News

Latest product updates and announcements

In December 2024, a critical XML External Entity (XXE) injection vulnerability was discovered in the http4k toolkit, a popular functional...

Hey everyone, Pleased to announce our new “Weekly Incident” Game. Every Wednesday, we post about a real-world incident and the...

In July 2019, Capital One suffered a major data breach affecting over 100 million individuals, stemming from a misconfigured Web...

Congratulations to @nghuailing for being the Winner of Black Hat Asia 2025 AI WarGame! The competition was tight this time...

In March 2012, GitHub faced a significant security incident involving a mass-assignment vulnerability. This vulnerability arose due to insufficient…

In June 2016, StackOverflow faced a server outage exceeding 30 minutes caused by a security vulnerability exploited by a malicious...

We will be hosting a workshop at NDC Melbourne 2025 Check it out here Fix the Flag - Proactively Defending...

In August 2019, security experts Matt Nelson and Vasily Kravets separately disclosed a privilege escalation reported a privilege escalation…

In June 2013, Spotify encountered an unusual security vulnerability involving Unicode username normalization, which allowed attackers to hijack user…