 
      
    | You are here | linderud.dev | ||
| | | | | positive.security | |
| | | | | Chaining a misconfiguration in IE11/Edge Legacy with an argument injection in a Windows 10/11 default URI handler and a bypass for a previous Electron patch, we developed a drive-by RCE exploit for Windows 10. The main vulnerability in the ms-officecmd URI handler has not been patched yet and can also be triggered through other browsers (requires confirmation of an inconspicuous dialog) and desktop applications that allow URI opening. | |
| | | | | greg.molnar.io | |
| | | | | 37signals released a self-hosted chat app called Campfire. Opting for self-hosting entails the necessity of operating a Linux Virtual Private Server (VPS). Some people claim it's not possible for a one-person or small team to run a VPS securely, but I don't agree with that. I have been running multiple virtual servers for more than a decade for my pet projects and managing a few for customers too. I am more of an offensive security professional, than defensive though, but unless you are hosting something... | |
| | | | | smackdown.blogsblogsblogs.com | |
| | | | | It looks like another pair of hosts have joined GoDaddy in the "Not our fault" game when their servers get breached. Yesterday I had a few people contact me whose sites had been hacked, all with the identical symptoms: the only thing showing on their sites are the words hacked by hacker in plain text, ... Read more | |
| | | | | www.sonatype.com | |
| | | Learn about evolving malware threats, proactive defense strategies, and the role of software composition analysis to protect your development processes. | ||