Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets - Legit-Labs/legitify

A catalog of methods to maintain access to the AWS control plane.

A technical write-up for a cross-site request forgery vulnerability present in some Debug Adapter Protocol implementations. The Debug Adapter Protocol is used by VS Code and other development tools to debug programs. The write-up details the vulnerability…

Leaders in Information Security

Introduction I’ve been doing some Linux kernel exploit development/study and vulnerability research off and on since last Fall and a few months ago I had some downtime on vacation to sit and challenge myself to write my first data-only exploit for a real…

Manager of third-party sources of Semgrep rules 🗂 - GitHub - iosifache/semgrep-rules-manager: Manager of third-party sources of Semgrep rules 🗂

TL;DR Recommendations

Citrix has published a security bulletin warning users of three new vulnerabilities affecting NetScaler ADC and NetScaler Gateway.

By the end , you’ll have a solid understanding of what ports and protocols are, how they work, and why they’re so vital in the field hacking.

By Oleg Zaytsev, Nati Tal (Guardio Labs)

The second Sysdig Threat Report is packed with findings and analysis of some of the hottest cybersecurity topics this year.

Pentests.nl has discovered a vulnerability in Check Point Gaia Portal which could be exploited to execute code on the underlying system.

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets - Legit-Labs/legitify

A detailed walkthrough of the process and hurdles faced in leveraging Evilginx3 to conduct a successful phishing campaign on a AD FS protected domain.

By Mark Brand, Project Zero In mid-2022, Project Zero was provided with access to pre-production hardware implementing the ARM MTE specifi...

Unpack the remote code execution vulnerability impacting the Microsoft Message Queueing service — CVE-2023-21554, a.k.a. QueueJumper.

🚨August 9, 2023 Update: This appears to be a slow, on-going attack. Since our initial report, two more packages have been identified as part of this campaign: ng-zulutrade-ssr and binarium-crm. We will provide periodic updates as we identify further publications…

Ripio unveils UXD on LaChain for Latin America. With LaCoin (LAC) as native, we're diving deep into security audits of the stable coin!