nOAuth Vulnerability Still Affects 9% of Microsoft Entra SaaS Apps Two Years After Discovery
New research has uncovered continued risk from a known security weakness in Microsoft’s Entra ID, potentially enabling malicious actors to […]
Citrix Releases Emergency Patches for Actively Exploited CVE-2025-6543 in NetScaler ADC
Citrix has released security updates to address a critical flaw affecting NetScaler ADC that it said has been exploited in
Citrix Releases Emergency Patches for Actively Exploited CVE-2025-6543 in NetScaler ADC Read More »
AppSec as Glue: Building Partnerships to Scale Security
Panelists: Ariel Shin, Jacob Salassi, Mukund Sarma, Tad Whitaker, Jeevan Singh, Sarah Liu (Moderator) Introduction At BSidesSF 2025, this group
AppSec as Glue: Building Partnerships to Scale Security Read More »
Building agents with OpenAI and Cloudflare’s Agents SDK
What even is an Agents SDK? The AI landscape is evolving at an incredible pace, and with it, the tools
Building agents with OpenAI and Cloudflare’s Agents SDK Read More »
Augmenting Penetration Testing Methodology with Artificial Intelligence – Part 3: Arcanum Cyber Security Bot
In my journey to explore how I can use artificial intelligence to assist in penetration testing, I experimented with a
Citrix Bleed 2 Flaw Enables Token Theft; SAP GUI Flaws Risk Sensitive Data Exposure
Cybersecurity researchers have detailed two now-patched security flaws in SAP Graphical User Interface (GUI) for Windows and Java that, if
Citrix Bleed 2 Flaw Enables Token Theft; SAP GUI Flaws Risk Sensitive Data Exposure Read More »
Many data brokers are failing to register with state consumer protection agencies
Hundreds of data brokers haven’t registered with state consumer protection agencies, according to The Electronic Frontier Foundation (EFF) and Privacy Rights
Many data brokers are failing to register with state consumer protection agencies Read More »
Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games
Thousands of personal records allegedly linked to athletes and visitors of the Saudi Games have been published online by a
Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games Read More »
Beware the Hidden Risk in Your Entra Environment
If you invite guest users into your Entra ID tenant, you may be opening yourself up to a surprising risk.
Beware the Hidden Risk in Your Entra Environment Read More »