CSRC provides access to NIST's cybersecurity- and information security-related projects, publications, news and events.

We have a lot of work ahead of us in 2019, and we hope it benefits the entire PHP community

This article discusses recent university level research on web-based attacks involving the discovery, hacking and remote control of Internet of Things (IoT) devices. We examine the duration and phases of these attacks, and conclude by suggesting some web…

#BREAKINGGermany faces the biggest hacker attack in its history.Private data of almost 1000 German #Bundestag, #Regional Parliament & #EU delegates was leaked.I worked through the leaked data all night. It's shocking!Not affected so far: #AfD.https://t.c…

2 votes and 0 comments so far on Reddit

Proofpoint researchers describe a new phishing template that uses a previously undocumented font trick to decode and display pages.

Hello world!

Hashes.org is a community recovering password from submitted hashes.

This is one of my favorite Machine. And it’s my first CTF & HackTheBox write-up. If you read this please give me feedback, How was the…

Modlishka. Reverse Proxy. Phishing NG. Contribute to drk1wi/Modlishka development by creating an account on GitHub.

Threat actors combine new stealer Vidar and GandCrab ransomware in one-two punch.

n January, the EU is launching another big hunt for bugs in open-source software projects with the total bounty amount of about €850,000…

7 votes and 1 comment so far on Reddit

A hacker sends malicious messages via text, email, and landline to tens of thousands of people across Australia after an emergency warning alert service, used by councils, is hacked.

Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace - emtunc/SlackPirate

Building an effective DevSecOps pipeline to catch security issues both during development and continuously in production.

There's on-call in nearly every aspect of the tech industry, in this episode we will focus on Security.

Tanya Janca is a senior cloud advocate for Microsoft, specializing in application and cloud security; evangelizing software security and advocating…

1 vote and 0 comments so far on Reddit

Working in a remote team comes with its own challenges. To make sure your company data is protected and secure you need to know about remote work security.

Maintaining account persistence via XSS and Oauth. Contribute to dxa4481/XSSOauthPersistence development by creating an account on GitHub.