It’s the spooky season, and there’s nothing spookier than security patches – at least in my world. Microsoft and Adobe have released their latest patches, and no bones about it, there are some skeletons in those closets. Take a break from your regular activities and join us as we review the details of their latest security alerts. If you’d rather watch the full video recap covering the entire release, you can check it out here: Adobe Patches for October 2024 For October, Adobe released nine patches addressing 52 CVEs in Adobe Substance 3D Painter, Commerce, Dimension, Animate, Lightroom, InCopy, InDesign, Substance 3D Stager, and Adobe FrameMaker. Two of these bugs were submitted through the ZDI program. The largest and most urgent of these patches covers 22 CVEs in Adobe Commerce, which i…

Windows 11 24H2 introduces several Group Policy settings to manage its new features centrally. Windows Defender receives 26 new settings, and many focus on enhancing SMB security. The new settings also control reboots after updates and the transition to Windows Protected Print.

A friend asked me if I had used a GPU for my tests described in blog post “Quickpost: The Electric Energy Consumption Of LLMs”. Because he had tried running an LLM on a machine without GPU, and it was too slow. I did a quick test, just redoing previous test but without GPU (by setting […]  ( 11 min )

AWS has recently introduced support for conditional writes in S3 storage. This feature enables S3 to verify whether an object exists before creating it, which helps prevent accidental overwriting of existing objects during data uploads. This capability is particularly useful for distributed applications that simultaneously access and write data to S3. In this article, I will showcase how to use the newly introduced --if-none-match parameter.

I’ve read claims that AI queries require a lot of energy. Today I heard another claim on the Nerdland Podcast (a popular science podcast here in Belgium): “letting ChatGPT write an email of 100 words requires 70 Wh” (if you’re interested, that’s said at 00:28:05 in this episode). I though to myself: that’s a lot […]  ( 12 min )

Setting up management, compute, and storage networks in a Windows cluster can be challenging and error-prone. Network ATC automates this process. Available in Azure Stack HCI since version 21H2, it is now integrated into Windows Server 2025.

This blog explores HUMINT's role in cybersecurity, detailing its implementation, benefits, and potential risks.  ( 38 min )

OWASP ModSecurity is an open-source Web Application Firewall (WAF) that protects web servers from common attacks. ModSecurity inspects all incoming requests to prevent attacks such as Cross-Site Scripting (XSS), SQL Injection, or Remote Code Execution. The software supports Apache, Nginx, and IIS on Windows Server. This guide demonstrates how to set up the firewall on a Windows Server 2025. You'll need to use version 2.9.7 since newer versions (3.x and above) are not yet available for Windows.

@import url(https://themes.googleusercontent.com/fonts/css?kit=lhDjYqiy3mZ0x6ROQEUoUw);.lst-kix_mfum7ompb01z-4>li:before{content:"\0025cb "}.lst-kix_mfum7ompb01z-6>li:before{content:"\0025cf "}.lst-kix_mfum7ompb01z-3>li:before{content:"\0025cf "}.lst-kix_mfum7ompb01z-7>li:before{content:"\0025cb "}.lst-kix_mfum7ompb01z-5>li:before{content:"\0025a0 "}.lst-kix_5msm2gllocvg-4>li:before{content:"\0025cb "}.lst-kix_5msm2gllocvg-5>li:before{content:"\0025a0 "}.lst-kix_5msm2gllocvg-6>li:before{content:"\0025cf "}.lst-kix_5msm2gllocvg-7>li:before{content:"\0025cb "}.lst-kix_5msm2gllocvg-8>li:before{content:"\0025a0 "}.lst-kix_mfum7ompb01z-0>li:before{content:"\0025cf "}.lst-kix_mfum7ompb01z-2>li:before{content:"\0025a0 "}.lst-kix_mfum7ompb01z-1>li:before{content:"\0025cb …  ( 16 min )

