Security Blog
Cybersecurity research, vulnerability analysis, and practical security insights.
What Every Engineer Should Know About Continuous Attack Surface Management
Continuous attack surface management identifies and monitors all internet-facing and internal assets that an attacker could target. This process provides real-time visibility into an organization's...
External Vulnerability Scanner — What It Tells You and How to Read It
An external vulnerability scanner identifies security weaknesses on internet-facing assets. It probes public IP addresses, domain names, and web services from an outside perspective. Use it for...
What Is Attack Surface Management Explained for Security Practitioners
Attack surface management (ASM) identifies, inventories, and monitors all internet-facing assets an organization owns or controls. It aims to reduce the attack surface by finding unknown, forgotten,...
External Attack Surface Management Explained for Security Practitioners
External attack surface management identifies, inventories, classifies, monitors, and remediates all internet-facing assets an organization owns or controls. This process gives security teams an...
10 Best Attack Surface Management Tools Worth Testing in 2026
Choosing the right attack surface management tools requires understanding your asset scope, automation needs, and integration capabilities. Prioritize solutions offering continuous discovery and...
OSVDB-115695: DokuWiki Reflected XSS via Malicious SWF Upload
OSVDB ID: 115695 · Class: Reflected cross-site scripting (XSS) · Affected: DokuWiki instances allowing file upload of Flash (SWF) content. Summary OSVDB-115695 documents a reflected...
OSVDB-97562: OAuth Protocol HMAC Timing Disclosure Weakness
OSVDB ID: 97562 · Class: Cryptographic weakness / timing side-channel · Affected: OAuth protocol implementations performing HMAC signature verification with non-constant-time...
Unpacking the First Documented Agentic — Impact, Detection, and Remediation
Unpacking the First Documented Agentic The cybersecurity community recently faced a significant challenge with the discovery of CVE-2024-28876, a critical command injection vulnerability in Apache...
Configuring Openfire XMPP Chat Server on CentOS 6
INTRODUCTION: Extensible Messaging and Presence Protocol (XMPP) is a communications protocol for message-oriented middleware based on XML (Extensible Markup Language). The protocol was originally...
Installing and Configuring Bro NIDS on CentOS 6
Bro is an open source Unix based network monitoring framework. Often compared to a Network intrusion detection systems (NIDS), Bro can be used to build a NIDS but is much more. Bro can also be used...
Setting up Security Onion — Intrusion Detection and Network Security Monitoring
Setting up a properly installed and well-tuned IDS/IPS system can be time consuming. If you have ever tried to set up a fully-functional Snort system, you are familiar with the time it requires. If...
Offensive Security Certified Professional (OSCP / PWK) — My Experience
Hello guys. Its been a long time coming since I last posted on here and I apologize for the delay. Personal life and my job takes priority over work though, so I hope you can forgive me for this...
