Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.

Slides and material from 2019 Security Data Science Colloquium hosted by Microsoft - ramshans/2019-Security-Data-Science-Colloquium-

In this article, theMiddle discusses the many possibilities to exploit a reflected (or even stored) XSS when there are filters or WAF's protecting the website.

Hundreds of incredibly popular and widely deployed Java libraries & JVM compilers are still downloading their dependencies over HTTP with…

In this case study of OS X digital forensics, we were tasked to recover the version history of documents created using Apple’s TextEdit application.

Earlier this week, Microsoft issued patches for CVE-2019-1040, which is a vulnerability that allows for bypassing of NTLM relay mitigations. The vulnerability was discovered by Marina Simakov and Yaron Zinar (as well as several others credited in the Microsoft…

An API misconfiguration in the open-source version of the popular DevOps tool Docker Engine-Community allows attackers to infiltrate containers and run a variant of AESDDoS.

Interesting APT Report Collection And Some Special IOC - blackorbird/APT_REPORT

Cheatsheet containing a variety of commands and concepts relating to digital forensics and incident response.

The Alternative Fileless File System. Contribute to SafeBreach-Labs/AltFS development by creating an account on GitHub.

It looked like a simple XSS in the Outlook Android app, but the app developers couldn’t reproduce it so they didn’t fix it. Then things got interesting. Here’s the story of how I discovered CVE-2019-1105.

Long time ago I wrote three detailed blog posts about how to write shellcodes for Windows (x86 – 32 bits). The articles are beginner friendly and contain a lot of details. First part explains…

Security, technology, and humans