Exploiting Network Security Cameras: Understanding and Mitigating the Risks

The HuggingFace Hack: AI Guardrails, Agentic Attacks and Cyber...

Article

What can security teams learn from the HuggingFace hack? Explore AI guardrails, agentic cyber attacks, access governance and...

Read more

OWASP AISVS 1.0: What CISOs Need to Know About...

Article

OWASP has released AISVS 1.0, a testable verification standard for AI systems. Discover what it means for your...

Read more

Cracking CREDHIST: Offline hash extraction from DPAPI password history...

Article

DPAPI's CREDHIST file stores a chain of encrypted historical password material that is rarely targeted during offensive engagements....

Read more

Vulnerability Disclosure: Kiwire Captive Portal

Article

LRQA uncovers a blind SQL injection vulnerability in Kiwire's guest Wi-Fi captive portal that allows authentication bypass via...

Read more

ElephantPoint: a SharePoint Enumeration Tool

Article

Learn how ElephantPoint, developed by LRQA, enables red teams to enumerate and download SharePoint files using Azure access...

Read more

CVE-2023-28802: Zscaler Bypass via Service Restart

Article

LRQA details CVE-2023-28802, a Zscaler Client Connector vulnerability that allowed low-privilege users to bypass ZIA/ZPA controls via service...

Read more

Penetration Testing: What to expect

Article

A practical overview of how penetration testing works, what it reveals and how it helps organisations strengthen their...

Read more

Hash Relaying: The Path to Domain Admin

Article

Discover how common AD misconfigurations still let NTLM relay attacks turn a simple SMB or HTTP auth into...

Read more

You're absolutely right: Vibe coding in the world of...

Article

Explore how AI and 'vibe coding' are transforming penetration testing, from prompt-driven development to modular attack tools and...

Read more