Rhino Security Labs discovered two username enumeration vulnerabilities in the AWS Web Console.

A security issue in Sitevision version 10.3.1 and older allows remote attacker, in certain scenarios, to gain access signing keys used for Authn SAML requests.

Detailing the discovery and impact of the whoAMI cloud image name confusion attack, which could allow attackers to execute code within AWS accounts due to a vulnerable pattern in AMI retrieval.

UUP dump lets you download Unified Update Platform files, like Windows Insider updates, directly from Windows Update.

Overview Arechclient2, also known as sectopRAT, is a Remote Access Trojan (RAT) written in .NET. This malware is highly obfuscated using the calli obfuscator, making its analysis challenging. Despi…

Where you choose to “fly your dragon” truly matters. Learn the RE impacts of your runtime platform.

This is the third and penultimate post in a series about theoretical weaknesses in Fiat-Shamir as applied to proof systems. The first post is here, the second post is here, and you should probably …

Java Dynamic Reverse Engineering and Debugging Tool - roger1337/JDBG

Because DDoS attacks are kawaii and even more so when Miku does them.

How We Extracted Financial Data from a Multi-Billion-Dollar Company

Generate and Manage KeyCredentialLinks. Contribute to RedTeamPentesting/keycred development by creating an account on GitHub.

Eight Sleep smart bed found to contain an exposed AWS key and a likely backdoor that allowed engineers to remotely access users' beds

Learn how attackers can abuse VBS enclaves, a Windows security feature, for malicious purposes.