What if every pull request got a security review as thorough as your best engineer, at any scale?
At Deriv, our Security Tech Lead, Vishal (@vis_hacker), built exactly that. Managing 700+ repositories and hundreds of pull requests every week, manual security reviews simply couldn't keep up.
Watch below to see his solution
@samm0uda Really impressive bug chaining , learned something new about how seemingly low-impact issues can be combined into full ATOs. Well deserved bounties 🔥
@Nithin0dha WhatsApp as DR is cool, but… maybe consider an actual secondary WAF/CDN next time? Trading platforms deserve more than a chat-based backup 😅
I've pushed a few updates to https://t.co/9CqANckHK0. Vercel and Netlify are no longer flagged as vuln. Offsite redirs not followed. Custom header support in case you need auth or custom UA. Redir test cases are more accurate now (both base path and redir tested).
I would strongly recommend not signing any crypto transactions right now.
There is a huge supply chain attack on popular NPM packages that may have compromised various crypto websites (frontend, not the actual contracts).
It changes the destination address of transactions and approvals to be the attacker's addresses rather than the address you're actually trying to interact with.
Last year, I committed to uncovering critical vulnerabilities in Maven repositories. Now it’s time to share the findings: RCE in Sonatype Nexus, Cache Poisoning in JFrog Artifactory, and more! Read it all below 🧵
Mario Draghi’s critique is accurate.
A thorough review of EU regulations to eliminate unnecessary rules and streamline activity in Europe would revitalize growth and strengthen competitiveness.
Things should be default legal, rather than default illegal.
Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! https://t.co/7ygwWXY0pd
Highlights include:
⚡ Escaping from DocumentRoot to System Root
⚡ Bypassing built-in ACL/Auth with just a '?'
⚡ Turning XSS into RCE with legacy code from 1996
When researching request smuggling, I decided that TE.0 would never be exploitable because it requires the back-end server to accept a HTTP request starting with a number + newline.... and no server would be that crazy 🤦♂️
Awesome work! Never under-estimate the crazy.
Our security researcher @hash_kitten found one of the most critical exploit chains in the history of @assetnote. Affecting 40k+ instances of ServiceNow, we could execute arbitrary code, access all data without authentication. You can read our blog here: https://t.co/2yTgn1NzhY