New 'Trojan Source' Method Lets Attackers Hide Vulns in Source Code

Three security vulnerabilities in Axis video products could open up the door to a bevy of different cyberattacks on businesses.

OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality.

An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature.

Jason Kent, hacker-in-residence at Cequence Security, discusses how to track user-agent connections to mobile and desktop APIs, to spot malicious activity.

We take a look at the latest additions to security researchers’ armoury

The operator behind OpenSUpdater is using a new way to sneak adware and other malware past security tools.