This blog post highlights two additional vulnerabilities in the Autel Maxicharger that were exploited at Pwn2Own Automotive 2024. Details of the patches are also included. Autel has been informed and has deployed a firmware update (v1.35) to address both of these issues. If you want to read about other Autel bugs reported at Pwn2Own, you check out our earlier blog here. The First Vulnerability: CVE-2024-23967 (ZDI-CAN-23230) Researchers from Computest Sector 7 identified and exploited a stack-based buffer overflow in v1.32 of the Autel firmware. This vulnerability stems from the decoding of base64 encoded data that can be controlled by an attacker. The encoded data is decoded into a fixed-size stack buffer with no bounds checks, leading to a stack buffer overflow and remote code execution.…

A few days ago Karsten asked me what tool did I use for GUID extraction. I replied that it was my own old tool written waaaay before yara’s birth. In this post I will elaborate on this bit a bit… … Continue reading →  ( 4 min )

Alongside the revamped Start Menu, one of the most noticeable changes in Windows 11 is the redesigned context menu in File Explorer. However, these modifications are not merely aesthetic – they also restrict its functionality. You can deploy a registry key using Group Policy Preferences to restore the classic context.

NVISO employs several hunting rules in multiple Threat Intelligence Platforms and other sources, such as VirusTotal. As you can imagine, there is no lack of APT (Advanced Persistent Threat) campaigns, cybercriminals and their associated malware families and campaigns, phishing, and so on. But now and then, something slightly different and perhaps novel passes by. In … Continue reading All that JavaScript for… spear phishing? →  ( 15 min )

In conversation: Pete McKernan & Luke Luckett  ( 10 min )

Content: Here is an overview of content I published in September: SANS ISC Diary entries: Wireshark 4.4: Converting Display Filters to BPF Capture Filters Protected OOXML Text Documents Python & Notepad++ Password Cracking & Energy: More Dedails Wireshark 4.4’s IP Address Functions YARA 4.5.2 Release YARA-X’s Dump Command  ( 11 min )

Introduction In this post, we are going to explore a rarely discussed class of vulnerabilities in Ruby, known as class pollution. This concept is inspired by the idea of prototype pollution in JavaScript, where recursive merges are exploited to poison the prototype of objects, leading to unexpected behaviors. This idea was initially discussed in a blog post about prototype pollution in Python, in which the researcher used recursive merging to poison class variables and eventually global variables via the __globals__ attribute. In Ruby, we can categorize class pollution into three main cases: Merge on Hashes: In this scenario, class pollution isn’t possible because the merge operation is confined to the hash itself. Merge on Attributes (Non-Recursive): Here, we can poison the instance varia…  ( 10 min )

Introduction  ( 27 min )

The latest PowerToys update introduced Workspaces, enabling users to open a group of applications in predefined positions with just one click. This post will explain how to use the Workspaces feature and showcase its key features.

By Cliff Smith Software supply chain security has been a hot topic since the Solarwinds breach back in 2020. Thanks to the Supply-chain Levels for Software Artifacts (SLSA) framework, the software industry is now at the threshold of sustainably solving many of the biggest challenges in securely building and distributing open-source software. SLSA is a […]  ( 13 min )

LPC-NG or Less Paper Cockpit – Next Generation is an electronic flight bag (EFB) application offered by Navblue, a part of Airbus. It’s used for calculating engine thrust requirements (perf) on […] Airbus Navblue Flysmart LPC-NG issues first appeared on Pen Test Partners.  ( 16 min )

Revelations about "Salt Typhoon" highlight that cyber threats targeting essential services are not a future concern—they are here and happening now.  ( 12 min )

Learn the ins and outs of broken access control vulnerabilities and how to find them in your security research.  ( 8 min )

Windows 11 24H2, the yearly feature update, is now available for high-end AI-capable devices, with a broader rollout to other PCs in the next few weeks. This article explores the features introduced in the update.

Steps to take when your device is lost or stolen TL;DR This is a guide to help prepare for a situation where your mobile device is lost or stolen, including […] How can you protect your data, privacy, and finances if your phone gets lost or stolen? first appeared on Pen Test Partners.  ( 15 min )

SANS Cybersecurity Blog pertaining to a summary of the SANS CloudSecNext Summit 2024  ( 10 min )

Everything you need to know about the next NIS2 Directive, what it means for you, and how to be compliant.

