PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What’s New in Ethiack: Main Product Updates on V2.27, V2.28 and V2.29

ethiack.com | vulnerability | #product-update | #release-notes | #jira | #sso | #ethiack | #security-reporting
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Release notes for Ethiack V2.27–V2.29: per-user access control for hacking events, monthly email security reports, full finding bodies in Jira tickets, and SSO auto-signup.
Published
Collected

Related coverage

blog · metabase.com
We simplified embedding
Metabase 58 simplifies embedding into two paths — Modular Embedding (Guest or SSO) and Full-app Embedding (SSO only); existing embeds keep working, and a setup wizard generates the code snippet.
blog · hunt.io
Announcing Hunt 2.3: Improved Threat Hunting Experience & SSO Availability
Hunt 2.3 re-launches Analyst Notes in AttackCapture, adds inspirational SQL queries and a time cheat sheet to HuntSQL, bulk domain enrichment, and SAML 2.0 enterprise SSO.
vulnerability · ethiack.com
How Critical Software Validated Exploitability for Zero-Tolerance Industries
Ethiack case study: Critical Software, building for zero-tolerance sectors (space, defence, medical), uses Hackian's continuous testing with proof-of-exploit validation under 1% false positives.
vulnerability · ethiack.com
We’re now ISO 27001 certified! Here’s what this means for you
Ethiack announces ISO 27001 certification for its information security management system, covering financial data, IP and customer information, and simplifying compliance for partners.
Critical · vulnerability · bishopfox.com
A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit
The flaw can yield unauthenticated administrator takeover across four AD360-integrated ManageEngine products. Exploitation is targeted and timing-dependent, but the impact is critical.
vulnerability · projectblack.io
A Watchguard Vulnerability That's a "Feature" - GuardLapse
GuardLapse: WatchGuard's clientless AD SSO sends its AD account's authentication to any browsing device; a rogue SMB server can capture or relay the hash, reaching Domain Admin in one engagement.
Back