Backups that Cause Problems hypn0s contributed a module that exploits Snap Creek’s Duplicator plugin for WordPress. Duplicator is a plugin that eases the backup and migration of WordPress installations. For versions 1.2.40 and below, Duplicator leaves behind a number of sensitive files,…
Amazon Web Services recently introduced a new security enhancement to its cloud storage service: Amazon S3 Block Public Access.…
In this post, we will review findings from our 2018 Q3 Threat Report, including common attack types, the Emotet malware, and protocol poisoning.…
As part of our research for the Industry Cyber-Exposure Report: Fortune 500, we attempted to quantify the public exposure of various organizations.…
It's the last Patch Tuesday of 2018! As is often the case in December, it's a relatively light one with "only" 38 CVEs. (Every other month in 2018 clocked in with at least 50 patched vulnerabilities.) This is in addition to the two…
If you are tired of all the snake memes and images we pushed out as we stood up support for python external modules over the last year or so, I have terrific news for you!…
While modern web application technology has made apps more useful, it's also made them harder to secure.…
In this post, I will detail my time at AWS re:Invent and provide observations about how security plays a role in our cloud journey.…
After three days of fierce competition, we have the winners of this year's Metasploit community CTF. We've included some high-level stats from the game below; check out the scoreboard here. If you played the CTF this weekend and want to let the Metasploit team know…
Why can't I hold all these Pull Requests? It has been a busy month here in Metasploit-land, with the holidays, the holiday community contributions, and our community CTF. It doesn't help that the last few months have seen our open pull request count keep climbing…
In our recent webcast series, we explain how companies can accelerate across their entire threat detection and response lifecycle by leveraging automation.…
When vulnerability management responsibilities are distributed across teams, it results in silos, differing terminology, and a lack of common visibility.…
