31
Mar
2023

New infosec products of the week: March 31, 2023

Here’s a look at the most interesting products from the past week, featuring releases from BreachLock, HackNotice, LOKKER, Nile, and…

Smart home assistants at risk from NUIT ultrasound attack
31
Mar
2023

Smart home assistants at risk from NUIT ultrasound attack

We take a look at research for an IoT attack called NUIT, capable of hijacking voice assistants via ultrasonic attack….

PHP Code Review
31
Mar
2023

Down the Rabbit Hole: Unusual Applications of OpenAI in Cybersecurity Tooling

Note: This is the blogpost version of a talk I gave to the National University of Singapore Greyhats club. If…

31
Mar
2023

Cloud diversification brings complex data management challenges

As IT infrastructure becomes more diverse, organizations face the challenge of integrating data management and control, according to Nutanix. The…

3CX desktop app used in a supply chain attack
31
Mar
2023

3CX desktop app used in a supply chain attack

Researchers have found that the 3CX desktop app may be compromised and used in supply chain attacks. Researchers have found…

Abusing URL Shortners to discover sensitive resources or assets
31
Mar
2023

Abusing URL Shortners to discover sensitive resources or assets

September 22, 2015 · websec bruteforce As of late, a fair few companies and startups have been using dedicated URL…

The Human Aspect in Zero Trust Security
31
Mar
2023

The Human Aspect in Zero Trust Security

Zero trust security has become a buzzword in the cybersecurity world, emphasizing the need for a more robust and reliable…

31
Mar
2023

Intruder unveils API scanning to help organizations reduce exposure

Intruder updates its cloud-based vulnerability management service, allowing organisations of all sizes to secure their APIs by automatically detecting vulnerabilities,…

Bing and other Microsoft applications fall victim to account takeover flaw
31
Mar
2023

Bing and other Microsoft applications fall victim to account takeover flaw

We take a look at the “BingBang” flaw which allowed for search engine manipulation in Bing. Researchers from Wiz have…

Discovering a stored XSS that affects over 900k websites (CVE-2016-9751)
31
Mar
2023

Discovering a stored XSS that affects over 900k websites (CVE-2016-9751)

In my free time when I’m not hunting for bugs in paid programs, I like to contribute a bit to…

Windows 11
31
Mar
2023

Microsoft testing adaptive brightness on more Windows 11 devices

Microsoft says a new Windows 11 preview build rolling out today will allow Insiders to test the company’s adaptive brightness…

How a simple bing.com vulnerability allowed hacking millions of enterpise Microsoft 365 accounts?
31
Mar
2023

How a simple bing.com vulnerability allowed hacking millions of enterpise Microsoft 365 accounts?

A vulnerability that might compromise the security of millions of Microsoft 365 accounts was found earlier this year. Researchers at…