A security researcher decompiled the White House’s new official app and found some alarming stuff buried in the code, including a hidden GPS tracking pipeline, JavaScript loaded from a random GitHub ...

The Solution: We saw that while powerful security testing tools exist (like Nmap, CVE, SSL Labs and Nuclei), they are inaccessible to many. Our goal was to democratize web security by building a ...

Fortinet has revealed that threat actors have found a way to maintain read-only access to vulnerable FortiGate devices even after the initial access vector used to breach the devices was patched. "A ...

Attackers are exploiting a new authentication bypass zero-day vulnerability in FortiOS and FortiProxy to hijack Fortinet firewalls and breach enterprise networks. This security flaw (tracked as ...

CVE-2024-55591 is an authentication bypass vulnerability in FortiOS and FortiProxy. An unauthenticated, remote attacker could exploit this vulnerability by sending a specially crafted request to a ...

Abstract: In an ever-evolving digital environment, prioritizing user security and authentication processes is critical. It presents a comprehensive approach to creating a secure login page using ...

While doing the final integration tests for v3.11 release, I found that there is a long-lived bug on the ssl_check request handling. As you can see below, an ssl_check request does not have ...