PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Digital Exposure Analysis of the 500 Largest Portuguese Companies

ethiack.com | research | #attack-surface | #research | #easm | #portugal | #exposure-analysis
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Report on the external attack surface of Portugal's 500 largest firms: 10,880 exposed assets across 575 domains, 11.21% with invalid SSL certs, 21.77% with exposed configs, 37% unknown.
Published
Collected

Related coverage

blog · netspi.com
NetSPI’s Insights from Forrester’s Attack Surface Management Solutions Landscape, Q2 2024
Forrester's Q2 2024 ASM Solutions Landscape names NetSPI among notable vendors. The article covers the state of the ASM market and how combining EASM and CAASM delivers complete asset visibility.
blog · netspi.com
Clarifying CAASM vs EASM and Related Security Solutions
A guide untangling cybersecurity acronyms: how CAASM differs from CMDB, CSPM, CTEM, DRPS, EASM, and vulnerability scanners, and where it fits in a proactive security strategy.
research · hackerone.com
A Safer Future for Security Research: Landmark Moves in Portugal and the UK
Portugal's new Article 7 safe harbor and the UK's proposed Computer Misuse Act defence mark major progress in protecting good-faith security research and coordinated vulnerability disclosure.
research · yokai.hakaisecurity.io
Malicious MSI – Tornando o MSI em uma arma
Abstract Este artigo examina o formato Windows Installer (MSI) sob a perspectiva da segurança da informação, explorando como sua estrutura e funcionalidades podem ser exploradas para fins maliciosos. Através da análise detalhada de amostras recentes de malware, incluindo LegionLoader, RemcosRAT, SilverFox e MetaStealer, o estudo demonstra as diversas técnicas utilizadas por atores maliciosos para weaponizar […]
research · yokai.hakaisecurity.io
O lado obscuro do JWT: Explorando vulnerabilidades em Tokens.
Muitas aplicações modernas utilizam JSON Web Tokens (JWTs) para autenticar e autorizar usuários em suas funcionalidades. Neste artigo, exploraremos vulnerabilidades em JWTs que podem comprometer o sistema de assinatura, permitindo que um atacante autentique-se e eleve seus privilégios em uma aplicação vulnerável. Conhecendo o JSON Web Token Antes de explorar uma vulnerabilidade em um artefato, […]
research · yokai.hakaisecurity.io
The Dark Side of JWT: Exploiting Token Vulnerabilities
Many modern applications use JSON Web Tokens (JWTs) to authenticate and authorize users in their functionalities. In this article, we will explore vulnerabilities in JWTs that can compromise the signature system, allowing an attacker to authenticate and escalate their privileges in a vulnerable application. Understanding the JSON Web Token Before exploiting a vulnerability in an […]
Back