På Svenska

Kategori

Vulnerability

13 December, 2023

The Akamai origin disclosure non-vulnerability 

This is the story of a problem Laban Sköllermark found that Akamai themselves didn’t see as a vulnerability. Learn more!

16 November, 2023

Analyzing the security of WordPress from a historical perspective

This article, written by security consultant Emil Kylander Edwartz, takes a comprehensive look at WordPress with a specific focus on its role and security within the Swedish context.

24 October, 2023

Vulnerability disclosure: Authentication bypass in Auth0 

Laban Sköllermark found this authentication bypass vulnerability which let an attacker impersonate any user in an Auth0 customer’s system.

18 October, 2023

Vulnerability disclosure: Session fixation in Auth0 

This is the story of when Laban Sköllermark discovered a session fixation vulnerability in a non-standard configuration of Auth0’s product.

12 October, 2023

Dependency Confusion

This blog article will cover how this supply chain attack works, unique Swedish statistics, and what you can do to protect yourself.

19 December, 2022

Active Directory domain (join)own accounts – security considerations

This article highlights the risks of using domain join accounts in the organisations’ Active Directory.

30 June, 2021

Potentially severe vulnerability in Windows Print Spooler

New indications point to a potential vulnerability in Microsoft’s Print Spooler service. The security flaw allows attackers to execute code over the network, making it serious.