New Supply Chain Attack Targets Widely Used npm Package with 45,000 Weekly Downloads
A major supply chain compromise has been discovered in the npm package rand-user-agent, a library with over 45,000 weekly downloads, commonly used to generate...
OAuth Misconfiguration Enables Researchers to Access Sensitive Data Without Restrictions
A recent bug bounty engagement has brought to light a critical OAuth2 misconfiguration that allowed independent security researchers to access sensitive organizational and personally...
Clio: A Secure Real-Time Logging Tool with Authentication and Audit Trails
Clio, a cutting-edge logging platform, has been introduced as a secure and collaborative tool designed specifically for red team operations and security assessments.
This...