KeePass vulnerability allows attackers to access the master password
There is a Proof-of-Concept available for an unpatched vulnerability in KeePass that allows attackers to dump the master password. KeePass is a free open source…
Author: Cybernoz
[Alert] Stored XSS in WordPress Plugin Jetpack
Sucuri recently discovered a stored XSS in all versions from 2.0 (released in November 2012) of the popular WordPress plugin Jetpack. The plugin has over 1 million active…
Child safety app riddled with vulnerabilities: Update now!
Child safety app “Parental Control – Kids Place” has been found to have five vulnerabilities. You need to patch immediately to keep yourself secure. An…
Zip domains, a bad idea nobody asked for
If you heard a strange and unfamiliar creaking noise on May 3, it may been the simultaneous rolling of a million eyeballs. The synchronised ocular…
Say Yes To Cyber Help
In 2016, the DoD said Yes to cyber help by launching the Hack the Pentagon program. It took 13 minutes for them to receive their…
Don’t trash your old Apple iPad, iWatch, Mac, iPhone, iPod this new sofwtare update is for you
Apple has patched three newly discovered zero-day vulnerabilities that were being used in efforts to get into iOS devices including iPhones, iPads, and Macs. The…
Exploring Advanced Persistent Threats and their evasive techniques
Unpacking one of the most dangerous threats in cybersecurity. Cyber criminals come in all shapes and sizes. On one end of the spectrum, there’s the…
Detectify at PHP Meetup – Detectify Blog
On May 11th, we co-organised a PHP security meetup together with PHP Stockholm at SUP46, where our knowledge advisor Frans Rosén talked about vulnerabilities and…
h1-5411 Recap – Argentina! Oath Bug Bounty
For the first time, HackerOne kicked off fall by migrating south. Way south. All the way to Buenos Aires, Argentina! Oath, a media and tech…
Cyberattacks on City and Municipal Governments
Cyberattacks on city and municipal governments are on the rise, more than double that of a year ago. The increase in breaches is likely due…
[Release] New scan profile overview allows you to see progress over time
Our brand new scan profile overview is finally here! For a long time, we have preached continuous security, encouraging our users to schedule recurring tests…
Cybercrime gang pre-infects millions of Android devices with malware
A large cybercrime enterprise tracked as the “Lemon Group” has reportedly pre-installed malware known as ‘Guerilla’ on almost 9 million Android-based smartphones, watches, TVs, and…