SUBBY
An uber-fast and simple subdomain enumeration tool with support for detecting wildcard DNS records.
2023.10.20
Search the archive
Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Results
10,027 matchesPAYLOADSALLTHETHINGS
2023.10.20
CLOUDFLAIR
CloudFlair is a tool that utilizes Censys’ scan data to find the origin servers of websites that are protected by CloudFlare or CloudFront.
2023.10.20
US GOVERNMENT RELEASES ANTI-PHISHING GUIDANCE
2023.10.20
2023.10.20
HISTORY OF CENTRALIZED LOGGING
2023.10.20
TO 37K
2023.10.20
UPDATED MATA ATTACKS EASTERN EUROPE REPORT
2023.10.20
AMAZON BEGINS LIMITED PASSKEY SUPPORT
2023.10.20
Sponsored
RAMPANT CLOUD ACTIVITY?
2023.10.18
CISCO WARNS OF NEW IOS XE ZERO-DAY ACTIVELY EXPLOITED IN ATTACKS
2023.10.18
PSA: CRITICAL UNAUTHENTICATED ARBITRARY FILE UPLOAD VULNERABILITY IN ROYAL ELEMENTOR ADDONS AND TEMPLATES BEING ACTIVELY EXPLOITED
2023.10.18
ETHERHIDING: HIDING MALICIOUS CODE IN BLOCKCHAINS
2023.10.18
DISCLOSING THE BLOODALCHEMY BACKDOOR
2023.10.18
SO YOU WANT TO BE A SOC ANALYST?
2023.10.18
BOOTSTRAPPING AN AIR-GAPPED CLUSTER WITH KUBEADM
2023.10.18
PWN
PWN is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.
2023.10.18
PENTESTGPT
PentestGPT is a GPT-empowered penetrating tool. The tool is designed to automate the penetrating process by interactively guiding pentesters using ChatGPT. Newer releases of the tool also support local LLMs.
2023.10.18
AUTHENTICATION
2023.10.18
EQUIFAX FINED $13.5 MILLION OVER 2017 DATA BREACH
2023.10.18
SLACK’S GOOGLE DRIVE APP CAN SHARE YOUR PRIVATE FILES
2023.10.18
SOFTWARE, SHIFT ACCOUNTABILITY BURDEN TO MANUFACTURERS
2023.10.18
WHATSAPP ANNOUNCES PASSKEY SUPPORT FOR ANDROID
2023.10.18
APTS ARE USING DISCORD TO HOST MALWARE
2023.10.18
Sponsored
2023.10.16
55 VULNERABILITIES IN SQUID CACHING PROXY AND 35 ZERO-DAYS
2023.10.16
ACTIVELY EXPLOITED
2023.10.16
PLUGIN
2023.10.16
PYTHON FOR DEVSECOPS AND ANY SECURITY ENGINEER
2023.10.16
FOLLOWING ATTACKERS’ (CLOUD)TRAIL IN AWS
2023.10.16
ONLY ONE LABEL TO IMPROVE YOUR KUBERNETES SECURITY POSTURE
2023.10.16
NEBULA
Nebula is an AI-powered assistant specifically designed for the field of ethical hacking. It provides a unique capability for users to input commands using natural language processing, facilitating a seamless transition from intent to execution.
2023.10.16
CONVEYOR RAISES $12.5M TO AUTOMATE SECURITY REVIEWS USING LLMS
2023.10.16
ELITEWOLF
NSA has released a repository for Operational Technology(OT) Intrusion Detection Signatures and Analytics to the NSA Cyber GitHub. The capability, known as ELITEWOLF, can enable defenders of critical infrastructure, defense industrial bases, and national security systems to identify and detect potentially malicious cyber activity in their OT environments.
2023.10.16
MICROSOFT AI BOUNTY PROGRAM
2023.10.16
RANSOMWARE
2023.10.16
VULNERABILITY MANAGEMENT: YOU SHOULD KNOW ABOUT EPSS
2023.10.16
THE CONSISTENTLY INCONSISTENT RESPONSE TO ACCESS KEY LEAKS
2023.10.16
GOOGLE ANNOUNCES UPDATES TO BROWSER HISTORY AND PASSWORD MANAGER
2023.10.16
PCI DSS V4.0 ON AWS COMPLIANCE GUIDE NOW AVAILABLE
2023.10.16
HIGH SEVERITY CURL CVE
The nearly ubiquitous curl project has revealed details about a security issue that the maintainers warned of last week. The vulnerability is a heap-based buffer overflow in the SOCKS5 handshake process that occurs when a long hostname is provided and the handshake is too slow. An updated version of curl, as well as patches for older versions, has been released.
2023.10.13
DATA
2023.10.13
A NEW MAGECART CAMPAIGN ABUSES 404 ERROR PAGES
2023.10.13
THE INFOSEC GUIDE TO THE PRINCIPLES OF ZERO TRUST
2023.10.13
SECURING YOUR REACT NATIVE FRONTEND: A DEVELOPER’S GUIDE
2023.10.13
SECURITY HUB GIVES ME IMPOSTER SYNDROME
2023.10.13
NETEXEC
NetExec (a.k.a nxc) is a network service exploitation tool that helps automate assessing the security of large networks.
2023.10.13
TRIVY-OPERATOR
2023.10.13
NORD STREAM
Nord Stream is a tool for deploying malicious pipelines in a CI/CD environment to extract secrets. By default, Nord Stream will also attempt to remove any logs that it made with its deployment. Currently, GitHub, GitLab, and Azure DevOps are supported.
2023.10.13
TAKE A NOTE OF SPYNOTE!
2023.10.13