The RSA Conference is just around the corner, and this year once again, we're glad to be sponsoring and attending this world-renowned security event. Attending security conferences can be a smart car

There have been a lot of posts about crafting red team phishing campaigns, and most are incomplete. Today, we're going to walk through one of our recent external engagements from start to initial access.

This is 🍊 speaking

1 vote and 0 comments so far on Reddit

codename referring to investigations and studies of compromising emanations

Welcome to our first release of 2019, Kali Linux 2019.1, which is available for immediate download. This release brings our kernel up to version 4.19.13, fixes numerous bugs, and includes many updated packages.

Ledger's Advanced Side-Channel Analysis Repository - Ledger-Donjon/lascar

Posted in r/netsec by u/Evil1337 • 10 points and 1 comment

The Amtrak mobile APIs are affected by vulnerabilities that can directly lead to the exposure of Personally Identifiable Information (PII) and partial payment data for at least 6 million Amtrak guest rewards members. The Amtrak customers’ exposed PII includes…

We found that in all password managers we examined, trivial secrets extraction was possible from a locked password manager, including the master password in some cases, exposing up to 60 million users that use the password managers in this study to secrets…

Introduction This is a writeup for a bug I found a few months ago in Facebook’s Capture the Flag Platform (FBCTF). It was a fixed a while ago, so I’ll describe the bug and how I found it. I discovered this bug when participating in Facebook’s 2018 CTF and…

More and more security holes are appearing in cryptocurrency and smart contract platforms, and some are fundamental to the way they were built.

Tweet it Share on Google Pin it Share it Email This is not the first

Attack detection has been a part of information security for decades. The first known intrusion detection system (IDS) implementations d...

Combine a bug in Antidote, a popular enterprise spellchecker, and unsafe defaults in Active Directory, and you get more NTLM hashes than you can deal with.

Attack detection has been a part of information security for decades. The first known intrusion detection system (IDS) implementations date back to the early...

Research by: Nadav Grossman Introduction In this article, we tell the story of how we found a logical bug using the WinAFL fuzzer and exploited it in WinRAR to gain full control over a victim’s computer. The exploit works by just extracting an archive, and…

A noscripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs. - SolomonSklash/chomp-scan