Collaborate Disseminate
Google’s Project Zero team dubs a new WPAD-related attack as an “aPAColypse Now” that allows a local attacker to compromise a targeted and fully patched Windows 10 PC. Continue reading Project Zero Chains Bugs for ‘aPAColypse Now’ Attack on Windows 10
Web proxy auto-config(PAC)files are passed the full HTTPS URL in GET requests which may expose sensitive data. Continue reading VU#877625: Proxy auto-config (PAC) files have access to full HTTPS URLs
Sniffing HTTPS URLs with malicious PAC files gets easier with a new technique that exploits flaws in the Web Proxy AutoDiscovery protocol. Continue reading WPAD Flaws Leak HTTPS URLs