Exploiting Network Security Cameras: Understanding and Mitigating the Risks

OWASP AISVS 1.0: What CISOs Need to Know About...

Article

OWASP has released AISVS 1.0, a testable verification standard for AI systems. Discover what it means for your...

Cracking CREDHIST: Offline hash extraction from DPAPI password history...

Article

DPAPI's CREDHIST file stores a chain of encrypted historical password material that is rarely targeted during offensive engagements....

Vulnerability Disclosure: Kiwire Captive Portal

Article

LRQA uncovers a blind SQL injection vulnerability in Kiwire's guest Wi-Fi captive portal that allows authentication bypass via...

ElephantPoint: a SharePoint Enumeration Tool

Article

Learn how ElephantPoint, developed by LRQA, enables red teams to enumerate and download SharePoint files using Azure access...

CVE-2023-28802: Zscaler Bypass via Service Restart

Article

LRQA details CVE-2023-28802, a Zscaler Client Connector vulnerability that allowed low-privilege users to bypass ZIA/ZPA controls via service...

Penetration Testing: What to expect

Article

A practical overview of how penetration testing works, what it reveals and how it helps organisations strengthen their...

Hash Relaying: The Path to Domain Admin

Article

Discover how common AD misconfigurations still let NTLM relay attacks turn a simple SMB or HTTP auth into...

You're absolutely right: Vibe coding in the world of...

Article

Explore how AI and 'vibe coding' are transforming penetration testing, from prompt-driven development to modular attack tools and...

Remote Code Execution in Broadcom Altiris IRM

Article

A critical unauthenticated remote code execution (RCE) vulnerability was discovered in the Broadcom Symantec Altiris Inventory Rule Management...