Early Lessons from the Capital One Data Breach
As more details about the Capital One breach are released in court filings and media reporting, we can start to look at where controls failed to »
Route 53 as Pentest Infrastructure
Use of DNS infrastructure is a staple of blind application testing and data exfiltration. Both of these scenarios are applicable in most pentest engagements, but building »
PoC for CVE-2017-16744 and CVE-2017-16748
Proof of Concept (PoC) Date: 09/04/2018 Exploit Author: Jonathan Gaines Vendor Homepage: https://www.tridium.com/ Version: Affects Tridium Niagara AX Versions: 3.8 »
What we learned about cloud security running a SaaS in AWS for 5 years - Part 7 - Availability
This is Part 7 of a multi-part series of posts on how we securely ran ThreatSim in AWS for 5 years and did right by our »
What we learned about cloud security running a SaaS in AWS for 5 years - Part 6 - Access Security
This is Part 6 of a multi-part series of posts on how we securely ran ThreatSim in AWS for 5 years and did right by our »
