A global law enforcement operation targeting the Phobos ransomware gang has led to the arrest of two suspected hackers in Phuket, Thailand, and the seizure of 8Base's dark web sites. The suspects are accused of conducting cyberattacks on over 1,000 victims…

Leaders in Information Security

Akamai researchers explore Fortinet FortiOS and discover multiple vulnerabilities that can lead to denial-of-service and remote code execution attacks.

For our last company retreat, the Doyensec team went on a cruise along the coasts of the Mediterranean Sea. As amazing as each stop was, us being geeks, we had to break the monotony of daily pool parties with some much-needed hacking sessions. Luca and John…

Rhino Security Labs discovered two username enumeration vulnerabilities in the AWS Web Console.

A security issue in Sitevision version 10.3.1 and older allows remote attacker, in certain scenarios, to gain access signing keys used for Authn SAML requests.

Detailing the discovery and impact of the whoAMI cloud image name confusion attack, which could allow attackers to execute code within AWS accounts due to a vulnerable pattern in AMI retrieval.

UUP dump lets you download Unified Update Platform files, like Windows Insider updates, directly from Windows Update.

Overview Arechclient2, also known as sectopRAT, is a Remote Access Trojan (RAT) written in .NET. This malware is highly obfuscated using the calli obfuscator, making its analysis challenging. Despi…

Where you choose to “fly your dragon” truly matters. Learn the RE impacts of your runtime platform.

This is the third and penultimate post in a series about theoretical weaknesses in Fiat-Shamir as applied to proof systems. The first post is here, the second post is here, and you should probably …

Java Dynamic Reverse Engineering and Debugging Tool - roger1337/JDBG

Because DDoS attacks are kawaii and even more so when Miku does them.

How We Extracted Financial Data from a Multi-Billion-Dollar Company