Menu

#DevtoInfosec

299 posts

Feed·
12 of 299 posts
ScreenConnect’s Reverse-Pivot: Why Your Customer’s Compromised Endpoint Is Your Problem
📰
0Read More

ScreenConnect’s Reverse-Pivot: Why Your Customer’s Compromised Endpoint Is Your Problem

DEV Community: infosec·threataft·about 1 hour ago
#tau8Truz
#devtoinfosec#devto#dev#customer#relay

Huntress reported it yesterday: 6 MSPs breached, 286 endpoints hit, 47 downstream orgs. The entry...

15s
Want to decode mysterious Linux permission strings like -rwxr-xr-- like a pro security auditor? 🐧
Meet File Permission Analysis: Decoding ls -l outputs, locking down dangerous 777 permissions, and securing servers with proper 644 or 700 rules!
#Linux #Cyb
📰
0Read More

Want to decode mysterious Linux permission strings like -rwxr-xr-- like a pro security auditor? 🐧 Meet File Permission Analysis: Decoding ls -l outputs, locking down dangerous 777 permissions, and securing servers with proper 644 or 700 rules! #Linux #Cyb

DEV Community: infosec·Yashpal Patel·about 1 hour ago
#Nomqj5RF
#devtoinfosec#devto#dev#cloud#infrastructure

View the full article

Create a free account to read full articles inline — no redirect to the original site.

Ping64|Why PDF and Word Files Can Hide Different Kinds of Trouble Inside
🖼️
0Read More

Ping64|Why PDF and Word Files Can Hide Different Kinds of Trouble Inside

DEV Community: infosec·Cyrus·about 1 hour ago
#py5tE8n1
#devtoinfosec#devto#dev#files#file

A colleague sends you two files: a report saved as a PDF and the same report saved as a Word...

15s
One week later: 97% of tracked MCP servers trip a new transport-security check
📰
0Read More

One week later: 97% of tracked MCP servers trip a new transport-security check

DEV Community: infosec·Sarah Vogel·about 1 hour ago
#UB4PsVeX
#devtoinfosec#devto#dev#servers#week

Last week I ran a passive OAuth 2.1 audit on 277 public MCP servers. This week the scanner got four...

15s
eMudhra revokes 8 more certificate schemes due to security uncertainty
🖼️
0Read More

eMudhra revokes 8 more certificate schemes due to security uncertainty

DEV Community: infosec·Hacks.gr·about 14 hours ago
#fZfRzegp
#devtoinfosec#devto#dev#keys#certificates

eMudhra has revoked 8 intermediate CAs after an internal security lapse exposed RSA private keys in host memory during a HSM migration. The incident occurr

15s
A GitHub repo with 767 stars and no code: how I spotted a fake installer campaign
🖼️
0Read More

A GitHub repo with 767 stars and no code: how I spotted a fake installer campaign

DEV Community: infosec·youxufkhan·about 14 hours ago
#A4mZOLOx
#devtoinfosec#devto#dev#repo#github

A fake GitHub installer repo called actual-multi-display-configurator looked wrong to me, so I...

15s
Stack Canaries on x64 Windows: Leaking and Patching the Birdy
📰
0Read More

Stack Canaries on x64 Windows: Leaking and Patching the Birdy

DEV Community: infosec·Mirrai·about 14 hours ago
#4ubhNEq6
#devtoinfosec#devto#dev#include#canary

Hello everyone. Mirrai here. If you read my last post on Return-Oriented Programming (ROP), you...

15s