Our team describes how single-factor authentication attack surfaces can be exposed in the AirWatch MDM suite and what steps to take to mitigate risks.

A security vulnerability has been found in the Black Duck Hub REST API Python project (“blackduck” in the PyPI repository). Read more.

Application threat modeling decomposes application architecture into security-relevant components to reveal threats and potential risks.

Hackers can use the username structure and deployed technologies in an online document’s metadata to successfully breach the perimeter.

Information security strategies often overlook the threats posed by weaknesses in its physical security posture.

Moving functionality from Java to native implementations in Android increases obscurity but not security.

Two experienced red teamers describe successful engagements and how to counter attack chains.

A quick walkthrough of the general steps taken to solve an iOS CTF.