Comcast Arris Touchstone Gateway Devices are vulnerable! Here’s the disclosure.

Stored Cross-Site Scripting attacks using crafted SVG images

How can malicious SVGs be used to exploit…

USCIS E-Verify (I-9) sneaky loophole to bypass work authorization checks

The extensive documentation…

Open Redirects & Security Done Right!

Everything is vulnerable, as they say. The trend seems to be getting worse with the ever…

P.F. Chang’s Security Flaw revealed, following Panera Bread’s leak

Planet Fitness: a lazy coder’s way of verifying premium access

Georgia Tech is hackable — here’s how to protect yourself.

“Rewriting the laws” of a British Overseas territory with SQL Injection

How this security vulnerability could let anyone “rewrite the laws” of HM Government of Gibraltar.

Courier tracking app gone astray

Popular UK courier delivery company Yodel, has been showing random…

☢️ Dissecting DEFENSOR: a stealthy Android banking malware

These Android apps evade detection using…