EXP-301 Logo by Offensive Security
03
Apr
2023

ROP and Roll: EXP-301 Offensive Security Exploit Developer (OSED) Review and Exam

The Windows User Mode Exploit Development (EXP-301) course and the accompanying Offensive Security Exploit Developer (OSED) certification is the last…

03
Apr
2023

Managing the risks of unstructured data growth

Locating and identifying sensitive data, including defense-in-depth strategies where a series of mechanisms are layered to protect valuable information, should…

http://i.imgur.com/YGhvYJf.png
03
Apr
2023

Exploiting Markdown Syntax and Telescope Persistent XSS through Markdown (CVE-2014-5144)

Exploiting Markdown Syntax Markdown is wonderful. In fact, this blog post itself is written in Markdown. I don’t need to…

Three big Cybersecurity fears of TikTok answered
03
Apr
2023

Three big Cybersecurity fears of TikTok answered

After hearing a lot from the US government over national security fears, TikTok seems to have come up with answers…

03
Apr
2023

Rookout’s Snapshots: The fourth pillar of observability for more secure applications

Liran Haimovitch, CTO and co-founder of Rookout, with his extensive background in cybersecurity within the Israeli government, has a unique…

Bypassing Apple's iOS 10 Restrictions Settings - Twice
03
Apr
2023

Bypassing Apple’s iOS 10 Restrictions Settings – Twice

By default, Apple has a feature that allows all of their iOS devices to be assigned restrictions, so that employees and mostly…

Hackers Exploiting WordPress Plugin
03
Apr
2023

Hackers Exploiting WordPress Plugin with Over 11M Installs

One of the most popular WordPress plugins, Elementor Pro, used by over eleven million websites, is vulnerable to a high-severity…

FabriXss Vulnerability in Microsoft Azure SFX Leads to RCE
03
Apr
2023

FabriXss Vulnerability in Microsoft Azure SFX Leads to RCE

New information has surfaced regarding a security flaw patched by Microsoft in Azure Service Fabric Explorer (SFX). The vulnerability had…

03
Apr
2023

Passbolt: Open-source password manager for security-conscious organizations

In this Help Net Security interview, Kevin Muller, CEO at Passbolt, delves into the critical concerns linked to password usage,…

Analysis of CVE-2019-14994 – Jira Service Desk Path Traversal leads to Massive Information Disclosure
03
Apr
2023

Analysis of CVE-2019-14994 – Jira Service Desk Path Traversal leads to Massive Information Disclosure

Jira Service Desk is a help desk application that is built on top of core Jira. It allows customers to…

03
Apr
2023

Millions still exposed despite available fixes

Although KEV catalog vulnerabilities are frequent targets of APT Groups, a large and exploitable attack surface remains due to software…

Configuring Burp Suite With Android Nougat
03
Apr
2023

Configuring Burp Suite With Android Nougat

This last weekend I started testing a new Android app for fun, and ran into some trouble getting Burp Suite…