Microsoft provides two primary options for migrating to Windows Server 2025: performing a clean install (fresh install, wipe and load) or a feature update (in-place upgrade). Although the upgrade is quicker and less complicated, it is irreversible and comes with a risk of failure. Windows Server 2025 adopts the same upgrade strategy as Windows 11, with Microsoft's recommended method being an in-place update. Terms like feature update, upgrade, and in-place update are used interchangeably.

A blog about how the increasing use of mobile and cloud technologies affects digital forensics and incident response.  ( 14 min )

As you may know, I recently presented my Exchange-related talk during OffensiveCon 2024. This series of 4 blog posts is meant to supplement the talk and provide additional technical details. In this final part, I ’am going to describe the PowerShell Remoting ConvertViaNoArgumentConstructor conversion mechanism, which I underestimated at the beginning of my research. It allowed me to find 3 more vulnerabilities, even after the Exchange PowerShell attack surface had been significantly hardened by switching to a strict allow list of types. The vulnerabilities I found were: • CVE-2023-36050 – XXE (File Read) • CVE-2023-36039 – NTLM Relaying • CVE-2023-36035 – NTLM Relaying At least at that time, Microsoft was taking seriously NTLM relaying vulnerabilities in Exchange, because it could lead…

AWS has recently unveiled the open-source release of the Secrets Manager Agent. This local HTTP service is designed to be installed within various compute environments. Its purpose is to fetch secrets from Secrets Manager and cache them in memory for efficient application access. This approach offers a simplified and consistent method to consume secrets across diverse environments.

TL;DR Direct Memory Access (DMA) attacks are a powerful class of attack that give read and write access to the memory of a target system, bypassing the main CPU to […] Direct Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking first appeared on Pen Test Partners.  ( 10 min )

There are a few standout candidates for the application of GenAI with Data Loss Prevention (DLP) alerts.  ( 18 min )

Written by experienced security researcher EdOverflow, this blog provides an understanding of subdomain configurations with current resources and tools.  ( 12 min )

Hai streamlines the SDLC with the tools to maintain consistency, automate tasks, and improve overall efficiency.  ( 5 min )

All browser vendors configure a default search engine that handles queries entered into the address bar. Microsoft provides Bing, Google uses its own search engine, and Mozilla partners with Google. The default search engines can be changed through Group Policy.

Microsoft has officially announced Office LTSC 2024, the newest iteration of its Long-Term Servicing Channel (LTSC) suite. This article examines the new features in Office 2024, compares the standard to the LTSC edition, and breaks down their respective pricing models. Finally, I’ll explain why Microsoft leverages the hefty LTSC price tag and the new AI feature to lure you toward a Microsoft 365 subscription.

Walkthrough the GCG attack at a high level and be introduced to Broken Hill – Bishop Fox’s newly-released tool that can perform the GCG attack against a variety of popular LLMs.  ( 11 min )

If you just want to read the rules, you can find them here. Earlier this year we held our inaugural Pwn2Own Automotive contest, and it was a rousing success. On our biggest-ever stage (literally), we awarded $1,323,750 over the three-day event as researchers from around the globe demonstrated 49 unique zero days. Today, we’re excited to announce that we will be returning to Tokyo and the Automotive World conference for Pwn2Own Automotive 2025. The event will be held on January 22-24, 2025, and we have some exciting challenges planned for our second year. As always, we’re pleased to be working with our cohorts over at VicOne again. Their help was instrumental in the success we had at our first event, and we’re glad to be partnering with them once more. Tesla also returns as a sponsor. They …

Azure Automation Accounts can allow an attacker to persist in the associated packages that support runbooks. Learn how attackers can maintain access to an Automation Account. The post Backdooring Azure Automation Account Packages and Runtime Environments  appeared first on NetSPI.  ( 14 min )

By Paweł Płatek In the race to secure cloud applications, AWS Nitro Enclaves have emerged as a powerful tool for isolating sensitive workloads. But with great power comes great responsibility—and potential security pitfalls. As pioneers in confidential computing security, we at Trail of Bits have scrutinized the attack surface of AWS Nitro Enclaves, uncovering potential […]  ( 19 min )

AppSec teams face a wide range of challenges when securing their API estate against attack threats. In our recent webinar, which demonstrated the enhanced API scanning features in Burp Suite Enterpris  ( 6 min )

Explore Ghostwriter v4.3’s new features and how to integrate tools like BloodHound  ( 11 min )

In a recent post, we discussed the new features in Docker Desktop 4.33. This post will cover what's new in Docker Desktop 4.34.

