ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.

ALL

3

Perception Point’s learning center is full of useful and informative guides on every topic related to enterprise cybersecurity.

Stay up-to-date on the latest cybersecurity topics and security operations thought leadership from ReliaQuest experts.

HeroCTF is an online cybersecurity competition for beginners and intermediates that takes place once a year.

The ATT&CK Navigator is a web-based tool for annotating and exploring ATT&CK matrices. It can be used to visualize defensive coverage, red/blue team planning, the frequency of detected techniques, and more.

Sonar is the home of Clean Code. Our blog showcases our products. SonarLint, SonarQube & SonarCloud - trusted by 400k+ organizations globally.

Get the latest information, insights, and news from Microsoft.

IT Security expertise - Penetration tests, Security audits, Code review, Training, Consulting, Vulnerability research

CryptoBook is a community project, developed by members of CryptoHack to create a resource for people to learn cryptography. The focus of this project is to create a friendly resource for the mathematical fundamentals of cryptography, along with corresponding SageMath implementation.

Menlo Labs provides insights, expertise, context and tools to aid customers on their journey to connect, communicate and collaborate securely without compromise. The collective is made up of elite security researchers that put a spotlight on the threats you know and don’t know about.

Read more about how Netskope is enabling security and networking transformation through secure access service edge (SASE).

Tackle tech challenges together. Join our IT community to connect, share your expertise, get answers, stay up with trends, advance your career, and keep IT fun!

Sinkholing is a technique whereby a resource used by malicious actors to control malware is taken over and redirected to a benign listener that can (to a varying degree) understand network connections coming from infected devices. This provides visibility of the distribution of infected devices worldwide, as well as protecting victims by preventing botnet command and control (C2) from cybercriminals.

Stay up-to-date with the latest file extensions being used by attackers.

Enter a domain or URL into the search engine to view details about its current URL categories. To request recategorization of this website, click Request Change below the search results.

PoC auto collect from GitHub. Be careful Malware.

Infosec's favorite weekly newsletter for news, tools, and tips with 18,000+ CISOs, founders, change-makers, and straight up hackers.

AttackIQ Academy combats cyberthreats with free courses by top experts. Enjoy hands-on learning in MITRE ATT&CK®, purple teaming, and breach & attack simulation, earning badges and certifications. Enhance your cybersecurity skills at no cost as part of the Informed Defender Community. Join us and become a cybersecurity hero today!

PolySwarm is a crowdsourced threat detection marketplace where security experts & AV companies compete to protect you.

A site for sharing packet capture (pcap) files and malware samples. I started this blog in 2013 to share pcaps and malware samples. Due to issues with Google, I've had to take most all blog posts downfrom 2013 through 2018, and I've been slowly restoring these pages using a new pattern for the password-portected zip archives.

Read McAfee Labs blogs for the latest threat research, threat intelligence, and thought leadership from the Threat Research team.

In the contemporary cybersecurity landscape, Security Operations Centers find themselves besieged by an overwhelming number of cyber threats, escalating in both frequency and complexity, leaving traditional...

The site for people they like to build Network Servers with CentOS, Ubuntu, Fedora, Debian, Windows Server.

AMSI.fail generates obfuscated PowerShell snippets that break or disable AMSI for the current process. The snippets are randomly selected from a small pool of techniques/variations before being obfuscated. Every snippet is obfuscated at runtime/request so that no generated output share the same signatures.

Living Off The Land Payload Generator.

The Netwrix blog is a free source of best practices, trends and expert advice for cybersecurity and IT pros.

Expert insight, best practices and advice on cloud native security, trends, threat intelligence and compliance.

We keep you posted on the latest cyber threats. Learn more about what is new in the world of IT security. Knowledge is the best protection.

Adversary techniques for credential theft and data compromise.

Trusted cybersecurity news, research, and threat intelligence by our experts.

HAWKEYE Managed SOC Dubai powered by DTS Solution helps your organization strategize, develop, build and manage a Managed Security Operations Center – SOC 2.0 As A Service. Managed Security Services Dubai, Managed SOC Provider in Dubai.

Kaspersky Threat Intelligence Portal allows you to scan files, domains, IP addresses, and web addresses for threats, malware, viruses

The Technique Inference Engine (TIE) suggests techniques an adversary is likely to have used based on a set of observed techniques. Cyber defenders can use this data to prioritize specific techniques for threat hunting, and incident responders can use this information to highlight important lateral movement and persistence behaviors that are essential to threat eviction and recovery.

Living Off the Orchard. macOS Binaries (LOOBins) is designed to provide detailed information on various built-in macOS binaries and how they can be used by threat actors for malicious purposes.

The repository tries to gather an information about Windows persistence mechanisms to make the protection/detection more efficient. Most of the information is well known for years, being actively used within various scenarios.

Vumetric Cyber portal is a public security news, threat indicators and CVE security vulnerability database/information source.