Articles A closer look at CVSS scores CVSSv3.1 is essentially the way in which vulnerability severities are assessed and ranked. Not everyone agrees that it…theoryof.predictable.software "ParseThru" - Exploiting HTTP Parameter Smuggling in Golang Oxeye's security research team has found a security vulnerability in Golang-based applications. Under certain…www.oxeye.io Introducing BloodHound 4.2 — The Azure Refactor The BloodHound Enterprise team is proud to announce the release of BloodHound 4.2 — The Azure Refactor.posts.specterops.io

Articles Get Your Kicks on Route Sixty-Sink: Identifying Vulnerabilities Using Automated Static Analysis |… Today, we are releasing Route Sixty-Sink , an open-source tool that enables defenders and security researchers alike to…www.mandiant.com ProjectDiscovery's Best Kept Secrets A tour of ProjectDiscovery's less-known public tools, and how to use them by @pry0ccIntroductionFor those unaware…blog.projectdiscovery.io

Articles DNS-over-HTTP/3 in Android To help keep Android users' DNS queries private, Android supports encrypted DNS. In addition to existing support for…security.googleblog.com Encrypting Strings at Compile Time Thank you to SpecterOps for supporting this research and to Duane and Matt for proofreading and editing! Crossposted on…posts.specterops.io How attackers use exposed Prometheus server to exploit Kubernetes clusters - Sysdig You might think that your metrics are harmless from a security point of view. Well, that's not true, and in this talk…sysdig.com

Articles Bypassing eBPF-based Security Enforcement Tools During penetration tests and red team engagements, eBPF-based security observability and runtime enforcement tools can…www.form3.tech Notes on OpenSSL remote memory corruption OpenSSL version 3.0.4, released on June 21th 2022, is susceptible to remote memory corruption which can be triggered…guidovranken.com Automating binary vulnerability discovery with Ghidra and Semgrep - hn security "Some details are more important than others." - Fedor G. Pikus I've released some tools to help automate vulnerability…security.humanativaspa.it

Articles Elligator Elligator is a way to hide a cryptographic key exchange using elliptic curves as random noise, devised by Daniel J…elligator.org Building a SAST program at Razorpay’s scale The inner workings of how we build a Static Application Security Testing program at Razorpayengineering.razorpay.com Microsoft Defender for Endpoint Internals 0x02 — Audit Settings and Telemetry In the previous article of this series, I’ve put Microsoft Defender for Endpoint (MDE) next to Sysmon and highlighted…medium.com

Articles Abusing Cloudflare Workers - Christophe Tafani-Dereeper An attacker compromising a Cloudflare account can abuse Workers to establish persistence and exfiltrate sensitive data.blog.christophetd.fr Defending Ukraine: Early Lessons from the Cyber War - Microsoft On the Issues Editor's note: Today Microsoft published a new intelligence report, Defending Ukraine: Early Lessons from the Cyber…blogs.microsoft.com

Articles Detecting Linux Anti-Forensics Log Tampering When forensically examining Linux systems for malicious intrusion, responders often rely on the following three…www.inversecos.com FLOSS Version 2.0 FLOSS analyzes compiled programs, identifies functions that may decode data, and automatically deobfuscates hidden…www.mandiant.com mr.d0x Exploring WebView2 applications and how they can be used for credential and cookie theft. According to Microsoft…mrd0x.com

Articles A Deep Dive into Temporal's Access Control Strategy in AWS | Temporal Documentation · 11 min read This blog post gives some insight into Temporal's strategy for securing our cloud environment. It also…docs.temporal.io The Philosphy of Prevention - Chris Farris Following up on the Tar-Pit of CSPM, I feel the need to offer something more constructive for CloudSecurity…www.chrisfarris.com Virtual desktop infrastructure security best practices | Azure Blog and Updates | Microsoft Azure It's no longer a matter of organizations deciding whether to embrace remote and hybrid work but finding the best way to…azure.microsoft.com

Articles Ruby Vulnerabilities: Exploiting Open, Send, and Deserialization... On a recent assessment, I tested a Ruby on Rails application that was vulnerable to three of the most common types of…bishopfox.com Arbitrary File Upload Tricks In Java 0x01 Forewords Recently I see some discussions about arbitrary file upload in Java environment on Internet. The main…pyn3rd.github.io Abusing CVE-2022-26923 through SOCKS5 on a Mythic C2 agent CVE-2022-29623 is a vulnerability where an attacker/user that has the ability to create a machine account and tamper…macrosec.tech