Currently I’m Pen-testing on private projects so if you have any project to test kindly reach me on Twitter @hst_kishan

A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs. - RhinoSecurityLabs/AWS-IAM-Privilege-Escalation

Datos de 2.1 millones de registros de Librería Porrúa, que incluyen registros de compra, información de contacto y números de tarjetas de crédito, fueron expuestos y luego robados. Los hackers pidieron a Porrúa un rescate en bitcoins, asegura una investigación…

Vast majority of Apple iOS users haven't updated to iOS 12.4, leaving themselves wide open to a public exploit.

The researcher was able to exploit a cookie poisoning attack against other users, by sending malicious links to the victims, as a result, the victims were no longer be able to access...

It is just another XSS blog.

Crowdsource hacker Gwendal shares tutorial on how he bypassed Cloudflare WAF, commonly used by companies, with the origin server IP.

Fancy Bear servers are communicating with compromised devices inside corporate networks.

  Research By: Dikla Barda, Roman Zaikin and Oded Vanunu According to sources, WhatsApp, the Facebook-owned messaging application has over 1.5 billion users in over 180 countries. The average user checks WhatsApp more than 23 times per day. And, the number…

RSA encryption has been around for decades. Unfortunately, so have bad implementations that leave it less secure.

Receive any strange SMS text messages recently? If you live in the US, there’s a small chance you might have received an SMS with the following text in the last few days from someone called ‘j3ws3r…

The recent disclosure of yet another cloud security misconfiguration leading to the loss of sensitive personal information made the…

It is unclear if the Machete group is state-sponsored, or a freelancer selling data to the highest bidder.