BLAHALLA
RSS
  1. Last Week in Security (LWiS) - 2023-10-03
    blog.badsectorlabs.com ·
  2. Last Week in Security (LWiS) - 2023-09-19
    blog.badsectorlabs.com ·
  3. Version 2.9 of the Mozilla Root Store Policy
    blog.mozilla.org ·
  4. Last Week in Security (LWiS) - 2023-09-11
    blog.badsectorlabs.com ·
  5. Last Week in Security (LWiS) - 2023-08-29
    blog.badsectorlabs.com ·
  6. Last Week in Security (LWiS) - 2023-08-07
    blog.badsectorlabs.com ·
  7. Last Week in Security (LWiS) - 2023-07-31
    blog.badsectorlabs.com ·
  8. Last Week in Security (LWiS) - 2023-07-17
    blog.badsectorlabs.com ·
  9. Last Week in Security (LWiS) - 2023-07-10
    blog.badsectorlabs.com ·
  10. Last Week in Security (LWiS) - 2023-06-26
    blog.badsectorlabs.com ·
  11. Last Week in Security (LWiS) - 2023-06-15
    blog.badsectorlabs.com ·
  12. Last Week in Security (LWiS) - 2023-05-22
    blog.badsectorlabs.com ·
  13. Updated GPG key for signing Firefox Releases
    blog.mozilla.org ·
  14. Last Week in Security (LWiS) - 2023-05-09
    blog.badsectorlabs.com ·
  15. We’re going teetotal: It’s goodbye to The Daily Swig
    portswigger.net ·
  16. Bug Bounty Radar // The latest bug bounty programs for March 2023
    portswigger.net ·
  17. Indian transport ministry flaws potentially allowed creation of counterfeit driving licenses
    portswigger.net ·
  18. Password managers: A rough guide to enterprise secret platforms
    portswigger.net ·
  19. Chromium bug allowed SameSite cookie bypass on Android devices
    portswigger.net ·
  20. Deserialized web security roundup: Twitter 2FA backlash, GoDaddy suffers years-long attack campaign, and XSS Hunter adds e2e encryption
    portswigger.net ·
  21. NIST plots biggest ever reform of Cybersecurity Framework
    portswigger.net ·
  22. Cisco ClamAV anti-malware scanner vulnerable to serious security flaw
    portswigger.net ·
  23. CVSS system criticized for failure to address real-world impact
    portswigger.net ·
  24. ‘Most web API flaws are missed by standard security tests’ – Corey J Ball on securing a neglected attack vector
    portswigger.net ·
  25. HTTP request smuggling bug patched in HAProxy
    portswigger.net ·
  26. Belgium launches nationwide safe harbor for ethical hackers
    portswigger.net ·
  27. Remote code execution flaw patched in Apache Kafka
    portswigger.net ·
  28. Password manager security: Which is the right option for me?
    portswigger.net ·
  29. Deserialized web security roundup: KeePass dismisses ‘vulnerability’ report, OpenSSL gets patched, and Reddit admits phishing hack
    portswigger.net ·
  30. OAuth ‘masterclass’ crowned top web hacking technique of 2022
    portswigger.net ·
  31. Radio silence from DMS vendor quartet over XSS zero-days
    portswigger.net ·
  32. New XSS Hunter host Truffle Security faces privacy backlash
    portswigger.net ·
  33. Second UK Computer Misuse Act consultation reflects ‘very little progress’
    portswigger.net ·
  34. DOM XSS vulnerability in Gartner Peer Insights widget patched
    portswigger.net ·
  35. Toyota sealed up a backdoor to its global supplier management network
    portswigger.net ·
  36. Google engineers plot to mitigate prototype pollution
    portswigger.net ·
  37. Serious security hole plugged in infosec tool binwalk
    portswigger.net ·
  38. Truffle Security relaunches XSS Hunter tool with new features
    portswigger.net ·
  39. Researcher drops Lexmark RCE zero-day rather than sell vuln ‘for peanuts’
    portswigger.net ·
  40. Bug Bounty Radar // The latest bug bounty programs for February 2023
    portswigger.net ·
  41. Tell us what you think: The Daily Swig reader survey 2023
    portswigger.net ·
  42. Deserialized web security roundup: ‘Catastrophic cyber events’, another T-Mobile breach, more LastPass problems
    portswigger.net ·
  43. Facebook two-factor authentication bypass issue patched
    portswigger.net ·
  44. Ruby on Rails apps vulnerable to data theft through Ransack search
    portswigger.net ·
  45. Trellix automates tackling open source vulnerabilities at scale
    portswigger.net ·
  46. Yellowfin tackles auth bypass bug trio that opened door to RCE
    portswigger.net ·
  47. Bitwarden responds to encryption design flaw criticism
    portswigger.net ·
  48. IoT vendors faulted for slow progress in setting up vulnerability disclosure programs
    portswigger.net ·
  49. AWS patches bypass bug in CloudTrail API monitoring tool
    portswigger.net ·
  50. Git security audit reveals critical overflow bugs
    portswigger.net ·