In the first of a two part series, Paul Bottomley and Wietze Beukema explore our Tanium Signal development and testing, using one particular threat group, APT32 (also known as Ocean Lotus).

Hey folks, just wanted to share this story. Yes, I could have been better prepared for what happend, I know. :)

Overview IDAPython is a powerful tool that can be used to automate tedious or complicated reverse engineering tasks. While much has been written about using IDAPython to simplify basic reversing tasks, little has been written about using IDAPython to assist…

Medical laboratory testing firm LabCorp. is investigating a weekend cyberattack on its IT network, which was resulted in the company taking certain of its syste

0 votes and 3 comments so far on Reddit

Second order SQL Injection Explained with Example, 2nd order SQL injection example, 2nd order injection web application, webapp second order sql injection

Schedule, talks and talk submissions for BSidesLisbon2018

By Angelina Liparteliani, Marketing Assistant for PixelPin Ltd

Meet the hackers who flip seized Instagram handles and cryptocurrency in a shady, buzzing underground market for stolen accounts and usernames. Their victims' weakness? Phone numbers.

Dangling markup is a technique to steal the contents of the page without noscript by using resources such as images to send the data to a remote location that an attacker controls. It is useful when ref

2 votes and 0 comments so far on Reddit

During the weekend of 6-8th of July, our CTF team – Dragon Sector – played in an invite-only competition called WCTF, held in Beijing. The other participants were top-tier groups from around the world (e.g. Shellphish, ESPR, LC↯BC or Tokyo Westerns), and…

Security Misconfiguration is #6 in the current OWASP Top Ten Most Critical Web Application Security Risks. Misconfiguration can include both errors in the installation of security, and the complete failure to install available security controls.

Critical vulnerability found in Microsoft Translator Hub where all of its 13000 projects could be deleted using indirect object reference vulnerability

A Lastline survey from June 2018 revealed that 45 percent of infosec professionals reuse passwords across multiple accounts.

Financial losses are reaching billions of dollars, and about 30-40% of attacks are conducted by schoolkids of 14–16 years.

The injected noscript steals checkout form data and sends it to a Chinese-owned domain. But the attackers are really bad at programming.

When dealing with tasks that have rules and wordlists, Hashcat internally distributes the wordlist to the shaders on the GPUs but, gives all the rules to each shader. This means every shader has a …

2 votes and 0 comments so far on Reddit

Doyensec's Blog :: Doyensec is an independent security research and development company focused on vulnerability discovery and remediation.