Tree - pagure - Pagure.io

pfSense Security: Sensing Code Vulnerabilities with SonarCloud

Our Clean Code solution SonarCloud discovered multiple vulnerabilities leading to remote code execution on pfSense CE 2.7.0. Let's see how SonarCloud found them and how it can keep your code clean.

Code Vulnerabilities Put Proton Mails at Risk

The Sonar Research team discovered critical code vulnerabilities in Proton Mail, Skiff and Tutanota. This post covers the technical details of the XSS vulnerability in Proton Mail.

Testing GraphQL APIs | Web Security Academy

In this section we'll look at how to test GraphQL APIs. GraphQL vulnerabilities generally arise due to implementation and design flaws. For example, the ...

Swing VPN app is a DDOS botnet

tldr: Swing VPN is using its user base to DDOS sites using its users as a an attack botnet. Introduction It all started with a friend of mine complaining that his phone was doing a request to a specific app every few seconds. Initial assumption was that the phone was infected with a virus but a 2 minute investigation showed that all requests went from ‘Swing VPN’ app which were legitimately installed on the phone as VPN service.

AI machines aren’t ‘hallucinating’. But their makers are

Tech CEOs want us to believe that generative AI will benefit humanity. They are kidding themselves

Cyberangriffe - IT-Dienstleister des Bundes im Visier

Hacker haben IT-Unternehmen angegriffen, die für Bundesbehörden arbeiten. Nach BR-Informationen war es möglich, große Mengen E-Mail-Kommunikation mit personenbezogenen Daten abzugreifen.

Datenschutz: Wenn Hacker mit Gesundheits-Apps besonders leichtes Spiel haben

Eine Gesundheits-App verliert Daten psychisch kranker Menschen. Sie ist nicht die erste "App auf Rezept", bei der das passiert. Das liegt auch am System dahinter.

So you think you can block Macros? | Outflank

blog about macro blocking/signing, attacker/red team work arounds and further mitigations. Macro signing, message bar & Excel add-ins