Wolf's Lair

  When we talk about building a high performance teams, it will always be revolving around these five key characteristics. Trust, Clear Comm...

Being a Certified Information Systems Security Professional (CISSP) and Certified Infirmation Security Manager (CISM) for more than 10 over ...

Attack surface is about all possible security risk exposures, especially all internet-accessible external assets that adversary could discov...

Trane ComfortLink XL850 thermostats running firmware version 3.1 or lower are vulnerable to information disclosure and remote access due t...

Recently Check Point disclosed a vulnerability found in Facebook Messenger, it allows an attacker to change conversation thread in the Fac...

Attacker are able to hijack a Whatsapp account and impersonate as the legitimate user. How they do it?  There is actually a vulnerability i...

Check Point disclosed today two vulnerabilities (CVE-2016-3117, CVE-2016-2035) which can be used to elevate privileges on LG mobile device...

As everybody was focusing on the Sony hacking incident, there was a vulnerability that is affecting over 12 million Internet routers loca...

Information leakage and improper error handling used to be in the OWASP Top 10 2004 and 2007. But they have rename to " Security Miscon...

Everybody is announcing that IPv4 addresses are running out. Countries and major IT companies (such as Google) are encouraging others to m...

While waiting for the next speaker during the HITB (Hack In The Box) Conference in Kuala Lumpur, the screen in the conference hall starts to...

With Windows autorun feature disabled by default, USB hacking method such as Pod slurping and tronjanized flash drive no longer possible? ...