Introduction On Monday 7th March, a vulnerability in the Linux Kernel was disclosed publicly which could allow an attacker to escalate privileges. The vulnerability discovered by Max Kellermann dubbed “ Dirty Pipe “ affects the Linux Kernel 5.8 and later versions (including Android). The Basics As Max mentioned in his write-up, the flaw…

At RedHunt Labs, (under Project Resonance), we frequently conduct internet-wide research in different shapes and formats to understand the state of security across the internet. In this iteration, we conducted a study about the current state of DNS configurations (SPF, DKIM and DMARC) from a security perspective. We scanned more…

Apache Log4j is an open-source logging framework that allows software developers to log various data within their applications. This data can also include user input. It is used ubiquitously in Java applications, especially enterprise software. Update: 2.15.0 fix bypass It was found that the fix to address CVE-2021-44228 in Apache…

Containers have been the rage. Containers allow developers to package the code, its dependencies, libraries, and more so they can run reliably on different computing environments. Containers are lightweight and portable. One might deploy far more apps using containers on the same old servers than using VMs. It solves the…

Databases are the cornerstone of every piece of technology existing in this cyberspace. As more items across the world get connected to the internet, the risk of sensitive data exposure also increases. Over the past few years, large-scale data breaches have become so commonplace that a few million records leaking…