Featured
CSRF: What It Is and How to Defend Your Web Applications
CSRF remains in the OWASP Top 10 and hits applications that look secure. How it really works, with exploit examples and concrete countermeasures to im...
> Vulnerabilities
CVEs and related topics
9 articoli
A Single Telegram Sticker Can Hack You: The Unpatched, Zero-Click RCE Vulnerability
A specially crafted animated sticker file can execute remote code on Telegram for Android and Linux with no user interaction at all. ZDI-CAN-30207, CV...
WordPress Password Reset Brute Force: Analysis of a Real Attack and Nginx Countermeasures
A bot requesting dozens of password resets per minute on a WordPress site, with a different user-agent on every request. Here's how to spot it in ngin...
Featured
Prompt Injection: What It Is and How to Defend LLM-Based Systems
Prompt injection is a structural weakness of LLM-based systems. When commands and data travel through the same channel, a well-crafted sentence is eno...
Featured
The Threat of Supply Chain Attacks
Software supply chain attacks are a growing, insidious threat: compromising a single library or DevOps tool is enough to hit thousands of systems. Fro...
Featured
SQL Injection: How It Works and How to Protect Your Applications
SQL Injection is still among the most exploited vulnerabilities. Here's how it really works, with practical examples and concrete solutions for develo...
Featured
What Is Cross-Site Scripting (XSS), What Types Exist and How Do You Protect Against It?
Cross-site scripting (XSS) is a serious vulnerability that lets hackers inject malicious scripts into web applications. Covers prevention, types of XS...
"The Mother of All Breaches" Exposes 26 Billion Records
A massive collection of stolen data, nicknamed "the Mother of All Breaches", has recently been discovered, including 26 billion records from LinkedIn,...
Featured
Types of Malware
There are several types of malware, including spyware, adware, backdoors, ransomware, scareware, rootkits, viruses, trojans and worms, each with a dif...