July 3, 2024

Assessing and Mitigating DDoS Attack Risks for Enterprises

This guide explores how to understand and quantify the risk of DDoS attacks, prioritize assets based on business impact, and implement robust defense controls. It also covers assessing third-party risks and ensuring comprehensive observability. Read More ➟

April 17, 2024

AWS Updates their DDoS Partner Testing Policy

Detailed policy, available which explains about DDoS Simulation testing, Terms & Conditions and also the AWS DDoS Testing Partners Read More ➟

October 13, 2023

Secure Your HTTP/2 Infrastructure Against Rapid Reset Attacks with RedWolf Security

In the ever-evolving landscape of cybersecurity, new vulnerabilities and attack vectors are discovered almost daily. One such recent discovery... Read More ➟

June 2, 2017

Patches Available for Linux Sudo Vulnerability

A high-severity vulnerability in sudo has been patched in a number of Linux distributions; the flaw allows local attackers to elevate privileges to root. Read More ➟

Hack Department of Homeland Security Act Would Bring Bug Bounty Program to DHS

Senators introduced a bill last week to establish a bug bounty pilot program within the Department of Homeland Security. Read More ➟

WannaCry Development Errors Enable File Recovery

Researchers at Kaspersky Lab have found a number of programming errors in the WannaCry ransomware code that put file recovery within reach of sysadmins. Read More ➟

OneLogin Breach Compromised Customer Data, Ability to Decrypt Encrypted Data

A breach at OneLogin appears to have compromised customer data, including the ability to decrypt encrypted data. Read More ➟

Crowdfunding Effort to Buy ShadowBrokers Exploits Shuts Down

A crowdfunding effort to buy a subscription to the ShadowBrokers’ Monthly Dump Service of stolen exploits and data was shut down citing legal and ethical concerns. Read More ➟

FreeRADIUS Update Resolves Authentication Bypass

Developers behind FreeRADIUS, an open source implementation of the networking protocol RADIUS, are encouraging users to update to address an authentication bypass found in the server. Read More ➟