A number of applications have been identified as susceptible to brute-force attacks, and there is a possibility that many more may be at risk. UPDATED Security firm Positive Security has issued a warning regarding poor integration of the Ransack library into Ruby on Rails (RoR) applications, which could allow attackers to extract sensitive information from…

A number of applications have shown vulnerabilities to brute-force attacks, with hundreds more potentially at risk. UPDATED: Poor implementation of the Ransack library in Ruby on Rails (RoR) applications could enable attackers to extract data from backend databases, according to a warning issued by security firm Positive Security. Ransack provides developers with the ability to…

Emma Woollacott27 January 2023 at 11:50 UTC Updated: 17 February 2023 at 14:20 UTC A significant security vulnerability was identified as one of Meta’s major issues in 2022. Meta has successfully addressed a flaw in Facebook that could have enabled cybercriminals to bypass SMS-based two-factor authentication (2FA). This vulnerability, which resulted in a bounty of…

Adam Bannister27 January 2023 at 16:48 UTC Updated: 27 February 2023 at 15:33 UTC We bring you a comprehensive update on the latest AppSec vulnerabilities, innovative hacking techniques, and key developments in cybersecurity. According to a recent survey by the World Economic Forum (WEF), 93% of cybersecurity experts and 86% of business leaders anticipate that…

Emma Woollacott on 27 January 2023 at 11:50 UTC Updated: 17 February 2023 at 14:20 UTC Meta addresses a significant security vulnerability that was marked as one of its major bugs in 2022. Meta has successfully resolved a vulnerability in Facebook that could have potentially allowed attackers to bypass SMS-based two-factor authentication (2FA). This bug,…

Emma Woollacott27 January 2023 at 11:50 UTC Updated: 17 February 2023 at 14:20 UTC A critical security flaw was identified as one of Meta’s most significant vulnerabilities in 2022. Meta has addressed a vulnerability in Facebook that had the potential to allow an attacker to bypass SMS-based two-factor authentication (2FA). The issue, which resulted in…

Adam Bannister27 January 2023 at 16:48 UTC Updated: 27 February 2023 at 15:33 UTC This is your bi-weekly summary of application security vulnerabilities, emerging hacking methods, and the latest cybersecurity updates. {“According to 93% of cybersecurity professionals and 86% of business leaders surveyed, a significant catastrophic cyber incident is likely within the next two years,”…

Adam Bannister31 January 2023 at 15:13 UTC Updated: 28 February 2023 at 18:00 UTC New opportunities for hackers seeking web vulnerabilities A notable achievement in the bug bounty space includes a bypass of Facebook’s SMS-based two-factor authentication (2FA) which was identified as one of Meta’s significant vulnerabilities in 2022. Initially, the company did not fully…

The widely-used hacking tool has been relaunched with the addition of a new CORS misconfiguration detection feature, following an announcement of its end-of-life. The XSS Hunter tool has now become part of Truffle Security, which has introduced an updated version after the tool’s original creator announced its deprecation scheduled for February. XSS Hunter is recognized…

Renowned hacking resource is now equipped with a CORS misconfiguration detection feature following its end-of-life announcement. XSS Hunter has found a new home at Truffle Security, which has released an updated version of this essential tool after its original creator announced plans to phase it out in February. XSS Hunter is a widely used open-source…