered in Facebook involving their new account center APIs. This is…

Application security issues found by Assetnote

There’s a metaphor about the fight between attackers and defenders in the Denial of Service cybersecurity game. It’s an “arms race” between ever bigger attacks throwing huge amounts of traffic at ever more sophisticated defenses (e.g. AWS shield).
Incidentally…

Aqua Nautilus uncovers threat actor HeadCrab has created an advanced malicious Redis framework that has compromised over 1200 servers and how to protect yourself

Ambionics Security team discovered a pre-authentication remote code execution in vBulletin 5.6.9.

Prologue SMPC is an interesting topic, whose the applications include systematic security and cryptographic engineering, and this article will discuss its principles, threat models and use-case.

Beside a huge number of bug fixes this release introduces multiple new features. You are invited to celebrate the new EMBA version with us.


Spread the word and secure the Internet of Things with ...

A VS Code extension to preview XML nmap output. Contribute to marduc812/vscode-nmap-peek development by creating an account on GitHub.

Security teams are receiving more headcount, tooling, and organizational support than ever before… so why are we still miserable? In this blog post, I will make the argument that a lack of pr…

Tool to view HTTP history exported from Burp Suite Community Edition - GitHub - adityatelange/bhhb: Tool to view HTTP history exported from Burp Suite Community Edition

Everything started when I was researching Windows containers. It required installing Docker Desktop for Windows, and I couldn’t help but notice that there were many Docker processes. Since some of...

TC39 proposal for mitigating prototype pollution. Contribute to tc39/proposal-symbol-proto development by creating an account on GitHub.

Application security issues found by Assetnote

Learn about PixPirate, the new Android banking trojan discovered by Cleafy TIR. This malware uses ATS to automate malicious money transfers via the Pix payment platform used by multiple Brazilian banks. Discover its features, including interception of banking…

Intuition plays a prominent role in security research. It guides a researcher’s thought process to determine how to prioritize system components for analysis. What is the source of intuition? Can its source be defined and systematized so new researchers can…