A Public Git repository & misconfiguration detection tool - GitHub - boringtools/git-alerts: A Public Git repository & misconfiguration detection tool

By Henrik Brodin, Lead Security Engineer, Research The aCropalypse is upon us! Last week, news about CVE-2023-21036, nicknamed the “aCropalypse,” spread across Twitter and other media, and I quickl…

In 2022, I embarked on a journey with jswzl, believing that a single developer could deliver immense value without a team by focusing on high-value outputs and minimizing low-leverage work. As a so…

Learn Basic Concepts of Linux. Best site to learn Linux from beginner to Advanced.

How it happened, why it matters, and what's being done about it.

CoinFabrik received a grant from the Web3 Foundation to develop a proof-of-concept tool for detecting security vulnerabilities in Parity’s…

Taking a look at the (in)security of the amazon echo dot.

Intro

IcedID continues to deliver malspam emails to facilitate a compromise. This case covers the activity from a campaign in late September of 2022. Post exploitation activities detail some familiar and … Read More

A Pentagrid security advisory about multiple vulnerabilities in the Aten PE8108 PDU remote power outlet control.

Recently for Christmas my 4 year old daughter got an Amazon Kids tablet. So far the tablet has been great and Kids+ seems like a pretty decent value for what you get. I'm very wary of the types of content available on the internet, and as a parent it's my…

The Bug Bounty Radar - Discover and explore the latest public bug bounty programs from top platforms. Find security research opportunities, compare rewards, and access the most comprehensive bug bounty database. 6 new programs added recently.

What are APIs?

APIs are the glue that holds the modern world together. They allow different applications and services to communicate with each other, and they power everything from e-commerce to social media. However, with this ease of connectivity comes…

Block 99% of spam calls and texts with the leading spam call blocker app. Create a world without spam calls and get some sweet revenge along the way!

Check that regex.

Did you know that you can effortlessly make a small passive income by simply letting an application run on your...

User enumeration in Azure Active Directory environments is an important step in attack simulations. This blog post revisits how user enumeration can be performed for Microsoft Teams and introduces a new tool called TeamsEnum.