Kryptina's adoption by Mallox affiliates complicates malware tracking as ransomware operators blend different codebases into new variants.  ( 29 min )

A blog summarizing five takeaways from a discussion between four SANS industrial control systems (ICS) security experts.  ( 16 min )

Parsing command line invocations is fun, because it’s impossible to do it right (all the time). Imagine a test DLL that exports a function called foobar. We place this DLL in c:\test directory and name it like this: test.dll, #666 … Continue reading →  ( 2 min )

I have updated the code to fix a few bugs that Роман Д. pointed out. Thank you Роман! Download the latest version here.  ( 2 min )

This post explains an attack chain for the ChatGPT macOS application. Through prompt injection from untrusted data, attackers could insert long-term persistent spyware into ChatGPT’s memory. This led to continuous data exfiltration of any information the user typed or responses received by ChatGPT, including any future chat sessions. OpenAI released a fix for the macOS app last week. Ensure your app is updated to the latest version. Let’s look at this spAIware in detail.  ( 4 min )

Saving identical text as both a Word file and a PDF leads to different responses from Copilot because of the fragmented nature of PDF files. Here's why this occurs and how to modify your prompt for more consistent results.

Hai, HackerOne's AI co-pilot, streamlines remediation efforts and accelerates the find-to-fix process.  ( 5 min )

Changing the SSH port on Ubuntu 24.04 differs from that on Ubuntu 22.04 and older. Since Ubuntu 22.10, the SSH daemon (sshd) uses socket-based activation, which means that the traditional method of changing the port in /etc/ssh/sshd_config is no longer sufficient. In addition, you need to modify the socket configuration to specify the new port using the ListenStream directive.

As you may know, I recently presented my Exchange-related talk during OffensiveCon 2024. This series of 4 blog posts is meant to supplement the talk and provide additional technical details. In this article, part 3 of the series, I describe a chain of 3 vulnerabilities that led to remote code execution: ·       CVE-2023-36744 – Arbitrary File Write vulnerability ·       CVE-2023-36777 – Arbitrary File Read vulnerability ·       CVE-2023-36745 – Local DLL Loading vulnerability In the sections that follow, I’m going to describe each of these in detail and show how I chained them to eventually achieve RCE. You can also watch the talk here: “Half Measures and Full Compromise: Exploiting Microsoft Exchange PowerShell Remoting”. This blog post covers the part from 21:00 to 26:25. Introduction I…

At Trail of Bits, we aim to share and develop tools and resources used in our security assessments with the broader security community. Many clients, we observed, don’t use Semgrep to its fullest potential or even at all. To bridge this gap and encourage broader adoption, our CEO, Dan Guido, initiated discussions with the Semgrep […]  ( 8 min )

TL;DR Two vulnerabilities on the Proroute H685t-w 4G Router Authenticated command injection is possible through the admin interface Reflected Cross Site-Scripting is possible through the admin interface Patch any routers […] Proroute H685 4G router vulnerabilities first appeared on Pen Test Partners.  ( 10 min )

Introduction Recently Doyensec was hired by a client offering a “Communication Platform as a Service”. This platform allows their clients to craft a customer service experience and to communicate with their own customers via a plethora of channels: email, web chats, social media and more. While undoubtedly valuable, such a service introduces a unique threat model. Our client’s users work with a vast amount of incoming correspondence from outside (often anonymous) users, on a daily basis. This makes them particularly vulnerable to phishing and other social engineering attacks. While such threats cannot be fully eliminated, it is possible to minimize the possibilities for exploitation. Recognizing this, Doyensec was hired to performed a security review, specifically focused on social enginee…  ( 8 min )

Microsoft is maintaining a brisk pace with its AI strategy. Under the title "Microsoft Copilot Wave 2," Redmond unveiled a bundle of innovations and improvements surrounding the diverse Copilot portfolio. There are especially exciting updates in collaboration and Office integration.

