The Effectiveness of Publicly Shaming Bad SecurityTroy Hunt·Sep 11, 08:51 UTC · Sep 11, 2018Vulnerability30
I'm Sorry You Feel This Way NatWest, but HTTPS on Your Landing Page Is ImportantTroy Hunt·Dec 14, 21:17 UTC · Dec 14, 2017Vulnerability30
The Internet of Things is a Complete Mess (and how to Fix it)Troy Hunt·Jul 13, 09:59 UTC · Jul 13, 2021Vulnerability30
New Pluralsight Course: Modern Browser Security ReportsTroy Hunt·Aug 8, 07:22 UTC · Aug 8, 2018Vulnerability30
Here's Why Your Static Website Needs HTTPSTroy Hunt·Jul 13, 07:22 UTC · Jul 13, 2018VulnerabilityCVE-2018-1252960
Is Enumerating Resources on a Website "Hacking"?Troy Hunt·Apr 19, 23:04 UTC · Apr 19, 2018Vulnerability30
What Would It Look Like If We Put Warnings on IoT Devices Like We Do Cigarette Packets?Troy Hunt·Oct 14, 09:23 UTC · Oct 14, 2017Vulnerability42
Password managers don't have to be perfect, they just have to be better than not having oneTroy Hunt·Apr 4, 11:15 UTC · Apr 4, 2017Vulnerability42
Report URI Just Won the Best Emerging Technology Award!Troy Hunt·Jun 9, 05:58 UTC · Jun 9, 2018Vulnerability42
New Pluralsight Course: Bug Bounties for CompaniesTroy Hunt·May 24, 08:04 UTC · May 24, 2018Vulnerability30
How Chrome's buggy content security policy implementation cost me moneyTroy Hunt·Dec 7, 20:32 UTC · Dec 7, 2016VulnerabilityCVE-2016-522535
The Capgemini leak of Michael Page data via publicly facing database backupTroy Hunt·Nov 11, 21:42 UTC · Nov 11, 2016Vulnerability30
Introducing you to browser security headers on PluralsightTroy Hunt·Aug 31, 23:00 UTC · Aug 31, 2015Vulnerability30
Do you trust your hosting provider and have they really installed the padding oracle patch?Troy Hunt·Sep 28, 23:00 UTC · Sep 28, 2010Vulnerability55
Add-ons, Extensions and CSP Violations: Playing Nice with Content Security PoliciesTroy Hunt·Nov 14, 12:03 UTC · Nov 14, 2018Vulnerability30
Kids Pass Just Reminded Us How Hard Responsible Disclosure IsTroy Hunt·Jul 31, 07:47 UTC · Jul 31, 2017Vulnerability30
Soft-Launching and Open Sourcing the Have I Been Pwned RebrandTroy Hunt·Mar 11, 19:56 UTC · Mar 11, 2025Vulnerability130
Thanks FedEx, This is Why we Keep Getting PhishedTroy Hunt·Feb 24, 00:41 UTC · Feb 24, 2024Vulnerability30
Cyber Safety Review Board needs stronger authorities, more independence, experts sayCyberScoop·Jan 17, 21:25 UTC · Jan 17, 2024Vulnerability55
Week in review: Exploited Citrix Bleed vulnerability, Atlassian patches critical Confluence bugHelp Net Security·Nov 5, 00:00 UTC · Nov 5, 2023Vulnerability in the wildCVE-2023-4966CVE-2023-22518CVE-2023-46747+2 CVEs60
Over 780,000 email accounts compromised by Emotet have been securedThe Record·Dec 13, 00:00 UTC · Dec 13, 2022Vulnerability30
China could be reviewing security bugs before tech companies issue patches, DHS official saysCyberScoop·Aug 11, 00:07 UTC · Aug 11, 2022Vulnerability in the wild60
ALERT: Critical RCE Bug in VMware vCenter Server Under Active AttackThe Hacker News·Jun 7, 05:04 UTC · Jun 7, 2021Vulnerability in the wildCVE-2021-21985CVE-2021-2197260
PCI SSC releases PCI Secure Software Lifecycle (SLC) Standard 1.1Help Net Security·Feb 23, 00:00 UTC · Feb 23, 2021Vulnerability42
2020 (ISC)² Global Achievement Awards: Celebrating achievements in cybersecurityHelp Net Security·Jan 11, 11:30 UTC · Jan 11, 2021Vulnerability30
Critical Grindr Account Takeover Bug Rings Alarm BellsInfosecurity Magazine·Oct 5, 10:20 UTC · Oct 5, 2020Vulnerability55
PCI SSC updates standard for payment devices to protect cardholder dataHelp Net Security·Jun 18, 00:00 UTC · Jun 18, 2020Vulnerability30
Online skimming: An emerging threat that requires urgent awareness and attentionHelp Net Security·May 28, 10:00 UTC · May 28, 2020Vulnerability30
Consumer routers targeted by DNS hijacking attackersHelp Net Security·May 28, 09:48 UTC · May 28, 2020VulnerabilityCVE-2019-1653CVE-2019-1652CVE-2019-182835
Friday Squid Blogging: Giant Squid Caught Off the Coast of IrelandSchneier on Security·Jan 29, 08:02 UTC · Jan 29, 2020Vulnerability30
Dozens of Linksys router models leak data useful for hackersSecurity Affairs·May 18, 14:43 UTC · May 18, 2019Vulnerability42