Security Practitioner

This series centers around how to be an ethical hacker and the steps/processes to get there. In part 2, topics…

Join us in side-saddling on an attacker’s journey with Noah King to become an ethical hacker!

Log4Shell is a "once-in-a-decade" type of vulnerability that will linger in environments for years to come. For a vulnerability with…

Understanding Log4Shell: the Apache log4j2 Remote Code Execution Vulnerability (CVE-2021-44228)

This Red vs. Blue approach to cybersecurity is unsustainable, and often does more harm than good. The goal should be…

During our assessment of the ResourceSpace code base, we found three new vulnerabilities that could be exploited by an unauthenticated…

We wanted to do something a little bit different with this post. Our vulnerability disclosures, exploit proof-of-concepts, and attack analysis…

While so many are focused on vulnerabilities and malware on endpoints, understanding the attack paths an attacker would exploit to…

Overview A common attack path that Horizon3 has identified across many of its customers is abusing access to the VMware…

Overview On September 14, multiple vulnerabilities were discovered by researchers at Wiz.io. The most critical of them being CVE-2021-38647, now dubbed…