Cross-Site Request Forgery (CSRF): When a Trusted Browser Becomes an Attack Tool
Imagine logging into your banking application, then visiting a malicious website in another browser tab. Without your knowledge, that website trigge…
Testing & QA
⚑ Сообщить о проблемеПоследние новости Testing & QA от Tech News
Все темы
agents
ai
api
architecture
automation
backend
beginners
career
claude
cybersecurity
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
softwareengineering
testing
tutorial
typescript
webdev
OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons
Original research by the Hacktron AI team (Harsh Jaiswal, Mohan Pedhapati, Rahul Maini) — read the full writeup here: https://www.hacktron.ai/blog/h…
What Is BYOVD? How Can a Signed Driver Give Malware Kernel-Level Access?
In July 2022, a ransomware actor walked into a corporate network, found a system with endpoint protection properly configured, and disabled it. Not…
Why Engineering Laptops Are Becoming the Biggest Cybersecurity Risk in Industrial Facilities
Why Engineering Laptops Are Becoming the Biggest Cybersecurity Risk in Industrial Facilities An in-depth analysis of engineering workstation securit…
Advanced Privacy: A Practical Defense-in-Depth Guide
Privacy is not a product you install. It is a system of boundaries that prevents one disclosure from becoming a complete map of your life. No setup…
Horse Museum is safe, here's why.
Horse Museum installer is not malware. It is a false positive triggered by aggressive DRM-bypass techniques. To play on a private server without per…
Network Forensics: Evidence Acquisition (Week 4)
This week, we fovus on the phase of evidence acquisition, focusing on how investigators capture network traffic using physical interception, acquisi…
OpenCTI Case Creation Flaw CVE-2026-76822: A Permission Model Postmortem
OpenCTI Case Creation Flaw CVE-2026-76822: A Permission Model Postmortem Vulnerability overview CVE-2026-76822 is a moderate authorization flaw in O…
OpenCTI Case Queue Integrity: Reading CVE-2026-76822 as a Data Provenance Problem
OpenCTI Case Queue Integrity: Reading CVE-2026-76822 as a Data Provenance Problem Vulnerability overview CVE-2026-76822 is a moderate authorization…
CVE-2026-26084: the sandbox appliance that answers questions it should refuse
CVE-2026-26084: the sandbox appliance that answers questions it should refuse Information disclosure is easy to deprioritize next to remote code exe…
Beyond CVSS: A Risk-Based Approach to Vulnerability Prioritization
Your vulnerability scanner shows: CVE-XXXX-XXXX CVSS: 9.8 Severity: Critical The natural reaction is: "This is critical. Put it at the top of the re…
Measuring internet-exposed RDP surface and what it means for defenders
The Visibility of Remote Desktop Protocols in the Global Attack Surface The Remote Desktop Protocol (RDP) stands as one of the most ubiquitous and h…
ShinyHunters Rooted Clop's Leak Site Through Grav CMS, and Now Wants to Extort the Extortionists
TL;DR what: ShinyHunters compromised and defaced the Clop ransomware gang's dark web data leak site on Friday, September 19, 2026, using an unauthen…
The Anatomy of an IP Ban: TCP Fingerprints, Passive OS Fingerprinting, and MTU Signatures
The Anatomy of an IP Ban: TCP Fingerprints, Passive OS Fingerprinting, and MTU Signatures Core Problem Statement & Invalidation of Traditional A…
Google Dorking in 2026: A Practical Guide to Advanced Google Search
Google is much more than a search engine for finding websites. With the right search operators, you can narrow down results, discover specific types…
CVE-2026-42167: ProFTPD mod_sql RCE and How to Analyze the Exploit-DB PoC
A public exploit for CVE-2026-42167, a ProFTPD mod_sql vulnerability, is now available on Exploit-DB. The vulnerability has a CVSS v3.1 score of 8.1…
Exposed PLCs in the Water Sector: What CISA's Alert Reveals About Internet-Facing OT
Exposed PLCs in the Water Sector: What CISA's Alert Reveals About Internet-Facing OT On 30 July 2026, the U.S. Cybersecurity and Infrastructure Secu…
Attackers Chain Two JFrog Artifactory Flaws to Mint Admin Tokens and Plant Rust Backdoors
TL;DR what: Attackers chained CVE-2026-42018 and CVE-2026-42016 in self-hosted JFrog Artifactory to turn an unauthenticated request into an administ…
StyleSmuggler: Magento Zero-Day CVE-2026-75650 Drops a Rust Backdoor and a PHP Web Shell
TL;DR what: Adobe patched CVE-2026-75650, a CVSS 10.0 unauthenticated remote code execution flaw in Adobe Commerce and Magento Open Source that Sans…
When Critical Infrastructure Gets Hacked: What the Rand Water Cyber Incident Teaches Us About IT, OT and Cyber Resilience
On 3 September 2026 , Rand Water told holders of its listed debt that it was dealing with a cybersecurity incident. If you're not familiar with them…
Subdomain Takeover Severity Comes From Security Context, Not the Exploit Mechanism
Subdomain Takeover Severity Comes From Security Context, Not the Exploit Mechanism saostatic.uber.com pointed to an unregistered CloudFront distribu…
Hands-On SIEM Detection: Building, Breaking, and Auditing a Wazuh Lab Environment
What happens when a web server captures an attack in its access logs, but the underlying host system remains completely blind to the actual commands…
Critical Gitea RCE Under Active Exploitation: CVE-2026-60004 Turns a Signup Form Into Shell Access
TL;DR what: CISA confirmed active exploitation of CVE-2026-60004, a CVSS 9.8 code injection flaw in Gitea's diffpatch API that plants an executable…
I Set Up a Fake Internet to Catch a Trojan: Analyzing FlexenseActivator.exe
There's a malware trick I'd read about but never witnessed firsthand: a trojan that checks whether it's connected to the real internet before doing…
Oracle WebLogic Proxy Plug-in Flaw Hits CISA KEV: CVSS 10.0, Unauthenticated, Exploited Since February
TL;DR what: CISA added CVE-2026-21962, a CVSS 10.0 improper access control flaw in Oracle HTTP Server and the Oracle WebLogic Server Proxy Plug-in,…
Keycloak CVE-2026-18963: Unauthenticated Password Reset Hands Over Any Account, Including Admins
TL;DR what: Red Hat and the Keycloak project patched CVE-2026-18963, an improper state validation bug in the reset-credentials authentication flow t…
Burp Suite: Main Purposes in Web Security Testing
Burp Suite is a web application security testing platform developed by PortSwigger. It is widely used by penetration testers, security researchers,…
Rust Build Scripts Executed Malware From a Crate With 245 Million Downloads
TL;DR what: A compromised crates.io maintainer account published arrayref 0.3.10, internment 0.8.7, and append-only-vec 0.1.9, each adding a single…
Deep-Dive Write-up by Huynh Kien Minh: CVE-2026-13736 — NewPath WildApricotPress Member Directory PII Disclosure
🔐 Vulnerability ID: CVE-2026-13736 | 🎯 CVSS Score: 5.3 Medium | 🏆 Lead Researcher: Huynh Kien Minh (MinhHK) | 🔗 WPScan Advisory: Verified Report | 🌐…
Burp Suite: What It Is, Why We Use It, and How It Works
When learning web application security, one of the most important tools to understand is Burp Suite. Burp Suite is a web security testing platform d…