Hacky Easter is on!  Go get your CTF rolling. https://hackyeaster.hacking-lab.com/hackyeaster/...

The Stack Overflow Survey is out and has some interesting insights https://insights.stackoverflow.co...

PortSwigger has replaced the exercises in the Web Application Security Hacker's Handbook with the ne...

No April Fools here.   Solid primer on using burp Collaborator for blind command injection.&nbs...

Bruce has some thoughts on a well-circulated article suggesting that application security isn't that...

Android malware had almost 150 MILLION Googe Play Store downloads before it is was discovered and pu...

The NSA has open sourced their internal reverse engineering tool.  It's so good, many consultan...

As the network boundary becomes more ephemeral, and attackers don't have obvious kickoff points for...

A new tool for finding malicious JavaScript and securely using external libraries. https://blog.foca...

Cool PoC of the Mac vulnerability CVE-2018-4193, an RCE in WindowServer. https://www.synacktiv.com/r...

A maintainer of the underlying runtime for Docker and Kubernetes) reported a vulnerability. htt...

Ullaakut on Reddit posted this toolset: Gorsair, a tool to remotely access the exposed Docker A...