DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Fake LastPass Authenticator Installs a Microsoft-Signed Driver That Kills 145 Security Tools

Fake LastPass Authenticator Installs a Microsoft-Signed Driver That Kills 145 Security Tools

Comments
5 min read
What Is Zip Slip? How Can a ZIP File Write Files Outside Its Extraction Folder?

What Is Zip Slip? How Can a ZIP File Write Files Outside Its Extraction Folder?

1
Comments
6 min read
Measuring unpatched VPN gateway footprints visible from the internet

Measuring unpatched VPN gateway footprints visible from the internet

Comments
5 min read
How Researchers Used Claude to Breach OpenAI : The libheif HEIC Supply-Chain Story

How Researchers Used Claude to Breach OpenAI : The libheif HEIC Supply-Chain Story

5
Comments
4 min read
Rolling out phishing-resistant multi-factor authentication

Rolling out phishing-resistant multi-factor authentication

Comments
5 min read
Triaging Codex Exposure: What a Count of 164 Does and Does Not Tell You

Triaging Codex Exposure: What a Count of 164 Does and Does Not Tell You

Comments
3 min read
Prioritizing zero-day patching when you cannot patch everything

Prioritizing zero-day patching when you cannot patch everything

Comments
5 min read
Measuring exposed industrial control panels on the public internet

Measuring exposed industrial control panels on the public internet

Comments
5 min read
The Cisco ISE API Attack Surface: SQL Injection, IPsec Flaws and Write Access

The Cisco ISE API Attack Surface: SQL Injection, IPsec Flaws and Write Access

Comments
2 min read
ShinyHunters Rooted Clop's Leak Site Through Grav CMS, and Now Wants to Extort the Extortionists

ShinyHunters Rooted Clop's Leak Site Through Grav CMS, and Now Wants to Extort the Extortionists

Comments
5 min read
Someone Invoiced Our Customers Using Our Own Domain

Someone Invoiced Our Customers Using Our Own Domain

Comments
2 min read
Extended Support Isn't Extended Security: Managing Vulnerabilities in ELS Linux Environments

Extended Support Isn't Extended Security: Managing Vulnerabilities in ELS Linux Environments

5
Comments
7 min read
What Is a Parser Differential? How Can the Same Input Mean Different Things to Different Systems?

What Is a Parser Differential? How Can the Same Input Mean Different Things to Different Systems?

1
Comments
6 min read
The Connections You Cannot Scan: Cellular Modems and Undocumented OT Paths in the Water Sector

The Connections You Cannot Scan: Cellular Modems and Undocumented OT Paths in the Water Sector

Comments
4 min read
What Is Subdomain Takeover? How Can an Abandoned Subdomain Become Dangerous?

What Is Subdomain Takeover? How Can an Abandoned Subdomain Become Dangerous?

1
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.