In this article, we′re going to discuss the CVE-2020-36620 vulnerability and see how a NuGet package for converting string to enum can make a C# application vulnerable to DoS attacks.

Mapping behaviors to auditd log events

JumpCloud is a Directory as a Service provider providing cloud native Directory service for cloud native companies. In a Red Team engagement or Pentest scenario, one may come across a API token which could have Administrative Privileges. Instead of going…

Terraform is the common tool if you work with IaC, but its security best practices must be followed carefully. This article provides that guidance.

Server-Side Request Forgery (SSRF) is a vulnerability that allows an attacker to trick a server-side application to make a request to an unintended location. SSRF, unlike most other specific vulnerabilities, has gained its own spot on the OWASP Top 10 2021.…

A guide to managing multiple AWS Accounts using AWS Organizations and how to reduce blast radius by leveraging Delegated Administrator capabilities within AWS Organization to avoid usage of the management root account. This post covers security benefits…

A new Android banking trojan might be spreading under the name of Nexus. It is promoted via a MaaS subnoscription and it contains some relations with an already known SOVA banking trojan. Read the full article to know more about this new player in cybercrime.

Doyensec's Blog :: Doyensec is an independent security research and development company focused on vulnerability discovery and remediation.

The possibilities allowed by filter chains will never stop amazing us.

On February 8, 2023, the DKP token on the BNB chain was attacked. The attacker used the flash loan technique to exploit the contract.

Selefra means "select * from infrastructure". It is an open-source policy-as-code software that provides analysis for multi-cloud and SaaS environments, including over 30 services...

However many books you’ve read or courses you’ve taken, you know nothing beats hands-on practice. Obviously, attacking random systems is out of the question (ethical ha...

Open Source Cloud Security. Contribute to Zeus-Labs/ZeusCloud development by creating an account on GitHub.

Phylum uncovers a threat actor taking advantage of how the Python interpreter handles Unicode to obfuscate their malware.

Detection and sanitization for Acropalypse Now - CVE-2023-21036 - infobyte/CVE-2023-21036

As mentioned in a recent blog post , our team is once again offering in-person training, and we have substantially updated our course for th...