Russian weapons plant hit by drones in Tambov Oblast, media reports attacks across country ⌘ Read more
JMP: Mitigating MITMs in XMPP
In October 2023, Jabber.ru, “the largest Russian XMPP messaging service”, discovered that both Hetzner and Linode had been targeting them with Machine-In-The-Middle (MITM) attacks for up to 6 months. MITM attacks are when an unauthorised third party intercepts traffic intended for someone else. At the point of interception, the attacker can inspect and even modify that traffic. TLS was created to mitigate this; all communication between the two parties is encrypted, so the third party sees … ⌘ Read more
JMP: Mitigating MITMs in XMPP
In October 2023, Jabber.ru, “the largest Russian XMPP messaging service”, discovered that both Hetzner and Linode had been targeting them with Machine-In-The-Middle (MITM) attacks for up to 6 months. MITM attacks are when an unauthorised third party intercepts traffic intended for someone else. At the point of interception, the attacker can inspect and even modify that traffic. TLS was created to mitigate this; all communication between the two parties is encrypted, so the third party sees … ⌘ Read more
DOM XSS Exploit: Using postMessage and JSON.parse in iframe Attacks
[Write-up] DOM XSS Using Web Messages and JSON.parse.
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/dom-xss-exploit-using … ⌘ Read more
Donald Trump spoke to Vladimir Putin again after the huge attack by the Ukrainians: “He said he would have to respond” ⌘ Read more
Serving as Putin’s Spokesperson, Trump Claims Russia is Planning to Retaliate Against Ukraine’s Surprise Attack ⌘ Read more
Satellite imagery shows Ukraine attack destroyed and damaged Russian bombers ⌘ Read more
Putin Ally Says Ukraine Operation ‘Grounds for Nuclear Attack’ ⌘ Read more
DNS rebinding attacks explained: The lookup is coming from inside the house!
DNS rebinding attack without CORS against local network web applications. Explore the topic further and see how it can be used to exploit vulnerabilities in the real-world.
The post [DNS rebinding attacks explained: The lookup is coming from inside the house!](https://github.blog/security/application-security/dns-rebinding-attacks-explained-the-lookup-is-coming-from- … ⌘ Read more
Tech Journalist Engages in Lies & Doublespeak to Defame Lunduke
As part of a GNOME puff piece, a Tech Journalist for a Free and Open Source publication went on an unhinged attack on all things “Lunduke”. ⌘ Read more
Ukraine’s drone attack on Russian warplanes was a serious blow to the Kremlin’s strategic arsenal ⌘ Read more
Wild videos capture fiery scenes from a massive Ukrainian drone attack on Russian bombers shielded by tires ⌘ Read more
‘Now The War Has Reached Us Too,’ Russians Far From Ukraine Say After Drone Attacks ⌘ Read more
Ukraine’s drone attack the latest in a series of daring David versus Goliath hits against Russian targets ⌘ Read more
Trump was not informed of Ukraine attack on Russia ⌘ Read more
Ukraine did not inform US of large-scale attack on Russian airfields in advance, says Axios ⌘ Read more
Molotov Cocktails thrown at peaceful vigil for the Israeli hostages in Boulder, multiple injured. FBI calls it a targeted terrorist attack ⌘ Read more
Trump was not informed of Ukraine attack on Russia ⌘ Read more
“Russia’s Pearl Harbor”—Ukraine surprise drone attack hits nuclear bombers ⌘ Read more
Ukraine launches major drone attack on Russian bombers, security official says | Ukraine ⌘ Read more
The Hidden Admin Backdoor in Reddit Ads
An Invisibility Cloak for Attackers: How One Admin Created a Stealth Account That Even the Owner Couldn’t See or Remove
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/the-hidden-admin-backdoor-in-reddit-ads … ⌘ Read more
Ukraine reportedly strikes down over 40 Russian strategic bombers in mass drone attack ⌘ Read more
‘Russian bombers are burning en masse’ — Ukraine’s SBU drones hit ‘more than 40’ aircraft in mass attack, source claims ⌘ Read more
Half Spectre, Full Exploit: Hardening Rowhammer Attacks with Half-Spectre Gadgets
Comments ⌘ Read more
Russia Accused of Staging Attack on Putin’s Helicopter ⌘ Read more
Pakistani terrorist behind deadly Pahalgam attack is former Para commando, probe finds ⌘ Read more
Kremlin staged drone attack on Putin’s helicopter ⌘ Read more
Ukrainian forces repel over 170 Russian attacks, fiercest fighting on Pokrovsk front – Ukraine’s General Staff ⌘ Read more
Passkeys: The Waterproof Defense Against Phishing Attacks
The Passkeys — a next-generation authentication technology poised to be a game-changer, offering what many describe as a truly waterproof…
[Continue reading on InfoSec Write-ups … ⌘ Read more
Walkthrough - Host & Network Penetration Testing: System-Host Based Attacks CTF 2 ⌘ Read more
What do your cats do that makes you laugh out loud? Mine hides behind a see through curtain eying my toes to attack ⌘ Read more
After 3 days of consecutive attacks on Ukraine, Russia calls UN meeting over alleged European ‘threats to peace’ ⌘ Read more
Hundreds of drones attack Russia with impacts, disruption reported in Moscow ⌘ Read more
Demystifying Cookies : The Complete Guide for Bug Bounty Hunters — Part 1
Everything you need to know about cookies to expand your attack surface and find real bugs.
[Continue reading on InfoSec Write-ups »](h … ⌘ Read more
Russia can attack Europe 2-4 years after war’s end, faster with lifted sanctions, Ukrainian intel chief warns ⌘ Read more
Russia says Trump’s attack on Putin due to “emotional overstrain” ⌘ Read more
Trump calls Putin ‘absolutely crazy’ after largest Russian attack on Ukraine - BBC News ⌘ Read more
Russia launches war’s largest air attack on Ukraine, kills at least 12 people ⌘ Read more
Trump calls Putin ‘crazy’ after largest Russian attack on Ukraine ⌘ Read more
Zelensky says ‘US silence’ over Russian attacks ‘encourages Putin’ ⌘ Read more
German Foreign Minister Johann Wadephul called for additional EU sanctions against Russia on May 25 following Russia’s large-scale overnight attack on Ukraine that killed 12 and injured 79. ⌘ Read more
Ukraine’s Zelenskyy denounces U.S. silence after massive Russian drone-and-missile attacks ⌘ Read more
Russia launches mass attack on Kyiv, Ukrainian cities for second night in row ⌘ Read more
Russia launches major aerial attack on Ukraine capital ⌘ Read more
Ukraine is using helium-filled balloons to extend the range of its attack drones ⌘ Read more
Kyiv comes under large-scale Russian drone and missile attack with explosions heard throughout city ⌘ Read more
Is GNOME Conducting False Flag Attacks to Smear Lunduke?
Very bizarre things are happening within GNOME. ⌘ Read more
$750 Bounty: for HTTP Request Smuggling on Data.gov
How a cleverly crafted desync attack revealed a hidden path to client-side compromise, JS injection and potential cookie theft
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/ … ⌘ Read more