🔓 LDAP Injection

Directory Services, Authentication Bypass, Injection Attacks, Enterprise Security

New attack on ChatGPT research agent pilfers secrets from Gmail inboxes
arstechnica.com·7h·
Discuss: r/technews
🏢LDAP Forensics
DNS security for business: What it is and why it matters
proton.me·1d
🌐DNS Security
GWSC Three Factor Authentication RFC (Draft-GWC-27001-3A)
gwsc-3fa.org·7h·
Discuss: Hacker News
🔐Capability Systems
What is Directory Traversal / Path Traversal Attacks.
infosecwriteups.com·16h
💣ZIP Vulnerabilities
Automate OIDC client secret rotation with Application Load Balancer
aws.amazon.com·1d
🎫Kerberos History
How Tenable Found a Way To Bypass a Patch for BentoML’s Server-Side Request Forgery Vulnerability CVE-2025-54381
tenable.com·1d
🌐DNS Security
Active Directory Forest & Domain Levels
adsecurity.org·2d
🏢Active Directory
Connect and secure any private or public app by hostname, not IP — free for everyone in Cloudflare One
blog.cloudflare.com·9h
🌐DNS over QUIC
Vulnerabilities threaten HPE Aruba Networking EdgeConnect SD-WAN
heise.de·14h
🔓Hacking
This Microsoft Entra ID Vulnerability Could Have Caused a Digital Catastrophe
wired.com·8h·
Discuss: Hacker News, r/technews
🎫Kerberos Exploitation
Lessons in Supply Chain Security from Recent Third-Party Breaches
optiv.com·2h
🔐Capability Systems
Who controls the Internet and How it works?
binaryigor.com·1d·
Discuss: Hacker News
🛣️BGP Hijacking
Domain Fronting is Dead. Long Live Domain Fronting!
praetorian.com·2d
🕵️Domain Enumeration
How weak passwords and other failings led to catastrophic breach of Ascension
arstechnica.com·9h·
Discuss: Hacker News, r/technews
🏺Kerberos Archaeology
SEC Consult SA-20250911-0 :: Unauthenticated SQL Injection Vulnerability in Shibboleth Service Provider (SP) (ODBC interface)
seclists.org·2d
✅Format Verification
DFIR Next Steps: Suspicious AnyDesk Use
cybertriage.com·9h
🔌Operating system internals
Analysis of the ROGUE Agent-Based Automated Web Testing System
dev.to·2h·
Discuss: DEV
⚡Proof Automation
Underrated Postgres: Build Multi-Tenancy with Row-Level Security
simplyblock.io·14h·
Discuss: Hacker News
🔐CBOR
What Is Anti-Phishing? Tools and Tactics to Protect Your Organization
vmray.com·2d
🎯Threat Hunting
Study Finds IPv6 Adoption Exposes More Residential Devices to Unsolicited Traffic
circleid.com·8h
🕵️Domain Enumeration