Same Origin Policy | Daniel Miessler
One of the more important topics in web application security is the same origin policy. It is a browser-based defense mechanism that makes it so…
Month: April 2025
Q&A with Crowdsource hacker Gehaxelt
Detectify Crowdsource hacker Sebastian Neef, otherwise known as Gehaxelt, has an inspirational background in ethical hacking. Driven by curiosity, a sense of friendly competition, and…
Windows CLFS zero-day exploited in ransomware attacks
Dive Brief: Attackers are exploiting a zero-day vulnerability in the Windows Common Log File System to deploy ransomware against various targets, including information technology and…
Critical FortiSwitch flaw lets hackers change admin passwords remotely
Fortinet has released security patches for a critical vulnerability in its FortiSwitch devices that can be exploited to change administrator passwords remotely. The company says…
VMware Patches Multiple 47 Vulnerabilities VMware Tanzu Greenplum Backup & Components
VMware has released critical security updates to address 47 vulnerabilities across multiple VMware Tanzu Greenplum products, including 29 issues in VMware Tanzu Greenplum Backup and…
Windows Kerberos Vulnerability Enables Security Feature Bypass
Microsoft has disclosed a new security vulnerability in Windows operating systems, tracked as CVE-2025-29809. This flaw, classified with Important severity, impacts the Kerberos authentication protocol, potentially enabling attackers…
Hackers Claim Magento Breach via Third-Party, Leak CRM Data of 700K Users
A hacker using the alias “Satanic” claims Magento breach via third-party, leaks CRM data of more than 700,000 users, including emails, phone numbers, and company…
Clop targets Kellogg and Medusa Ransomware hits NASCAR
Clop Ransomware Targets WK Kellogg Co. in Cyber Attack WK Kellogg Co., now operating as a separate entity from the Kellogg Company, has fallen victim…
WhatsApp for Windows vulnerable to attacks. Update now!
In a security advisory, Meta has disclosed a vulnerability that allowed an attacker to run arbitrary code on a user’s system that existed in all…
EU sets out plans to ‘at least’ triple its AI datacentre capacity over the next seven years
The European Union (EU) wants to more than triple the size of its datacentre capacity in the next five-to-seven years to reduce its dependence on…
US financial regulator says executives’ emails were hacked
The US Treasury Department’s Office of the Comptroller of the Currency said that emails of executives and other employees of the agency were hacked, blaming…
Contemplating My Support for Obama
My support for Obama has been wavering somewhat in recent weeks. He seems to have sacrificed his positions on the FISA bill, public financing, and…