Log4j BlindSpots

Log4j BlindSpots

Apache Java logging library log4j‘s popularity and its ability to hide in code,landmines hiding in infrastructure due to log4j’s Log4Shell security vulnerabilities. The good news is there are scanning tools that…
SSD Over Provisioning Abused to Bypass Security

SSD Over Provisioning Abused to Bypass Security

Korean researchers discovered a vulnerability in SSD that enables malware to infect an SSD's empty over-provisioning partition directly. This enables the malware to be practically impervious to security defenses. Over-provisioning…