Leaders in Information Security

Rhino Security Labs discovered two username enumeration vulnerabilities in the AWS Web Console.

A security issue in Sitevision version 10.3.1 and older allows remote attacker, in certain scenarios, to gain access signing keys used for Authn SAML requests.

What could've been the largest data breach in the world - an attack chain on Google services to leak the email address of any YouTube channel

Windows 11's KB5031455 update adds RAR and 7z support via libarchive, but DEVCORE discovered multiple vulnerabilities, including Heap Buffer Overflow and arbitrary file operations. Delayed patching also enables “Half-day” attacks, putting projects like ClickHouse…

Detailing the discovery and impact of the whoAMI cloud image name confusion attack, which could allow attackers to execute code within AWS accounts due to a vulnerable pattern in AMI retrieval.

Assetnote, now a searchlight cyber company, has uncovered a zero day auth bypass in the pan-os management interface new palo alto vulnerabilities discovered A few months ago, the news broke that CVE-2024-0012 and CVE-2024-9474 were under active exploitation…

Microsoft has patched 55 Windows security flaws in its latest security update, including four zero-day vulnerabilities—two of which were actively exploited by hackers in cyberattacks.

Learn Basic Concepts of Linux. Best site to learn Linux from beginner to Advanced.

Join us for a presentation and meetup with Nadim Kobeissi, Senior Applied Cryptography Auditor of Cure53.
Denoscription
Privacy networks and cryptographic…

Expert OSINT investigations and training to keep people, businesses, and assets safe from online threats.

Burp Suite extension for bypassing client-side encryption for pentesting and bug bounty in WebSocket - Anof-cyber/PyCript-WebSocket

This release is to provide you with everything you need to establish a functioning security incident response program at your company. In this pack, we cover Definitions: This document introduces sample terminology and roles during an incident, the various…

Découvrez notre démo interactive avec intelligence artificielle appliquée à un honeypot SSH.

Overview Arechclient2, also known as sectopRAT, is a Remote Access Trojan (RAT) written in .NET. This malware is highly obfuscated using the calli obfuscator, making its analysis challenging. Despi…

Burp Suite extension for testing Passkey systems. Contribute to siamthanathack/Passkey-Raider development by creating an account on GitHub.