SeamlessPass is a tool designed to obtain Microsoft 365 access tokens using on-premises Active Directory Kerberos tickets

IAMActionHunter is an IAM policy statement parser and query tool aims to simplify the process of collecting

MDE Kit's objective is to help automate and empower your investigation, detection, prevention, and response capabilities leveraging the MDE API

Critical security vulnerability (CVE-2023-37936) affecting FortiSwitch product line. Learn about the impact, mitigation, and recommended patches.

Stay informed about the escalating threat of cryptocurrency thefts by North Korean cyber actors. Learn about their malicious activities and the impact on the global financial system.

Stay protected from CVE-2024-12084 and other vulnerabilities in Rsync. Learn about the risks, exploits, and how to secure your systems.

U.S. authorities successfully neutralize Chinese state-sponsored cyber espionage threat by deleting PlugX malware.

Ivanti Endpoint Manager security advisory: Learn about the critical vulnerabilities, including CVE-2024-10811, posing a serious risk to enterprise systems.

Protect your sensitive information from disclosure and mitigate potential risks with the latest Zoom updates. Read about CVE-2025-0147 and other vulnerabilities.

Learn about the concerning supply chain attack targeting popular Node.js libraries, chokidar and chalk, and how developers can protect their projects.

Discover the concerning campaign targeting Fortinet FortiGate firewalls. Learn how threat actors exploited vulnerabilities and established unauthorized access.

Protect your WordPress website from the WP3.XYZ malware attack. Learn how to detect and prevent unauthorized admin accounts, malicious plugins, and data exfiltration.

Stay up to date with the latest release of Chrome 132.0.6834.83/84. Discover the security enhancements and critical updates for Windows, Mac, and Linux.

Stay secure with Microsoft's latest security update for 2025. Find out how the Patch Tuesday fixes 159 vulnerabilities, including eight zero-days.

Learn about critical vulnerabilities in SimpleHelp, a remote support software tool. Understand the risks posed to users and the potential for attackers to compromise servers and client machines.

Uncover the sophisticated phishing campaign leveraging Formbook stealer. Learn how this notorious malware continues to evolve and maintain its notoriety in the MaaS market.

Intigriti continues to invest in its bug bounty platform to enhance the experience for both our customers and our researchers. Learn more about how we're investing in P&E in 2025.

While testing Razer’s web application, I identified an XSS vulnerability in their /ajax endpoint. The issue arises due to insufficient…

Sometimes, the simplest bugs can lead to the sweetest rewards. This is the story of how I earned my second bounty from the same company…

Sometimes, I avoid testing support or help portals, assuming they might be hosted on third-party platforms like Jira or Zendesk, to save…

Others get bounties, mine is informative!