CVE-2022-0185 – What does the newest kernel exploit mean for Kubernetes
submitted by /u/gemyougym
GoWard – A robust Red Team proxy written in Go
submitted by /u/UnwearableCactus
CVE-2021-45467: CWP CentOS Web Panel – preauth RCE
submitted by /u/Gallus
CVE-2022-0185: Detecting and mitigating Linux Kernel vulnerability causing container escape
submitted by /u/MiguelHzBz
The best free, open-source supply-chain security tool? The lockfile
submitted by /u/pabloest
Introducing TREVORproxy and TREVORspray 2.0
submitted by /u/aconite33
SeeYouCM-Thief: Exploiting common misconfigurations in Cisco phone systems
submitted by /u/HackingLZ
Zooming in on Zero-click Exploits (Project Zero)
submitted by /u/albinowax
Mixed Messages: Busting Box’s MFA Methods | Varonis
submitted by /u/VaronisThreatLabs
Public exploit POC for critical windows http RCE impacting multiple windows versions
submitted by /u/markcartertm
Stealing administrative JWT’s through post auth SSRF – VMWare Workspace One Access (CVE-2021-22056)
submitted by /u/Mempodipper
Capturing RDP NetNTLMv2 Hashes: Attack details and a Technical How-To Guide – GoSecure
submitted by /u/obilodeau
Domain Persistence – Machine Account
submitted by /u/netbiosX
You’re running untrusted code!
submitted by /u/nfrankel
Free copy of The ssh Plumber’s Handbook
submitted by /u/markcartertm
IndexedDB in Safari 15 leaks your browsing activity in real time
submitted by /u/Synchisis
A Detailed Guide to cracking the OSWE Certification
submitted by /u/YashitM
10 real-world stories of how we’ve compromised CI/CD pipelines
submitted by /u/digicat
tlsmate: tool to scan TLS servers for their configuration weaknesses and vulnerabilities
submitted by /u/CantSayThatMuch
Linux Servers at Risk of RCE Due to Critical CWP Bugs
The two flaws in Control Web Panel – a popular web hosting management software used by 200K+ servers – allow code execution as root on Linux servers.
AT&T announces multi-gigabit fiber: $110 a month for 2Gbps, $180 for 5Gbps
Enlarge (credit: Getty Images | zf L)
AT&T has started offering 2Gbps and 5Gbps symmetrical Internet speeds over its fiber-to-the-home network, the telecom company announced today. The multi-gigabit speeds are...
Registration for the (ISC)² Entry-Level Cybersecurity Certification Exam Pilot Program Is Now Open
New certification validates students' and career changers' foundational skills and helps kickstart their cybersecurity careers.
DC, 3 States Sue Google Saying it Invades Users' Privacy
The District of Columbia and three states are suing Google for allegedly deceiving consumers and invading their privacy by making it nearly impossible for them to stop their location from being tracked.
read more
A flaw in Rust Programming language could allow to delete files and directories
The maintainers of the Rust programming language fixed a high-severity flaw that could allow attackers to delete files and directories from a vulnerable system.
The maintainers of the Rust programming language have released a security update for a high-severity...
