OPTIV/SOURCE ZERO

APIs facilitate the exchange of sensitive data, but they’re often an easy target for hackers. Learn API security best practices in this blog post.

Optiv's gTIC team provides a prioritized software and services list covering exploitation trends and vulnerabilities in Oracle WebLogic.

Optiv's Source Zero team examines how resetting computer accounts can introduce backdoors and bypasses into an Active Directory environment.

Optiv's gTIC team provides a prioritized software and services list that covers exploitation trends and vulnerabilities in popular Apache frameworks.

Dompdf versions 1.2.0 are vulnerable to RCE attacks. Web applications that use the dompdf library for pdf generation and reference the remote CSS file....

EDR hooking has become a major part of an adversary’s ability to successfully compromise an endpoint system. Hooking is a technique that alters the....

Do you think that simple tools like Gaussian blurs can safely redact sensitive content in your online images? See Optiv's solution to the....

What if queries could be written in one language and translated into over 20 others? This would reduce the learning curve to request specific....

This post highlights different tools and approaches for testing thick client applications for vulnerabilities.

This post explains how to use YARA rules differently by targeting only the files that apply to the rules being used to improve scan results.

Palo Alto Networks is expanding the options for organizations that need to secure and manage branch office connectivity and remote workers.

Netskope’s instance awareness allows customers to reduce risk by filling a void left by traditional secure web gateways and next-gen firewalls.