A vulnerability was discovered in CSS (!) that will crash your browser.  Please don't do this a...

A new open source project that generated an Android Studio project from an APK https://maxkersten.nl...

Here's a new set of training wheels for MetaSploit.  It's a little bumpy, but it is pretty dece...

Happy Veterans Day. Please make sure that this isn't the only day of the year that you take the time...

A new-to-me file upload vulnerability scanner got an update recently - worth a look. https://github....

A flaw in X.Org is exploitable with a tweet sized attack. https://lists.x.org/archives/xorg-announce...

The "Man that was a hell of a flu bug" edition. Stay healthy, everyone.   SSH bypass by ... wai...

Authentication bypass vulnerability in Western Digital My Cloud allows escalation to admin privilege...

The "Wow, it's been a busy month" edition.   Apple took "Adware Doctor" out of the store becaus...

MWR Labs describes use of HTTP Referer headers to execute DNS rebinding attacks on AWS-hosted a...

Mazen Ahmed write an exploit for the new Struts CVE. https://github.com/mazen160/struts-pwn_CVE-2018...

Big, big news out of Portswigger this week.  I'm a huge fan of OWASP ZAP, and use it daily, but...