TL;DR Modern vessels are becoming increasingly connected. While it is unlikely that hackers could fully control a container ship remotely, they may be able to disrupt systems such as the […] Cyber threats to shipping explained first appeared on Pen Test Partners.  ( 14 min )

A blog about the biggest update ever to SEC510: Cloud Security Controls and Mitigations  ( 17 min )

OpenAI has officially launched its long-awaited "reasoning" AI model, formerly referred to as "Strawberry" and Q* (Q-star), now named OpenAI o1. Launched as o1-preview and o1-mini, this new family of models promises to tackle complex problems more effectively than its predecessors, including GPT-4o. However, while initial reports are promising, key questions remain about its capabilities. What matters most to me is whether OpenAI resolves the hallucination problem, an issue that all large language models (LLMs) face.

At DEF CON, Michael Brown, Principal Security Engineer at Trail of Bits, sat down with Michael Novinson from Information Security Media Group (ISMG) to discuss four critical areas where AI/ML is revolutionizing security. Here’s what they covered: AI/ML techniques surpass the limits of traditional software analysis As Moore’s law slows down after 20 years of […]  ( 9 min )

Update your emergency accounts before October 15th. Even if you have been out of office for the last couple of months, you should be aware that starting October 15th you will need to provide Multi Factor Authentication (MFA) to logon to Azure portal, Entra admin center and Intune admin center. This will be enforced to … Continue reading Emergency Accounts: Last Call! →  ( 11 min )

No content preview  ( 4 min )

Many IT admins manage both on-premises Active Directory environments and hybrid setups like Microsoft 365. Constantly switching between on-premises management and Microsoft 365 can be challenging. Easy365Manager aims to simplify this process. Let's explore this tool and the features it offers for hybrid management.

Explore how NetSPI's own LPAR enhances pentesting efficiency through rapid tool prototyping and deployment. The post Mapping Mainframe Memory Made Easy appeared first on NetSPI.  ( 11 min )

Introduction Back in October 2018, I wanted to write ARM assembly on Windows. All I could acquire then was a Surface tablet running Windows RT that was released sometime in October 2012. Windows RT (now deprecated) was a version of … Continue reading →  ( 16 min )

Explore how organizations can strategically prepare for and execute TLPT to meet DORA compliance while strengthening overall cybersecurity resilience.  ( 10 min )

Many native OS PE files still rely on delayed imports. When APIs imported this way are called for the first time, a so-called delay load helper function is executed first – it loads the actual delayed library, resolves the address … Continue reading →  ( 3 min )

When the knowledge of a language model is insufficient to answer questions, integrating additional data sources comprehensively can be beneficial. Retrieval Augmented Generation (RAG) serves this purpose by connecting to data sources outside the trained language model. Microsoft 365 Copilot already works with RAG and is now expanding with GraphRAG to unlock even more extensive knowledge.

By Joe Doyle If you’ve encountered cryptography software, you’ve probably heard the advice to never use a nonce twice—in fact, that’s where the word nonce (number used once) comes from. Depending on the cryptography involved, a reused nonce can reveal encrypted messages, or even leak your secret key! But common knowledge may not cover every […]  ( 13 min )

NVIDIA's quasi-monopoly in the AI GPU market is achieved through its CUDA platform's early development and widespread adoption. It serves as a moat by becoming the industry standard due to its superior performance and integration with key AI tools. While NVIDIA's dominance is bolstered by its proprietary advantages and developer lock-in, emerging competitors like AMD and innovations such as AMD's ROCm, OpenAI's Triton, and PyTorch 2.0 are beginning to challenge this stronghold by offering open-source alternatives and reducing reliance on CUDA.

