All Articles

Patch CVE-2014-6324 To Avoid A Complete Domain Rebuild When UserInsight Detects Its Exploit

R7-2014-18: Hikvision DVR Devices - Multiple Vulnerabilities

SChannel and MS14-066, another Red Alert?

Detecting Compromised Amazon Web Services (AWS) Accounts

Christian Kirsch

R7-2014-15: GNU Wget FTP Symlink Arbitrary Filesystem Access

R7-2014-17: NAT-PMP Implementation and Configuration Vulnerabilities

Five Years of Metasploit at Rapid7

Block the POODLE's bite: How to scan for CVE-2014-3566

Protect Your Service Accounts: Detecting Service Accounts Authenticating from a New Host

Christian Kirsch

UserInsight Gets the All-Clear for ShellShock and Helps Detect Attackers on Your Network

Christian Kirsch

Bash the bash bug: Here's how to scan for CVE-2014-6271 (Shellshock)

R7-2014-12: More Amplification Vulnerabilities in NTP Allow Even More DRDoS Attacks

JSON logging in Apache and Nginx with Logentries

I don't always write my own web application fingerprints, but when I do, I use XML

AWS CloudWatch Logs - Making Innovation Easier and Cheaper

How to Get Full Visibility of CloudTrail, CloudWatch & System Logs

You have no SQL inj--... sorry, NoSQL injections in your application

Managing the Impact of the Ebay Breach on You and Your Company

R7-2014-01, R7-2014-02, R7-2014-03 Disclosures: Exposure of Critical Information Via SNMP Public Community String

Exploiting CSRF under NoScript Conditions

Security Advisory: OpenSSL Heartbleed Vulnerability (CVE-2014-0160) in Metasploit (Updated 4/11/14 2:20pm EDT)

Christian Kirsch