vulnerabilities Tag Posts Index

The Spread Vector

Hi fellow Hiveians, Today I wanted to complain a little bit about more and more services. The Spread Vector Sadly, one of the things that we have not a lot of control

Keeping HIVE and it's Projects safe - My Sunday dedicated to more secure Frontends on HIVE.

Many of you already know what I do on the side. I spend a good amount of my free time doing security analysis and penetration testing on web applications here in

Endor Labs, a startup offering tools to detect vulnerabilities in AI-Generated Code, closes $93 million in funding

We may have heard on more than one occasion the term “Vibe Coding”, which has become popular in social networks. It suggests a new way of “programming”, in which

Insidious Inputs - Three Types of Common Software Vulnerabilities (Video Version)

Software #vulnerabilities are a big part of security. Learn about path traversal, cross-site scripting, and buffer overflows with this free and open-licensed #tutorial,

Insidious Inputs - Three Common Types of Software Vulnerabilities

Curious about how attackers exploit vulnerable software, and how those vulnerabilities work? My latest free and open licensed #tutorial dives into three common software

Understanding DeFi Protocol Vulnerabilities: Analyzing the Recent Harbor Hacks

DeFi doesn’t functions like traditional financial systems that depends on centralized intermediaries like banks. It supports decentralized ecosystem and functions

(JaiChai) "Copy and Paste at your own peril.."

*A rare, signed, higher resolution and non-watermarked version of this image is available for download at: Imitation is the sincerest form of flattery that mediocrity

Recent trend on exchange hacking...

A lot of smaller exchanges have been hacked in last few years. A new trend in hacking has been to target machines used to maintain exchanges instead of trying to

32 Known Exploited Vulnerabilities added to the Catalog

CISA has added 32 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are

Hacker News Critical Security Flaws Reported in Moxa MXview Network Management Software

Multiple critical vulnerabilities have been discovered in Moxa MXview web-based industrial network management #software, some of which could be exploited by an

IT AUDITS ARE NOT THE ULTIMATE ANSWER

So I had a question regarding audits making one secure. The question related to my article and post here Security Testing for Your SMB: What You Need to Know. I

Security Testing for Your SMB: What You Need to Know

Everyone wants to keep their IT in tip-top form. Your business technology aids in both profitability and efficiency. You do not want to be messing with downtime.

Analysis of a Phishing Kit (that targets Chase Bank)

Emsisoft has released a decryptor for the SynAck Ransomware, allowing victims to decrypt their encrypted files for free. The SynAck ransomware gang launched its

Open Source CyberSecurity News - Hacking a Capsule Hotel

Black Hat 2021, “Hacking a Capsule Hotel – Ghost in the Bedrooms,” by Supa A series of vulnerabilities in internet of things (IoT) devices often found in connected

WhatsApp Bug (Or Maybe A Feature) Leaks Users Numbers In Google Search

While WhatsApp is becoming popular for online businesses, especially amidst the global lockdown due to COVID-19, a glitch has raised privacy concerns. Reportedly,

2-19-2020_We_6.35pm_Information Security Risks Access Controls Mitigation Threats Warehouse Hierarchy Sources

2-19-2020_We_6.35pm_Information Security Risks Controls Warehouse Hierarchy Sources Streamyard participate streamyard.com/m3i3sr9rh5 View

Millions of patient data records could be easily accessible in the internet!

IMG SRC Not very surprising to many in the InfoSec business but maybe an "eye opener" to the masses that this has made mainstream headlines in one of the

in part via threatpost.com: How to Secure Critical Infrastructure When Patching Isn’t Possible... by me... what you can learn from that!

Author: Threatpost Mission-critical systems can’t just be switched off to apply security updates — so patching can take weeks if not years. By Amir Levintal, Infosec

via threatpost.com: Understanding the Ripple Effect: Large Enterprise Data Breaches Threaten Everyone

Author: Tara Seals Fallout from giants at the top is one of the largest drivers of cyber-impacts on everyday people and companies. Big businesses are constantly

via threatpost.com: Pwn2Own Expands Into Industrial Control Systems Hacking

Author: Lindsey O'Donnell White-hat hackers will now have the chance to win $20,000 for sniffing out remote code-execution flaws in industrial control systems.