There’s a fine line between an unintended use and a bug; this was my conclusion after taking a look at Auth0, an identity-as-a-service offering with 2000 enterprise customers.

Zip Slip is a widespread arbitrary file overwrite critical vulnerability, which typically results in remote command execution. It was discovered and responsibly disclosed by the Snyk Security team, and affects thousands of projects.

Red Teams are always focused in the discovery of innovative ways to establish connections back to their command and control infrastructure. The main reasons that leads red teams to use standard pro…

2 votes and 0 so far on reddit

Zip Slip is a widespread arbitrary file overwrite critical vulnerability, which typically results in remote command execution. It was discovered and responsibly disclosed by the Snyk Security team, and affects thousands of projects.

VDOO security research teams have been conducting, for the last several months, a wide scope security research of leading IoT products in the field of safety and security. In most of the cases, the…

0 votes and 0 so far on reddit

The stable channel has been updated to 67.0.3396.79 for Windows, Mac, and Linux,   which will roll out over the coming days/weeks. Securit...

Hackers have taken control of monitors in Tabriz International Airport of Iran’s East Azerbaijan province on June 7, Iranian media outlets reported.

Cookie basics. What are targeted ads? How Facebook gets the data collected by Amazon? Third party cookies. Should I delete my cookies?

ICEBRG reduces network security risk by accelerating threat detection, triage, and response to rapidly-evolving breaches across global networks.

A bash noscript to automatize the analysis of APKs: unzip, decompile, analyze and extract information.

As part of our ongoing security research efforts, we recently reviewed various Supermicro systems and discovered serious firmware vulnerabilities.

The “Steam Inventory Helper” Chrome extension version 1.13.6 suffered from both a DOM-based Cross-site Scripting (XSS) and a clickjacking vulnerability. By

Industry largely underestimates the critical societal need to embody the highest levels of security in every network-connected device—every child’s toy, every household’s appliances, and every industry’s equipment. High development and maintenance costs have…

MycroftAI-RCE - "Zero Click" Remote Code Execution in Mycroft AI vocal assistant

Hi there!

m4ngl3m3 - Common password pattern generator using strings list

In this blog series, I will talk about my endpoint detection stack focused on Windows environments and mostly based on Sysmon.

On a typical red team assessment, a redirector is a crucial part of the infrastructure in use. A redirector is basically a box that sits out on the internet (usually in some type of cloud service provider’s network) and forwards traffic for the red team so…