SQL Injection (CVE-2023-35036)
In Progress MOVEit Transfer versions released before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), 2023.0.2 (15.0.2), multiple SQL injection vulnerabilities have been identified in the MOVEit…

Dominion Voting Systems is the famous voting machine vendor that’s been at the center of Trump’s 2020 election denial, used in such swing states as Georgia and Arizona. Fox News paid $700 million to settle a defamation lawsuit, over claims that Dominion machines…

tldr: Swing VPN is using its user base to DDOS sites using its users as a an attack botnet.
Introduction It all started with a friend of mine complaining that his phone was doing a request to a specific app every few seconds. Initial assumption was that the…

Block proposers speculatively execute transactions when creating blocks to maximize their profits. How can this go wrong? In “Speculative…

When you are a cyber security consultant, a pen tester or even a system operator with technical interest then you want to perform attacks…

Curated useful Open-Source projects, biweekly, no-hype. Click to read #OpenSourceDiscovery, by Pradeep Sharma, a Substack publication with hundreds of subscribers.

The abuse of misconfigured Access Control Lists is nothing new. However, it is still one of the main ways of lateral movement and privilege escalation within an active directory domain.

Dieser Artikel ist auch auf deutsch erschienen

To celebrate Franco-German friendship, German Transport Minister Wissing and his French counterpart Beaune came up with something special:
30,000 free Interrail tickets per country for travel in Germany and…

Tools for offensive security of NetBackup infrastructures - airbus-seclab/nbutools

A phishing attack is a sneaky trick that bad people use to steal your important information. They do this by pretending to be someone you trust, like your

FortiNAC is a zero-trust access solution that oversees and protects all digital assets connected to the enterprise network, covering devices from IT, IoT, OT/ICS to IoMT. – https://www.fortinet.com/products/network-access-control

second part in a two-part series going over heap overflow in MiniDLNA (CVE-2023-33476). this post provides a walkthrough of steps taken to write an exploit for this vulnerability in order to achieve remote code execution and pop a shell.

Caching is hard. Unfortunately though, caching is quite important. Hosted caching & CDNs offer incredible powers that can provide amazing performance boosts,...

This blog will cover an authentication implementation flaw Descope discovered in Microsoft Azure AD OAuth applications that, when exploited, could lead to full account takeover.

FORT MEADE, Md. — The National Security Agency (NSA) released the “Best Practices for Securing Your Home Network” Cybersecurity Information Sheet (CSI) today to help teleworkers protect their home

Crygma provides advanced cybersecurity solutions focused on delivering quantum-secure communication, identity, and data protection. Our technologies are designed to eliminate stored secrets, passwords, and static encryption keys.

Is ChatGPT truly a trustworthy ally when it comes to cybersecurity? Or does it pose a threat when implemented?

Explore cybersecurity white papers, data sheets, webinars, videos, informative blogs, and more with SecurityScorecard.