Facebook is under heavy fire for privacy "violations", although they never did anything they didn't...

It's 1994 again! Encryption is on the table for law enforcement. Be ready for entry in the back door...

Awesome paper presented in France covering XXE - really good research.  Worth a read. https://w...

A wonderful human being put together a list of resources about hacking mainframe systems, worth a lo...

Good article on using fuzzers as productivity tools https://kripken.github.io/blog/binaryen/2019/06/...

Fascinating look into Internet routing that caused an outage last week.  We are really building...

Google has decided that the API that underpins the Chrome extension kit is too powerful - and they a...

Happy Father's Day!   Great writeup by Rapid7 about security-focused HTTP headers. https://blog...

Accidentally Took Memorial Day Weekend Off Edition   New tool: FinalRecon- OSINT Tool For...

Container security is a big deal, with OWASP A9 showing up more and more.  Here is a tool that...

If you have been in my classes, you know that I often point to weev as my example for why not to hac...

Another Weblogic deserialization bug. https://securityaffairs.co/wordpress/84450/breaking-news/oracl...