Xspear is a very powerful XSS scanning and parameter analysis tool on ruby gems, capable of both static and dynamic XSS vulnerability analysis. In this article and video, I will show you how to install and use Xspear. This awesome tool … Continue reading

ThiefQuest or EvilQuest can grab passwords and credit card numbers.

A senior NSA official who briefed reporters Wednesday said the increase in remote work had attracted the attention of potentially malicious cyber actors.

We take a look back at some of the latest offensive security tools that were launched over the past three months

A newly discovered LOLBin offers an alternative to certutil for helping adversaries download files from a remote server. Meet desktopimgdownldr.exe.

Because remote workers’ devices are all connected to a home network, they don’t even need to be attacked directly. Instead, attackers have multiple avenues of attack that can be exploited.

The Air Force wants to do so many bug bounties that hackers can "make a living" off it. Eventually, hackers will be a brought into the design process.

Twitter has disclosed a 'Data Security Incident' that caused the billing information for Twitter advertisers to be stored in the browser's cache. This bug would have allowed other users on the computer to see this data.

The conglomerate said its machine had reached a Quantum Volume of 64, twice as powerful as IBM's machine.

Two new reports show a dramatic increase in cyber attacks that target open RDP ports as more people work remotely.