Unveiling the Core Functions and Security Techniques of QuasarRAT
QuasarRAT, first introduced in 2014 under the name xRAT, remains one of the most frequently abused remote access trojans in the Windows ecosystem.
Originally published...
Jenkins Gatling Plugin Vulnerability Enables Content-Security-Policy Bypass
A critical security vulnerability has been discovered in the Jenkins Gatling Plugin that allows attackers to bypass Content-Security-Policy protections, potentially exposing Jenkins instances to...
Critical Android Security Update Addresses Privilege Escalation Vulnerabilities
Android security bulletin for June 2025, addressing multiple high-severity vulnerabilities, including several that could allow attackers to gain elevated privileges on affected devices.
The...
Apache Tomcat CGI Servlet Vulnerability Enables Security Constraint Bypass
The Apache Software Foundation has disclosed a new security vulnerability affecting multiple versions of Apache Tomcat that allows attackers to bypass security constraints through...
Woodpecker: Red Teaming for AI, Kubernetes, and API Security Testing
A new open-source security tool called Woodpecker has emerged as a specialized solution for red teaming artificial intelligence and cloud applications.
Developed by OperantAI,...