🔒 LDAP Security

Directory Injection, Authentication Bypass, Enterprise Pentesting, AD Enumeration

Analysis of the ROGUE Agent-Based Automated Web Testing System
dev.to·2h·
Discuss: DEV
⚡Proof Automation
DNS security for business: What it is and why it matters
proton.me·1d
🌐DNS Security
GWSC Three Factor Authentication RFC (Draft-GWC-27001-3A)
gwsc-3fa.org·6h·
Discuss: Hacker News
🔐Capability Systems
Active Directory Security Tip #5: The Default Domain Administrator Account
adsecurity.org·23h
🏢Active Directory
How I hacked the Placement portal of my college to leak the entire SQL database
infosecwriteups.com·16h
🗄️Database Internals
How weak passwords and other failings led to catastrophic breach of Ascension
arstechnica.com·9h·
Discuss: Hacker News, r/technews
🏺Kerberos Archaeology
The huge AI security hole
aardvark.co.nz·6h
🔓Hacking
Authorizing access to data with RAG implementations
aws.amazon.com·9m
🔐Capability Systems
What’s New in Tenable Cloud Security: A More Personalized, Global and Comprehensive Experience
tenable.com·8h
🏠Homelab Security
This Microsoft Entra ID Vulnerability Could Have Caused a Digital Catastrophe
wired.com·8h·
Discuss: Hacker News, r/technews
🎫Kerberos Exploitation
Connect and secure any private or public app by hostname, not IP — free for everyone in Cloudflare One
blog.cloudflare.com·9h
🌐DNS over QUIC
Countering threats to business logic
techradar.com·9h
🔐CBOR
Lessons in Supply Chain Security from Recent Third-Party Breaches
optiv.com·2h
🔐Capability Systems
How to join the desync endgame: Practical tips from pentester Tom Stacey
portswigger.net·7h
🛣️BGP Hijacking
Developers under attack is the new black
boostsecurity.io·6h
💣ZIP Vulnerabilities
Infinite payloads? The future of API Testing with dynamic fuzzing
blog.detectify.com·14h
🧪Binary Fuzzing
How AI coding tools can learn to develop secure software
reversinglabs.com·1d
⚡Proof Automation
What Is Anti-Phishing? Tools and Tactics to Protect Your Organization
vmray.com·2d
🎯Threat Hunting
Study Finds IPv6 Adoption Exposes More Residential Devices to Unsolicited Traffic
circleid.com·8h
🕵️Domain Enumeration
New attack on ChatGPT research agent pilfers secrets from Gmail inboxes
arstechnica.com·7h·
Discuss: r/technews
🏢LDAP Forensics