A pair of critical security vulnerabilities has been disclosed in the Ruby SAML library, a foundational tool used by developers to implement client-side SAML authorization. Both flaws carry a crit…

Ruby has almost settled into a festive tradition of its own: each Christmas, the developers unveil a new

hey there,

Preventing SQL Injection Through Understanding, Not Fear

Finding a vulnerability in a core library is always a “hold your breath” moment. You realize that the impact isn’t just limited to one…

Object Injection via Oj.load Allows Command Execution in RubitMQ Job Workers

Rate limiting is a fundamental aspect of API security and stability. Without it, endpoints are vulnerable to brute force attacks…

Zscaler unmasked APT37's "Ruby Jumper" campaign, which uses weaponized USBs and cloud services to bypass network isolation and steal data from air-gapped systems.

The DPRK-affiliated syndicate APT37 has augmented its arsenal dedicated to breaching air-gapped networks. The Zscaler ThreatLabz vanguard has

The Rocket machine presents a layered, multi-service attack surface that rewards methodical enumeration and precise exploit chaining. The…