TC39 proposal for mitigating prototype pollution. Contribute to tc39/proposal-symbol-proto development by creating an account on GitHub.

Application security issues found by Assetnote

Learn about PixPirate, the new Android banking trojan discovered by Cleafy TIR. This malware uses ATS to automate malicious money transfers via the Pix payment platform used by multiple Brazilian banks. Discover its features, including interception of banking…

Intuition plays a prominent role in security research. It guides a researcher’s thought process to determine how to prioritize system components for analysis. What is the source of intuition? Can its source be defined and systematized so new researchers can…

Max came to know of the vulnerability after he tried to resolve unprecedented CRC error in access logs

The UK has used small credit-card sized tickets to pay for train travel for years and years, since long before I was born — originally theAPTIS ticket1,which...

Who's abusing it, and how to mitigate it in your environment

A PoC for the CVE-2022-44268 - ImageMagick arbitrary file read - GitHub - voidz0r/CVE-2022-44268: A PoC for the CVE-2022-44268 - ImageMagick arbitrary file read

StarHound - alternative tool to import SharpHound and AzureHound data into neo4j using CLI

Italy Cybersecurity Alert - Ransomware attacks have targeted thousands of computer servers worldwide. Hackers targeted VMware ESXi.

Inside an exploit that allowed logging in to Toyota’s GSPIMS application as any user, including system admins.

I’m building an open-source USB drive with a hidden self-destruct feature. Say goodbye to your data if you don’t lick your fingers before plugging it

Cover image

In this post, we discuss a weakness we discovered in the AWS Console authentication flow that allowed an attacker to partially bypass the login rate limit.