FireEye has an excellent breakdown of a Remote Access Trojan in C# - which is quite a feat given the...

Lots of AWS assessments recently, here is a good new tool for IAM checking. https://github.com/sales...

Really awesome article on automating application scanning with OWASP ZAP: https://www.zaproxy.org/bl...

In the world of emergency preparedness, which has been a hobby of mine since I was a Scout, there is...

Really great breakdown of exploitation of cache poisoning. https://samcurry.net/abusing-http-path-no...

I Forgot To Post On Easter Because I Was Cooking Edition   There is a really need VMWare bug th...

I'm hoping everyone is safe and healthy. This whole thing is weird. But security news marches on. &n...

Unusual challenges ahead.  Remember that with remote working, application security is on the fr...

Quarantine edition.   Microsoft patches the newest SMB flaw.  Stop using SMB. https://nake...

SMBv3 is borked.  Block port 445. https://portal.msrc.microsoft.com/en-US/security-guidance/adv...

NordVPN has yet another interesting application security vulnerability. https://www.theregister.co.u...

From @baskarmib on Twitter, we have an example of malware that will steal your Google authenticator...