DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Building and Testing Detections for UNK_DeadDrop

Building and Testing Detections for UNK_DeadDrop

Comments
6 min read
How Many of a Scanner's Findings Are Real? Web-Vuln-Scanner's Detection Pipeline and False-Positive Control, Measured

How Many of a Scanner's Findings Are Real? Web-Vuln-Scanner's Detection Pipeline and False-Positive Control, Measured

Comments
14 min read
Microsoft's November 2026 Patch Tuesday: An Exploited Outlook Zero-Day That Leaks NTLM Hashes (CVE-2026-124194)

Microsoft's November 2026 Patch Tuesday: An Exploited Outlook Zero-Day That Leaks NTLM Hashes (CVE-2026-124194)

Comments
4 min read
The Vendor Pulled Its Own Cloud Offline: What Able2Shell Really Tells Us

The Vendor Pulled Its Own Cloud Offline: What Able2Shell Really Tells Us

Comments
4 min read
Default admin:admin on ForgeRock Console Let Researchers Unlock and Start Two Automakers' Cars

Default admin:admin on ForgeRock Console Let Researchers Unlock and Start Two Automakers' Cars

Comments
5 min read
CISA Adds OpenSSH SSHole and Three Critical Flaws to the KEV Catalog as Exploitation Continues

CISA Adds OpenSSH SSHole and Three Critical Flaws to the KEV Catalog as Exploitation Continues

Comments
6 min read
Ping64|Sending the Encrypted Archive and Its Password in the Same Email

Ping64|Sending the Encrypted Archive and Its Password in the Same Email

Comments
4 min read
Day 25/365: Wireless Networking -- Reading What Your Wi-Fi Security Actually Is

Day 25/365: Wireless Networking -- Reading What Your Wi-Fi Security Actually Is

Comments
3 min read
Able2Shell: N-able Pulls N-central Cloud Offline After 33 Zero-Days Drop With Working Exploits

Able2Shell: N-able Pulls N-central Cloud Offline After 33 Zero-Days Drop With Working Exploits

Comments
5 min read
Ping64|How Bluetooth Pairing Keeps Your Devices Connected and Where Its Security Stops

Ping64|How Bluetooth Pairing Keeps Your Devices Connected and Where Its Security Stops

Comments
4 min read
The file your agent reads before you — a poisoned AGENTS.md, dissected

The file your agent reads before you — a poisoned AGENTS.md, dissected

Comments 1
4 min read
AXEC Cyber Security Weekly #4: Identity Bypass and Agentic Automation Turn Small Gaps Into Enterprise Incidents

AXEC Cyber Security Weekly #4: Identity Bypass and Agentic Automation Turn Small Gaps Into Enterprise Incidents

Comments
9 min read
Attacker Rides Qubole's Trusted AWS Account Into Customer Environments, Steals Secrets and S3 Data

Attacker Rides Qubole's Trusted AWS Account Into Customer Environments, Steals Secrets and S3 Data

Comments
5 min read
sshole (CVE-2026-123158): when '*' in /etc/shadow became a working password on musl

sshole (CVE-2026-123158): when '*' in /etc/shadow became a working password on musl

Comments
5 min read
BOSSAI: One Attacker's AI Agents Pulled Taipei 119 Dispatch Records and Exposed Patient Data

BOSSAI: One Attacker's AI Agents Pulled Taipei 119 Dispatch Records and Exposed Patient Data

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
⌂ 换网址