Unexpected application states are often overlooked and can introduce severe security vulnerabilities. Read more about this real-world example.

Ido Veltzman speaking at BSidesTLV 2023: (Lady|)Lord Of The Ring

Persistence via Shell Extensions. Contribute to aahmad097/Test004 development by creating an account on GitHub.

Gaining a temporary root on the Amazon echo dot 2nd generation.

POC of CVE-2023-35086 only DoS. Contribute to tin-z/CVE-2023-35086-POC development by creating an account on GitHub.

Q: Can we use AI for firmware analysis?
A: Sure, let's do it! EMBA now supports AI-assisted firmware analysis.



Again, we rise the bar in the field of Open-Source firmware security analysis. ...

VulnCheck develops an exploit that gets a root shell on MikroTik RouterOS.

Messaging applications are increasingly making use of end-to-end security mechanisms to ensure that messages are only accessible to the communicating endpoints, and not to any servers involved in delivering messages. Establishing keys to provide such protections…

This research aimed to investigate the files that companies might have accidentally uploaded to GitHub and identify any sensitive information that could be

The noscript sounds dramatic, right? Is this clickbait? No, it isn’t. Bear with me while I make my case to justify the noscript. So, what’s this dangerous minuscule file the noscript talks about?

Doyensec's Blog :: Doyensec is an independent security research and development company focused on vulnerability discovery and remediation.

LKM Linux rootkit. Contribute to hardenedvault/Reptile development by creating an account on GitHub.

In recent times, the security community has been witnessing an increasing number of reports from researchers highlighting various bypass techniques targeting AWS Web Application Firewall¹. These bypasses have brought to light not only the absence of certain…

TETRA:BURST is a collection of five vulnerabilities, two of which are deemed critical, affecting the Terrestrial Trunked Radio (TETRA) standard used globally by law enforcement, military, critical infrastructure, and industrial asset owners in the power,…

Embedding Scalable Vector Graphics (SVG) can expose websites to code injection. This article explores how SVGs work, the risks they pose, and how to mitigate them.

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Pers...

This post discusses security concerns and two vulnerabilities in Harmony and oByte, two browser extensions that serves as a cryptocurrency software wallet.