The Next Chapter of My Journey

3 votes and 0 comments so far on Reddit

During our continuous hunt for new threats, we discovered a new ransomware family we call Anatova (based on the name of the ransom note). Anatova was

A few months ago I was particularly focused on researching vulnerabilities that occurred in Electronic Medical Record web applications…

IoT company Tuya claims to have made over 11.000 products worldwide smart home ready, possibly gathering data from millions of homes in the process. If you don't want your information in the cloud, we show how to free your smart home devices simply by running…

At the end of 2016, the ZDI program completed its busiest year ever. This was beat by 2017 with a more than 40% increase in published advisories. When 2018 rolled around, we wondered if that growth would continue or if a plateau was coming. I don’t think…

1 vote and 1 comment so far on Reddit

Idiomatic nmap bindings for go developers. Contribute to Ullaakut/nmap development by creating an account on GitHub.

Some issues with GitHub Forks. GitHub Gist: instantly share code, notes, and snippets.

WordPress Vulnerability Scanner - Scan for vulnerabilities, version, themes, plugins and much more!

Playing CTFs for fun and profit(but mostly fun) CTFs(or capture the flags) are competitions held to help hone and build upon skills in information security. CTFs come in all difficulty levels and some that are more difficult even have simpler versions of…

7 votes and 0 comments so far on Reddit

12 votes and 4 comments so far on Reddit

Recent months have seen an uptick in reports of JavaScript malware that hides in image files. This is often referred to as “image based…

Having spent a career working with Group Policies, I thought now might be a good time to give an overview of it and I felt like doing a little writeup about Group Policies. I especially want to highlight why having admin access to clients can be really bad.…

Doyensec's Blog :: Doyensec is an independent security research and development company focused on vulnerability discovery and remediation.

A site for cybersecurity directives and implementation guidance, from the Cybersecurity and Infrastructure Security Agency.

In most organisations using Active Directory and Exchange, Exchange servers have such high privileges that being an Administrator on an Exchange server is enough to escalate to Domain Admin. Recently I came across a blog from the ZDI, in which they detail…