New Blog Post is out! binarysecurity.no/posts/2025…. In this one, our researcher Torjus Bryne Retterstøl had a quick look at Azure DevOps, and that was all it took to find 3(!) awardable bugs.
If you heard Christian August Holm Hansen's (goodreads.com/user/show/1244…) talk at @Sikkerhetsfest , or you are interested in Azure Management Security, you can check out the latest blog post over at our website, binarysecurity.no/posts/2024…
Have you ever wondered how the Azure Kubernetes Services authentication works? Our researcher Christian (goodreads.com/user/show/1244…) has investigated, and found that all was not well🤯. Both access as a guest user and cross tenant was achieved 💯. binarysecurity.no/posts/2023…
New blog post🔥!
binarysecurity.no/posts/2023…
This time our researchers @hagul2 and goodreads.com/user/show/1244… have taken a look at the old versions of the Azure Management API.
New High CVE in Splunk just dropped, and this time it was our very own @Torjusbr that reported it🔥.
advisory.splunk.com/advisori…
Binary Security retweeted
CVE-2023-32714 In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted areas of the Spl... cve.mitre.org/cgi-bin/cvenam…
Binary Security retweeted
Do you know whats in your public Docker Images? Researcher Christian August Holm Hansen has posted an interesting case study of Google's Apigee image and uncovered a whole lot of secrets lying around... binarysecurity.no/posts/2023…
Do you know whats in your public Docker Images? Researcher Christian August Holm Hansen has posted an interesting case study of Google's Apigee image and uncovered a whole lot of secrets lying around... binarysecurity.no/posts/2023…
Security Specialist Christian August Holm Hansen has written a post about a Subdomain Takeover vulnerability we found in Azure Devops. binarysecurity.no/posts/2022…
Vi har holdt kurs for ITverket. Her kan du lese hva de synes om kursdagen: blogg.itverket.no/fagdag-sik… #infosec #binarysecurity #itverket #itsikkerhet #informationsecurity #devsecops
We are ready for @TheParanoiaConf! Come hear us talk about Bug Bounties at 16.15 on the Tech track #Paranoia19 @Hacker0x01 @GoogleVRP @Bugcrowd @synack @disclose_io

