Type to search across all pages
When critical vulnerabilities emerge, we break them down with technical depth — what happened, how it was exploited, and what you should do about it.
3 articles
Security guidance on the critical Apache Log4j JNDI injection vulnerability (CVE-2021-44228), covering how the exploit works, affected versions, and steps to detect and remediate it.
A technical overview of Zerologon (CVE-2020-1472), the CVSS 10 Windows Netlogon flaw that gives unauthenticated attackers domain admin — with detection, exploitation, patching, and monitoring guidance.
A technical analysis of the LastPass browser extension credential leak discovered by Google Project Zero: how the do_popupregister() bypass works and what it exposes.
Want to know how we test for these issues in your product?
Get a Security Assessment