MONTREAL -- Some 20,000 Air Canada customers woke up Wednesday to learn their personal information may have been compromised after a breach in the airline's mobile app that prompted a lockdown on all 1.7 million accounts until their passwords could be changed.

Help stop DDOS attacks.

Sub-domain takeovers are all the rage in the bug bounty scene at the moment. You’ve probably heard about some bug bounty legends who are…

Dotelite_GR introduces a new red teaming lateral movement technique, using trusted SSL Certificates within internal networks. #redteaming #lateralmovement

Overview WCX files can be used to configure a Microsoft Workplace on a system with a couple of clicks. The enrollment process could disclose credentials in the form of a NetNTLM hash. Authentication will either take place automatically on older...

How can we build the SOC of tomorrow? By respecting the law of data gravity. If we can perform security analytics close to where the data already is, we can increase the speed of response.

Just 24 hours after a zero-day bug in Windows task scheduler was revealed by @SandboxExplorer on Twitter, the vulnerability has been patched. While Microsoft said it would “proactively update…

Contribute to gameFace22/vulnhub-walkthrough development by creating an account on GitHub.

2 votes and 0 comments so far on Reddit

3 votes and 0 comments so far on Reddit

There are many ways to analyze malware. In this blog post, we illustrate a typical analysis method: comparing an unknown sample with a known sample, to determine if the unknown sample is malicious …

Being Who You Are Can be a Bad Thing if You're a System Service by Mitja Kolsek, the 0patch Team Earlier this week security researc...

Being Who You Are Can be a Bad Thing if You're a System Service by Mitja Kolsek, the 0patch Team Earlier this week security researc...

VerSprite's cybersecurity research team analyzes JSON Deserialization Memory Corruption Vulnerabilities on Android. Stay tuned for the rest of the series.

One of the coolest new features released in the recent beta version of Burp Suite is the introduction of a REST API. I blogged about the UI and some other feature enhancements earlier this week. Today I want to talk a little bit about a command-line Ruby…

This Cheatsheet covers large number of detection & exploitation scenarios around Out of Band Exploitation Techniques. Primarily targetting DNS and ICMP.

In a new solution guide, Microsoft has explained how to create an Azure-based solution to detect mobile bank fraud within two seconds, helping mitigate fraudulent transactions and SIM swap attacks.

How I found a vulnerability in the application, and how you can too!

1 vote and 0 comments so far on Reddit

1 points and 1 comments so far on reddit