As you may know, I recently presented my Exchange-related talk during OffensiveCon 2024. This series of 4 blog posts is meant to supplement the talk and provide additional technical details. You can read the first post in this series here. In part 2, I describe the ApprovedApplicationCollection gadget, which was available for abuse because it did not appear on the deny list and could therefore be accessed via MultiValuedProperty. I am also presenting a path traversal in the Windows utility extrac32.exe, which allowed me to complete the chain for a full RCE in Exchange. For the moment, at least, Microsoft has made a decision not to fix this path traversal bug. You can watch the full talk here: “Half Measures and Full Compromise: Exploiting Microsoft Exchange PowerShell Remoting”. This blog …

Hands-on security testers need the best tools for the job. Tools you have faith in, and enjoy using all day long. Burp Suite has long been that tool, and now, it's faster than ever. We’ve listened to  ( 5 min )

In today’s world, organizations are increasingly depending on their third-party vendors, suppliers, and partners to support their operations. This way of working, in addition to the digitalization era we’re in, can have great advantages such as being able to offer new services quickly while relying on other’s expertise or cutting costs on already existing processes. … Continue reading Introduction to Third-Party Risk Management →  ( 12 min )

TL;DR The ability to edit  Group Policy Object (GPOs) from non-domain joined computers using the native Group Policy editor has been on my list for a long time.  This blog […] Living off the land, GPO style first appeared on Pen Test Partners.  ( 12 min )

This is a silly example of a basic mistake leading to a funny discovery… When I was experimenting with the imported phantom DLLs I accidentally placed a dummy 64-bit DLL in a place of a 32-bit phantom DLL called WDSUTIL.dll … Continue reading →  ( 2 min )

Learn why more organizations are including their bug bounty programs in S-1 filings and other corporate disclosures.  ( 5 min )

Explore research on isolating functional expectations for LLMs using a controller to manage access between privileged and quarantined LLMs.  ( 28 min )

How secure is the data in Microsoft 365, and what basic measures does Microsoft offer for data protection and reliability? The company has integrated some safeguarding mechanisms to protect customers from data mishaps. There is also a new framework that outlines the responsibilities of both the provider and the customer. Here's an overview of tools and regulations.

In this blog post, we will explore the new ESC6/ESC9/ESC10 edges we have introduced with ADCS support in BloodHound.  ( 29 min )

Performance is a critical factor in the usability and efficiency of any software, and Burp Suite is no exception. We've recently focused on enhancing Burp Suite's performance across several key areas  ( 6 min )

Performance is a critical factor in the usability and efficiency of any software, and Burp Suite is no exception. We've recently focused on enhancing Burp Suite's performance across several key areas  ( 6 min )

We’ve reached September and the pumpkin spice floats in the air. While they aren’t pumpkin-spiced, Microsoft and Adobe have released their latest spicy security patches – including some zesty 0-days. Take a break from your regular activities and join us as we review the details of their latest security alerts.If you’d rather watch the full video recap covering the entire release, you can check it out here: Adobe Patches for September 2024 For September, Adobe released eight bulletins covering 28 CVEs in Adobe Acrobat and Reader, ColdFusion, Photoshop, Media Encoder, Audition, After Effects, Premier Pro, and Illustrator. A total of seven of these bugs came through the ZDI program. If you’re prioritizing, I would look at the ColdFusion patch first. It corrects a single code execution bug rat…

We're excited to introduce Hai Plays, a powerful new feature for Hai, HackerOne’s AI co-pilot. Hai Plays is designed to make your interactions with Hai more efficient and tailored to your specific security needs.  ( 5 min )

No content preview  ( 5 min )

VMware Workstation Pro 17.6 introduces a couple of valuable changes. Notably, it is now available for free for personal use. The update enhances OS support, adding compatibility with systems like Windows Server 2025 and Ubuntu 24.04 as both hosts and guests. Additionally, new tools like the vmcli command-line utility streamline virtual machine management, while crucial bug fixes and security updates enhance the platform's reliability and efficiency.

