Adversary Emulation Framework. Contribute to BishopFox/sliver development by creating an account on GitHub.

For months now, a growing chorus of frustrated voices has been echoing through online forums, all pointing to a bizarre issue: outgoing WhatsApp calls go mute the moment users switch to another app or let their screens dim. And no, it’s not just an isolated…

Rsync contains six vulnerabilities

Since the end of 2024, we have been continuously monitoring large-scale DDoS attacks orchestrated by an IoT botnet exploiting vulnerable IoT devices such as wireless routers and IP cameras.

By: Joshua Platt, Jason Reaves and Jonathan McCay

Security advisories for vulnerabilities. Contribute to bf/security-advisories development by creating an account on GitHub.

This blog post looks into how 63 malicious extensions circumvent Google’s restrictions of remote code execution in extensions. One group of extensions is associated with the company Phoenix Invicta. The other groups around Netflix Party and Sweet VPN haven’t…

ChatGPT-4o contains security bypass vulnerability through time and search functions called "Time Bandit"

Introduction

Security leaders must ensure there’s more to their defenses than the simplest identity checks

Introduction A counterintuitive truth is that great products are defined by both the features they include, as well as those they don’t. We spend a lot of time pondering potential new features for …

Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.

Developers are pulling in publicly available ASP.NET keys into their environments, without realizing that cyberattackers can use them for clandestine code injection.

Microsoft Threat Intelligence Center discovered an active and successful device code phishing campaign by a threat actor we track as Storm-2372. Our ongoing investigation indicates that this campaign has been active since August 2024 with the actor creating…

PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection rules and undertake various security tasks, all accessible ...