Drupal has recently announced an update to fix a critical remote code execution exploit (SA-CORE-2018-002/CVE-2018-7600). This patch is to disallow forms and form fields from starting with the “#” character.

Researchers discover a misconfiguration error which makes it possible to upload arbitrary file to Amazon Go's Logging Bucket.

This is a guest post by Blake Loring, a PhD student at Royal Holloway, University of London. Blake worked at Cloudflare as an intern in the

DdiMon - Monitoring and controlling kernel API calls with stealth hook using EPT

I have been performing “red team” breach assessments for many years. Often the goal is penetrating an external network, and gaining access…

The most widely exploited vulnerability in 2017 was a well-known Microsoft Office bug (CVE-2017-0199), according to new research. Recorded Future released a report Tuesday detailing the top 10 vulnerabilities used by cybercriminals in 2017. Microsoft products…

Even basic devices can be secured, according to Securithings.

Microsoft Products Are Hackers’ Favorite — Report. Recorded Future claims Flash was less popular in 2017

One of the first things an attacker will do when reverse engineering a mobile application is to bypass the SSL/TLS (Secure Sockets Layer/Transport Layer Security) protection to gain a better insight in the application’s functioning and the way it communicates…

VPN leaks users’ IPs via WebRTC. I’ve tested seventy VPN providers and 16 of them leaks users’ IPs via WebRTC (23%)

Before you launch your new product to the world, make sure you're following the basic security guidelines in this checklist.

Boeing has been hit by the WannaCry computer virus. Some airplane production may be affected

Microsoft Products Are Hackers’ Favorite — Report. Recorded Future claims Flash was less popular in 2017

Er, the Home Office might want to get that fixed before Brexit

If you are done with the privacy practices of Facebook you can break away from it. The hard part is the social aspect of family members and friends that may not. But you go back to the old methods of socializing by direct texting or actually picking up the…

The social network will reward people for reporting misuses of data by app developers.

Introduction Formbook is a form-grabber and stealer malware written in C and x86 assembly language. It’s a ready to sell malware, that can be used by cyber-criminals who don’t have any skill in malware development. The sample analyzed in this blog-post has…