OPTIV/SOURCE ZERO

Optiv's gTIC team provides a prioritized software and services list that covers exploitation trends and vulnerabilities in popular Apache frameworks.

Dompdf versions 1.2.0 are vulnerable to RCE attacks. Web applications that use the dompdf library for pdf generation and reference the remote CSS file....

EDR hooking has become a major part of an adversary’s ability to successfully compromise an endpoint system. Hooking is a technique that alters the....

Do you think that simple tools like Gaussian blurs can safely redact sensitive content in your online images? See Optiv's solution to the....

What if queries could be written in one language and translated into over 20 others? This would reduce the learning curve to request specific....

This post highlights different tools and approaches for testing thick client applications for vulnerabilities.

This post explains how to use YARA rules differently by targeting only the files that apply to the rules being used to improve scan results.

Palo Alto Networks is expanding the options for organizations that need to secure and manage branch office connectivity and remote workers.

Netskope’s instance awareness allows customers to reduce risk by filling a void left by traditional secure web gateways and next-gen firewalls.

This advisory from Optiv’s gTIC covers recent incidents related to Russian military operations in Ukraine and provides cybersecurity recommendations.

This advisory offers recommendations for organizations potentially affected by Russian state-sponsored activity in Ukraine.

We identified Ivy framework fileless attack techniques that execute undetected in Microsoft Office. Here's how with suggested security augmentations.