Remove penetration-testing-reports-template-and-guide
article thumbnail

CVE-2024-21378 — Remote Code Execution in Microsoft Outlook 

NetSpi Technical

This blog will cover how we discovered CVE-2024-21378 and weaponized it by modifying Ruler , an Outlook penetration testing tool published by SensePost. In 2023 NetSPI discovered that Microsoft Outlook was vulnerable to authenticated remote code execution (RCE) via synced form objects.

article thumbnail

5 Application Security Standards You Should Know

Security Boulevard

A July 2021 report from F5 Labs gives insight into how malicious actors use vulnerabilities in applications as part of their attacks and the impact it has on businesses, noting: 56% of the largest incidents in the last 5 years were linked to a web application security issue. Guide for automated unit and integration tests.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CVE-2024-21378 — Remote Code Execution in Microsoft Outlook 

NetSpi Technical

This blog will cover how we discovered CVE-2024-21378 and weaponized it by modifying Ruler , an Outlook penetration testing tool published by SensePost. In 2023 NetSPI discovered that Microsoft Outlook was vulnerable to authenticated remote code execution (RCE) via synced form objects.

article thumbnail

CIS 20 Controls: Utilizing CIS 20 Critical Controls for Vulnerability Prioritization

NopSec

It provides a detailed guide for prioritization, implementation and customization of your security controls as well as sequence, test, and achieve continuous automation. With that in mind, in this blog post we’re covering 13 out of the 20 controls.

article thumbnail

Story of the year: the impact of AI on cybersecurity

SecureList

Over the past twelve months, this abbreviation has resonated across innumerable headlines, business surveys and tech reports, firmly securing a position as the Collins English Dictionary’s 2023 Word of the Year. Across the channel in the UK, this figure rises to a substantial 65%.

article thumbnail

Black Hat Asia 2022: Building the Network

Cisco Security

In part one of this issue of our Black Hat Asia NOC blog, you will find: . In 2005, I was lucky enough to become a Senior Editor at Tom’s Hardware Guide and attended Black Hat as accredited press from 2005 to 2008. From attendee to press to volunteer – coming back to Black Hat as NOC volunteer by Humphrey Cheung .