Smuggling with JSON | HAHWUL
JSON은 YAML과 함께 자주 사용되는 포맷 중 하나입니다. K:V 형태의 단순한 구성이지만, JSON의 특성을 이용하면 데이터를 숨기고 Application의 잘못된 동작을 유도할 수 있습니다. 오늘은 Insignificant…
Category: Mix
AI Safety vs. AI Security [2 Types of AI Red Teaming]
What Is the Difference Between Red Teaming For AI Safety and AI Security? AI red teaming is a form of AI testing to find flaws…
Decoding the Characteristics of Modern Pentesting: Effectiveness
Quality/Effectiveness: Effectiveness measures the method’s ability to provide reliable and accurate vulnerability detections, comprehensive system coverage, compliance with standards, and a diverse testing team for…
Reversing The Trend: Support and Mediation Win as a Team
It was a daunting task, especially considering the target was hovering around 52% at the time. But as the team responsible for supporting our customer…
Meet the hacker: HG_Real – Intigriti
In cybersecurity, ethical hackers are like digital guardians, keeping our online world safe. Game hacking adds a twist to this, giving hackers a chance to…
Announcing Intigriti’s Brinqa Integration – Intigriti
We’re happy to announce Intigriti’s latest partnership with Brinqa, a leader in vulnerability management. This integration marks a significant step forward in managing and prioritizing…
NIS2 Directive, CER, and DORA compliance challenges
**Disclaimer: The content of this blog post is for general information purposes only and is not legal advice. We are very passionate about cybersecurity rules…
Significant changes to attack surface overview and many new tests
The new attack surface overview puts the changes and potential risky exposures to your attack surface front and center. But that’s not all we’ve shipped…
The AI Coin-sorter Analogy
I’ve had this analogy in my mind for a while for AI. Specifically, neural nets. Imagine a coin sorter with a flat surface the size…
Top 5 Data Breaches That Cost Millions
“If you put a key under the mat for the cops, a burglar can find it, too. Criminals are using every technology tool at their…
Aggressive scanning in bug bounty (and how to avoid it)
Presented by CryptoCat What is aggressive scanning? In bug bounty, researchers are expected to configure automated tools and scanners to remain within the defined limits…
SaaS businesses need to rethink their penetration testing approach
Every year, companies increasingly rely on software-as-a-service platforms (SaaS) to handle a variety of tasks, such as website analysis, accounting, payroll, and email automation. Reliance…