OWASP TOP 10: XXE - Detectify Blog
06
May
2023

OWASP TOP 10: XXE – Detectify Blog

Update: The new OWASP Top 10 of 2021 has been proposed, and the new list has moved XXE into the…

Twitter breaking apart
06
May
2023

Twitter says ‘security incident’ exposed private Circle tweets

Twitter disclosed that a ‘security incident’ caused private tweets sent to Twitter Circles to show publicly to users outside of…

PaperCut
06
May
2023

New PaperCut RCE exploit created that bypasses existing detections

A new proof-of-concept (PoC) exploit for an actively exploited PaperCut vulnerability was released that bypasses all known detection rules. The PaperCut…

Juneteenth: HackerOne’s Day for Action
06
May
2023

Juneteenth: HackerOne’s Day for Action

Starting this Friday, June 19th will become HackerOne’s annual Day for Action. For Black Americans and communities of color around…

XSS Attacks
06
May
2023

Over 2 Million WordPress Websites Exposed to XSS Attacks

Patchstack security researchers recently warned that ‘Advanced Custom Fields’ and ‘Advanced Custom Fields Pro’ WordPress plugins are at risk of…

Drupalgeddon 2.0 (CVE-2018-7600) - Detectify Blog
06
May
2023

Drupalgeddon 2.0 (CVE-2018-7600) – Detectify Blog

On March 28th, Drupal released a security update that fixes a critical remote code execution vulnerability nicknamed Drupalgeddon 2.0. Detectify…

Russian ‘Ghost Ships’ Identified Near the Nord Stream Blasts
06
May
2023

Russian ‘Ghost Ships’ Identified Near the Nord Stream Blasts

In December 2020, security giant Mandiant revealed it had been hacked. Its disclosure was the first public sign of the SolarWinds…

Announcing the PlayStation Bug Bounty Program
06
May
2023

Announcing the PlayStation Bug Bounty Program

This guest post is authored by Geoff Norton, Senior Director Software Engineering at PlayStation, and was originally published on PlayStation’s…

Target Gambling Industry
06
May
2023

Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry

May 06, 2023Ravie LakshmananAdvanced Persistent Threat An advanced persistent threat (APT) actor known as Dragon Breath has been observed adding…

Niklas Olsson, KTH Royal Institute of Technology: “Detectify lowers the threshold to work with security”
06
May
2023

Niklas Olsson, KTH Royal Institute of Technology: “Detectify lowers the threshold to work with security”

Founded in 1827, KTH Royal Institute of Technology in Stockholm is one of Sweden’s leading universities. Niklas Olsson, IT Solution…

Dating Apps And Sites: Mitigating Chargebacks In 2023
06
May
2023

Dating Apps And Sites: Mitigating Chargebacks In 2023

by Monica Eaton, Founder of Chargebacks911 and Fi911. Chief Information Officer of Global Risk Technologies. The way many people find…

What to Look For in a Penetration Testing Company
06
May
2023

What to Look For in a Penetration Testing Company

What are Penetration Tests? Penetration testing is one of the most widely used techniques for complying with security regulations and…