A flaw in X.Org is exploitable with a tweet sized attack. https://lists.x.org/archives/xorg-announce...

The "Man that was a hell of a flu bug" edition. Stay healthy, everyone.   SSH bypass by ... wai...

Authentication bypass vulnerability in Western Digital My Cloud allows escalation to admin privilege...

The "Wow, it's been a busy month" edition.   Apple took "Adware Doctor" out of the store becaus...

MWR Labs describes use of HTTP Referer headers to execute DNS rebinding attacks on AWS-hosted a...

Mazen Ahmed write an exploit for the new Struts CVE. https://github.com/mazen160/struts-pwn_CVE-2018...

Big, big news out of Portswigger this week.  I'm a huge fan of OWASP ZAP, and use it daily, but...

Trend Micro found a really interesting use-after-free vulnerability in the VBScript engine in IE.&nb...

Interesting idea - introducing bugs to make software more difficult to attackers to navigate. ...

Reddit Breach Highlights Limits of SMS-Based Authentication https://krebsonsecurity.com/2018/08/redd...

Venmo, a social payment system, defaults to public disclosure of payments made on the system. https:...

It has come to my attention that one of Paul Asadoorian's Security Weekly broadcasts is titled Appli...