AI is becoming a hidden entry point in supply chain attacks. Here’s why it matters and what organizations must do to stay protected. The post When AI Becomes the Weak Link: Rethinking Supply Chain Security appeared first on OffSec. This…
Tag: OffSec
CVE-2025-32433: Vulnerability in Erlang/OTP SSH Implementation
Read about a critical vulnerability found in the SSH implementation of Erlang/OTP arising from improper handling of SSH protocol messages. The post CVE-2025-32433: Vulnerability in Erlang/OTP SSH Implementation appeared first on OffSec. This article has been indexed from OffSec Read…
CVE-2025-32433: Vulnerability in Erlang/OTP SSH Implementation
Read about a critical vulnerability found in the SSH implementation of Erlang/OTP arising from improper handling of SSH protocol messages. The post CVE-2025-32433: Vulnerability in Erlang/OTP SSH Implementation appeared first on OffSec. This article has been indexed from OffSec Read…
CVE-2024-13059: Exploiting Path Traversal in AnythingLLM for Remote Code Execution
Discover CVE-2024-13059, a critical vulnerability flat that affects AnythingLLM’s handling of ASCII filenames in the multer library. The post CVE-2024-13059: Exploiting Path Traversal in AnythingLLM for Remote Code Execution appeared first on OffSec. This article has been indexed from OffSec…
How OSCP Holders Can Lead Their Teams to Greater Cybersecurity Resilience
Champion OSCP training in your organization to build a unified, resilient security team. The post How OSCP Holders Can Lead Their Teams to Greater Cybersecurity Resilience appeared first on OffSec. This article has been indexed from OffSec Read the original…
CVE-2024-57727: Path Traversal Vulnerability in SimpleHelp Web Application
CVE-2024-57727 lets attackers read sensitive files via path traversal in SimpleHelp. Learn more about how attackers exploit this flaw. The post CVE-2024-57727: Path Traversal Vulnerability in SimpleHelp Web Application appeared first on OffSec. This article has been indexed from OffSec…
AI Penetration Testing: How to Secure LLM Systems
Explore how AI penetration testing enhances LLM security, addressing unique vulnerabilities and improving cyber defenses. The post AI Penetration Testing: How to Secure LLM Systems appeared first on OffSec. This article has been indexed from OffSec Read the original article:…
CVE-2024-9956: Critical WebAuthentication Vulnerability in Google Chrome on Android
Discover CVE-2024-9956, a critical Chrome flaw on Android allowing Bluetooth-based PassKey theft, and learn key mitigation strategies. The post CVE-2024-9956: Critical WebAuthentication Vulnerability in Google Chrome on Android appeared first on OffSec. This article has been indexed from OffSec Read…
Learn Secure Java Development with OffSec’s New Course
Master secure Java coding with OffSec’s SJD-100 course. Enhance app security and gain hands-on experience to secure your coding practices. The post Learn Secure Java Development with OffSec’s New Course appeared first on OffSec. This article has been indexed from…
Creating an Inclusive Cybersecurity Culture
Transform your cybersecurity culture by strategically improving women’s representation and cultivating meaningful inclusion. The post Creating an Inclusive Cybersecurity Culture appeared first on OffSec. This article has been indexed from OffSec Read the original article: Creating an Inclusive Cybersecurity Culture
PostgreSQL Exploit
Sharpen your hacking skills! Learn from our walkthrough of a PostgreSQL exploit in the Nibbles machine on PG Practice. The post PostgreSQL Exploit appeared first on OffSec. This article has been indexed from OffSec Read the original article: PostgreSQL Exploit
Empowering Women in Cybersecurity: How Education and Training Are Key
While women represent only 24% of the cybersecurity workforce, hands-on training is changing the game. The post Empowering Women in Cybersecurity: How Education and Training Are Key appeared first on OffSec. This article has been indexed from OffSec Read the…
Women in Cybersecurity Leadership: Inspiring Role Models at the Top
Throughout history, women have been at the forefront of solving problems and driving innovation, especially in STEM. From Ada Lovelace creating the first computer algorithm to Katherine Goble Johnson who calculated and analyzed the flight paths of spacecraft, women have…
Addressing the Unique Cybersecurity Challenges Faced by Government Agencies
Explore the unique cybersecurity challenges government agencies face and how tailored strategies can protect national security and public trust. The post Addressing the Unique Cybersecurity Challenges Faced by Government Agencies appeared first on OffSec. This article has been indexed from…
Building a Cyber-Resilient Public Sector Through Hands-on Security Training
Learn how hands-on cybersecurity training equips public sector teams to protect critical infrastructure, featuring real-world cases from Atlanta, Oldsmar, and Texas that demonstrate why practical experience trumps theoretical knowledge alone. Discover why agencies are moving beyond certifications to combat-ready security…
CVE-2025-21298: A Critical Windows OLE Zero-Click Vulnerability
Explore CVE-2025-21298, a critical Windows OLE zero-click flaw enabling RCE via email. Learn its risks, impact, and how to defend against attacks. The post CVE-2025-21298: A Critical Windows OLE Zero-Click Vulnerability appeared first on OffSec. This article has been indexed…
A Student Mentor’s TH-200 and OSTH Learning Experience
Explore the TH-200 course & OSTH exam with an OffSec Mentor’s insights on mastering threat hunting skills. The post A Student Mentor’s TH-200 and OSTH Learning Experience appeared first on OffSec. This article has been indexed from OffSec Read the…
My Journey with IR-200: Becoming an OffSec Certified Incident Responder (OSIR)
Embark on a journey to become an OffSec Certified Incident Responder (OSIR) through the IR-200 course, as described by a Student Mentor who tested its effectiveness. The post My Journey with IR-200: Becoming an OffSec Certified Incident Responder (OSIR) appeared…
OffSec Yearly Recap 2024
Join us as we explore all our successes in 2024, including exciting new content, courses, and so much more! The post OffSec Yearly Recap 2024 appeared first on OffSec. This article has been indexed from OffSec Read the original article:…
Building a Future-Ready Cybersecurity Workforce: The OffSec Approach to Talent Development
Learn all about our recent webinar, In the webinar “Building a Future-Ready Cyber Workforce: The OffSec Approach to Talent Development”. The post Building a Future-Ready Cybersecurity Workforce: The OffSec Approach to Talent Development appeared first on OffSec. This article has…