Running Node.js? Upgrade now! Series of bugs may lead to domain hijacking #RCE #XSS https://portswigger.net/daily-swig/node-js-developers-fix-high-risk-vulnerability-that-could-allow-remote-domain-hijacking

Hello everyone, I’m Akash Solanki, a Cyber Security Researcher from India. This blog will explain how I found a Blind Remote Code Execution(...

Microsoft 365 Defender researchers recently uncovered and disrupted a large-scale business email compromise (BEC) infrastructure hosted in multiple web services. Attackers used this cloud-based infrastructure to compromise mailboxes via phishing and add forwarding rules, enabling these attackers to get access to emails about financial transactions.

In-house vs. outsource penetration testing: Which is best for your business? Explore the benefits of outsourcing here.

While analyzing the phone of a Saudi activist infected with NSO Group’s Pegasus spyware, we discovered a zero-day zero-click exploit against iMessage. The exploit, which we call FORCEDENTRY, targets Apple’s image rendering library, and was effective against Apple iOS, MacOS and WatchOS devices.

Checklist of the most important security countermeasures when designing, testing, and releasing your API - shieldfy/API-Security-Checklist

Penetration testing is crucial for your business. Discover the benefits and how it strengthens your security framework. Get the answers here!

Learn about the multifaceted benefits of penetration testing and why it is essential to conduct penetration testing

Citrix ShareFile Storage Zones Controller uses a fork of the third party library NeatUpload. Versions before 5.11.20 are affected by a rela...

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely. - 0vercl0k/CVE-2021-31166

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly. - ShiftLeftSecurity/sast-scan

Prototype Pollution and useful Script Gadgets. Contribute to BlackFan/client-side-prototype-pollution development by creating an account on GitHub.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc. - toniblyx/my-arsenal-of-aws-security-tools