DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Cross-Site Request Forgery (CSRF): When a Trusted Browser Becomes an Attack Tool

Cross-Site Request Forgery (CSRF): When a Trusted Browser Becomes an Attack Tool

1
Comments
3 min read
Golden ticket detection: the forged TGT that never touches the krbtgt password

Golden ticket detection: the forged TGT that never touches the krbtgt password

Comments
3 min read
Windows Attacks & DefenseWindows Attacks & Defense

Windows Attacks & DefenseWindows Attacks & Defense

Comments
86 min read
BAE Systems Incident Takes Down the Federal Bankruptcy Notice System: When the Contractor Is the Court's Single Point of Failure

BAE Systems Incident Takes Down the Federal Bankruptcy Notice System: When the Contractor Is the Court's Single Point of Failure

Comments
5 min read
Auditing Splunk Secure Gateway for CVE-2026-76272: version checks, roles and reachability

Auditing Splunk Secure Gateway for CVE-2026-76272: version checks, roles and reachability

Comments
2 min read
Which Sectors Should Look First: Reading the Gunra Victim Profile Against Externally Reachable Assets

Which Sectors Should Look First: Reading the Gunra Victim Profile Against Externally Reachable Assets

Comments
3 min read
A Program Sent in a Chat Is Not Installed: Lessons From HEAVYGRAM

A Program Sent in a Chat Is Not Installed: Lessons From HEAVYGRAM

Comments
3 min read
Stolen ConnectWise Cloud Backup Credential Used to Sign In to 173 Microsoft 365 Tenants

Stolen ConnectWise Cloud Backup Credential Used to Sign In to 173 Microsoft 365 Tenants

1
Comments 1
5 min read
Why Human Oversight Still Matters in Automated Cyber Defence Introduction

Why Human Oversight Still Matters in Automated Cyber Defence Introduction

Comments
6 min read
CVE-2026-93616: Assessing Real Exposure in Check Point Deployments

CVE-2026-93616: Assessing Real Exposure in Check Point Deployments

Comments
3 min read
phpIPAM: 4,238 title matches for the address register that maps a network

phpIPAM: 4,238 title matches for the address register that maps a network

Comments
2 min read
CVE-2026-108551: openapi-typescript-codegen Handlebars Code Injection Vulnerability — Analysis & Mitigation

CVE-2026-108551: openapi-typescript-codegen Handlebars Code Injection Vulnerability — Analysis & Mitigation

Comments
6 min read
CVE-2026-96889: Next.js Image Optimization RCE Vulnerability — Analysis & Mitigation

CVE-2026-96889: Next.js Image Optimization RCE Vulnerability — Analysis & Mitigation

Comments
6 min read
What to answer when the questionnaire asks 'is MFA enforced for all users?'

What to answer when the questionnaire asks 'is MFA enforced for all users?'

Comments
2 min read
CVE-2026-108598: Floci Velocity SSTI Code Injection Vulnerability — Analysis & Mitigation

CVE-2026-108598: Floci Velocity SSTI Code Injection Vulnerability — Analysis & Mitigation

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.