/explore
|
You are here 
|
www.theverge.com | ||
| | | | |
www.ft.com
Messaging app discovers vulnerability that has been open for weeks |
|
| | | | | ||
| | | | |
forbiddenstories.org
[AI summary] An unprecedented leak exposes the systematic misuse of Israeli spyware by over 50 government clients, revealing that at least 180 journalists have been targeted for surveillance despite the company's claims of restricting its use to serious crime and terror. |
|
| | | | | ||
| | | | |
sandervenema.ch
[AI summary] The article discusses the Pegasus spyware, developed by NSO Group, which is used by authoritarian governments to secretly monitor journalists, activists, and lawyers, and explains its methods of infection, data collection, and detection. |
|
| | | | | ||
| | | | |
nv1t.github.io
I've identified a security concern within the self-hosted file sharing tool ProjectSend in the current version r1605. By exploiting a chain of vulnerabilities - including Cross-Site Scripting (XSS), Insecure Direct Object Reference (IDOR), and weaknesses in its change password implementation - an authenticated attacker can force a logged-in user to unknowingly change their account password, by clicking a link. But let me explain the attack in detail. |
|
| | | |||