Learn how threat actors can exploit SQL Server credential objects to escalate domain privileges and how you can detect it. The post Hijacking SQL Server Credentials using Agent Jobs for Domain Privilege Escalation  appeared first on NetSPI.  ( 11 min )

By Dominik Klemba and Dominik Czarnota AddressSanitizer (ASan) is a compiler plugin that helps detect memory errors like buffer overflows or use-after-frees. In this post, we explain how to equip your C++ code with ASan annotations to find more bugs. We also show our work on ASan in GCC and LLVM. In LLVM, Trail of […]  ( 20 min )

The post CloudGoat Official Walkthrough Series: ‘glue_privesc’ appeared first on Rhino Security Labs.  ( 6 min )

Introduction This guide covers the security of smart home security products from Ring, Yale, Swann, and SimpliSafe. Whether you’re looking to monitor your property remotely, enhance your home’s security, or […] Smart home security advice. Ring, SimpliSafe, Swann, and Yale first appeared on Pen Test Partners.  ( 16 min )

A blog about using the Admiralty System for better cyber threat intelligence (CTI).  ( 26 min )

Master SBOM management to secure your software supply chain. Explore the SBOM lifecycle with our guide and enhance your compliance and security strategy.  ( 20 min )

Capital One has officially launched a public bug bounty program with HackerOne, partnering with ethical hackers to secure their assets and prevent security breaches.  ( 5 min )

In my last post, I discussed three standard methods to block AI crawlers that have little prospect of being successful. Please also read it if you want to know why it is important to block AI scrapers. One way that works reliably for 4sysops is leveraging Cloudflare's Web Application Firewall (WAF). Cloudflare's free plan provides all the essential tools to safeguard your site against content theft by AI companies. However, I found that Cloudflare's new Block AI Scrapers and Crawlers feature is insufficient for the task. Fortunately, Cloudflare's WAF is sophisticated enough to reliably block all AI scrapers and other web parasites with a single, relatively simple rule. My proposed method serves as a way to enforce an opt-in approach, rather than relying on the non-binding opt-out recommendations in your robots.txt file.

We’re excited to announce that all of NCC Group’s latest research findings and articles are now hosted on our website at the following link: NCC Group Research Blog. (https://www.nccgroup.com/us/research-blog/) To stay up-to-date with our latest research, you can also subscribe to our RSS feed here: NCC Group Research Blog RSS Feed. (https://www.nccgroup.com/us/research-blog/feed/) Be sure to […]  ( 63 min )

This post explores Windows Side-by-Side (WinSxS) and DLL hijacking, deep-diving some tooling I've written and some of the fun along the way.  ( 10 min )

The term “special relationship,” coined by Winston Churchill, describes the close, longstanding alliance between the United States and the United Kingdom. It has been applied to cooperation during war, to trade and commerce, and even to intelligence sharing. That special relationship has clearly influenced the two nations’ recent policy papers on national cybersecurity. The U.K. […] The post Protecting Critical Infrastructure: A Tale of Two National Cybersecurity Strategies appeared first on Synack.  ( 7 min )

Scoping Adventures is a series of blogs about some of the more interesting penetration tests that the Synack Customer Success teams have worked on over the last few months. Each blog outlines how we engage with the client to achieve the best results from a pentest. Pentesters love colors—red, blue, purple, black, white and grey […] The post Scoping Adventures: How to Get the Most Out of Your Synack Pentesting appeared first on Synack.  ( 11 min )

The Synack Platform & Five Pillars of Strategic Pentesting Why You Need to Think Strategically It’s no great revelation that tactics, techniques, and procedures utilized by nefarious hackers hacking activities are evolving on a daily basis. In 2022, 18,828 common vulnerabilities and exposures (CVEs) were published. At the same time, organization attack surfaces are expanding. […] The post Applying Strategic Thinking in Your Pentesting Program appeared first on Synack.  ( 7 min )

One week ago, the Biden administration unveiled its long-awaited U.S. National Cybersecurity Strategy, with an eye toward centralizing government cyber resources and holding IT vendors more accountable for their digital defenses. Now that the ink is dry on the 35-page document, top officials like Acting National Cyber Director Kemba Walden are busy putting it into […] The post The U.S. has a new cybersecurity strategy. What’s next for CISOs? appeared first on Synack.  ( 7 min )