Exploiting Network Security Cameras: Understanding and Mitigating the Risks

Operational Awareness: ICS Security Research and Honeypot Disclosures

Article

Explore ICS security research into honeypot deployments, common OPSEC mistakes and how threat hunters can generate more reliable,...

Read more

Social engineering: a real-world Vishing case study

Article

Explore a real-world vishing attack that nearly cost a victim $30,000, including the tactics used, warning signs and...

Read more

Hacking a Spy Camera

Article

LRQA researchers hack a £30 spy camera, uncovering hardcoded credentials, exposed footage and critical IoT security flaws affecting...

Read more

The HuggingFace Hack: AI Guardrails, Agentic Attacks and Cyber...

Article

What can security teams learn from the HuggingFace hack? Explore AI guardrails, agentic cyber attacks, access governance and...

Read more

OWASP AISVS 1.0: What CISOs Need to Know About...

Article

OWASP has released AISVS 1.0, a testable verification standard for AI systems. Discover what it means for your...

Read more

Cracking CREDHIST: Offline hash extraction from DPAPI password history...

Article

DPAPI's CREDHIST file stores a chain of encrypted historical password material that is rarely targeted during offensive engagements....

Read more

Vulnerability Disclosure: Kiwire Captive Portal

Article

LRQA uncovers a blind SQL injection vulnerability in Kiwire's guest Wi-Fi captive portal that allows authentication bypass via...

Read more

ElephantPoint: a SharePoint Enumeration Tool

Article

Learn how ElephantPoint, developed by LRQA, enables red teams to enumerate and download SharePoint files using Azure access...

Read more

CVE-2023-28802: Zscaler Bypass via Service Restart

Article

LRQA details CVE-2023-28802, a Zscaler Client Connector vulnerability that allowed low-privilege users to bypass ZIA/ZPA controls via service...

Read more