23965 shaares
182 results
tagged
vulnerabilities
A zero-knowledge encryption flaw, enabling trivial brute forces of student data when Canvas/Moodle is used. This is my timeline on a fla...
It’s eerie to watch
Really solid examination of the ethics of offensive security (vuln-hunting, bughunting)
The developers of Tails and a video player targeted by Facebook and the FBI in an operation to catch a child predator are still in the dark about how the feds hacked the software.
Ecommerce site’s “blind trust” makes the service a perfect place to dump data.
Jenkins and MySQL vulnerabilities have had the most weaponized vulnerabilities in the past five years.
Thunderspy affects all Thunderbolt-equipped PCs made between 2011 and 2019.
CVSS, or Common Vulnerability Scoring System, gives developers, testers, and security professionals with a standardized process to assess vulnerabilities.
Explains the file-extension and auto-execution problems at the root of this.
Two decades after the world's first major computer virus, an author finds the perpetrator in Manila.
What if a messaging app has to show you an unwanted message so you can decide whether you want it shown to you?
Build a USB stick that hacks a machine.
The SQL Injection Cheat Sheet is the definitive resource for all the technical details about the different variants of the well-known SQLi vulnerability.
Zoom!
Intel desktop, server, and mobile CPUs are impacted. Intel has released firmware patches today.
Attack targeting Microsoft RDP 'BlueKeep' vulnerability spotted in the wild - SiliconANGLE
War shipping is a tactic already in use by Red teams, and is a growing opportunity for cybercriminals to compromise business networks.
Nearly two decades ago, a company called Interpeak created a network protocol that became an industry standard. It also had severe bugs that are only now coming to light.
After several high profile attacks and embarrassing slip-ups, Apple’s perception as the secure consumer device is starting to crack.
A British researcher has uncovered an ironic, gaping security hole in the EU’s General Data Protection Regulation (GDPR) – right of access requests.