Collaborate Disseminate
I am trying to calculate a CVSS score for a vulnerability. In my case, to exploit the vulnerability you should have network access to the server, which is sitting behind a firewall. This server is serving an application that only computers… Continue reading CVSS attack vector adjacent vs network
Let’s assume that the only attack to be feared on a computer is one via the network in which the machine is embedded.
What options does an attacker have if the machine has no open incoming ports?
(For example: NMAP cannot find a service wi… Continue reading Attack surface when no incoming port is open
Let’s assume that the only attack to be feared on a computer is one via the network in which the machine is embedded.
What options does an attacker have if the machine has no open incoming ports?
(For example: NMAP cannot find a service wi… Continue reading Attack surface when no incoming port is open
I wondered If there are some official/reliable resources to discover statistics regarding new threats and attack vectors generated by GenAI or Large Language Models (LLM) that recently opened a new era and attack surface.
For software that process untrusted data and have an option to use hardware acceleration, does enabling hardware acceleration increase the attack surface of the software? Examples of situations where typical software process untrusted data… Continue reading Does enabling hardware acceleration increase the attack surface of software?
Web and Cloud Access Protection
Host Integrity
Live Update
Exceptions
Clients Upgrade
Policy Components
Which MITRE ATT&CK tactics, techniques these terms belongs to ..
I’m evaluating moving to Passwordless and my company is using BYOD.
This will change my attack surface.
I’m trying to brainstorm all the possible attack vectors how someone could compromise a mobile and gain access to the authenticator app… Continue reading Ways how a mobile device and authenticator app could be compromised
Suppose a wifi router has strong admin password, updated firmware and no vulnurability then –
Is the router safe from malware infection from android phones connected to it?
Can malware from an infected android phone transmit infection to … Continue reading Malware infection to wifi router from android phone
If an attacker was able to compromise an Azure ADO CI/CD pipeline, what is the actual impact? For example, say an existing pipeline was using Azure CLI, an attacker could potentially query AD depending on the API key’s permission. Another … Continue reading What is the impact of compromising CI/CD pipelines in the Cloud
I have noticed that both browsers Firefox and Chromium on linux do open the file /proc/self/mem for reading. No other program on my system reads this file, as far as I can tell.
/proc/self/mem is notorious for being vector for endless priv… Continue reading what are legitimate reason for a program to need access to /proc/self/mem [migrated]