Explore >> Select a destination


You are here

linderud.dev
| | positive.security
20.1 parsecs away

Travel
| | Chaining a misconfiguration in IE11/Edge Legacy with an argument injection in a Windows 10/11 default URI handler and a bypass for a previous Electron patch, we developed a drive-by RCE exploit for Windows 10. The main vulnerability in the ms-officecmd URI handler has not been patched yet and can also be triggered through other browsers (requires confirmation of an inconspicuous dialog) and desktop applications that allow URI opening.
| | greg.molnar.io
16.0 parsecs away

Travel
| | 37signals released a self-hosted chat app called Campfire. Opting for self-hosting entails the necessity of operating a Linux Virtual Private Server (VPS). Some people claim it's not possible for a one-person or small team to run a VPS securely, but I don't agree with that. I have been running multiple virtual servers for more than a decade for my pet projects and managing a few for customers too. I am more of an offensive security professional, than defensive though, but unless you are hosting something...
| | smackdown.blogsblogsblogs.com
11.9 parsecs away

Travel
| | It looks like another pair of hosts have joined GoDaddy in the "Not our fault" game when their servers get breached. Yesterday I had a few people contact me whose sites had been hacked, all with the identical symptoms: the only thing showing on their sites are the words hacked by hacker in plain text, ... Read more
| | www.sonatype.com
63.7 parsecs away

Travel
| Learn about evolving malware threats, proactive defense strategies, and the role of software composition analysis to protect your development processes.