Table of contents:

I’ve been a web application pentester for a while now and over the years must have found hundreds of cross-site scripting (XSS) vulnerabilities.1 Cross-site scripting is a notoriously difficult problem […]

CVE-2024-10442 allows unauthenticated RCE on Synology DS1823xs+ via Replication Service flaw. Patch now to avoid exploit risk.

As usual, I started with an nmap Scan to get a quick overview of the open ports and running services. I used the following command to…

Jack Dorsey launches "Bitchat," a new Bluetooth-based app for decentralized, P2P messaging without internet. It uses mesh networking and encryption for communication in restrictive environments.

Jack Dorsey's new decentralized messaging app, Bitchat, faces early security concerns, including identity spoofing and unverified claims, despite its privacy focus.

Jack Dorsey launches "Sun Day," a new iOS app for tracking personal sun exposure, UV radiation, and estimating Vitamin D synthesis based on user data.

So, Jack Dorsey has a new app out, huh? Bitchat, they’re calling it. Promising privacy, whispering sweet nothings about security. But the…

A Content Security Policy (CSP) is a security mechanism implemented by web servers and enforced by browsers to prevent various types of attacks, primarily cross-site scripting (XSS). CSP works by restricting resources (scripts, stylesheets, images, etc.)…

MailFail is a Firefox browser extension that identifies and provides commands to exploit a large number of email-related misconfigurations for the current domain and subdomain. The extension's UI popup highlights any misconfigurations in red and links to…

Security Researchers Say It Could Get People Killed

BitChat is a decentralised mesh messaging tool. It comes from a company founded by Twitter co-founder Jack Dorsey. The app builds a mesh network across nearby devices over Bluetooth, so messages h…