Blog
Updates, blog posts, analysis, and technical deep-dives
Blog
Updates, blog posts, analysis, and technical deep-dives
How NoScope uncovered an authenticated remote code execution flaw in Alf.io's extension system. A single exposed Java binding turned that into full remote code execution on the underlying server.
Gitea private container images were accessible to anyone on the internet, no credentials required, across healthcare, aerospace, and critical infrastructure worldwide.
AI tools ship faster than your security process can keep up. Here's what's falling through the cracks.
