Security Blog
Cybersecurity research, vulnerability analysis, and practical security insights.
Top Qualys Alternatives & Competitors in 2026
Security teams require robust platforms to discover and manage vulnerabilities across their IT infrastructure. These platforms provide visibility into security posture, helping remediate risks...
Best Detectify Alternatives in 2026
Security teams and red team practitioners use external attack surface management (EASM) and dynamic application security testing (DAST) tools to continuously discover and scan internet-facing...
Nessus vs OpenVAS: Which Vulnerability Scanner to Choose in 2026
Nessus and OpenVAS are two of the most widely deployed tools for finding security weaknesses in networks and hosts. They help teams identify vulnerabilities before attackers do, and both form a core...
Best Shodan Alternatives in 2026 (Free & Paid)
Security teams use internet-wide scanning tools to discover exposed assets and monitor their external attack surface. These platforms solve the challenge of identifying devices, services, and...
Trustworthy Open Source Attack Surface Management for Security Teams
Choosing the right open source attack surface management tool requires evaluating its discovery capabilities, integration options, and community support. You need tools that automate asset...
What Every Engineer Should Know About Continuous Attack Surface Management
Continuous attack surface management identifies and monitors all internet-facing and internal assets that an attacker could target. This process provides real-time visibility into an organization's...
External Vulnerability Scanner — What It Tells You and How to Read It
An external vulnerability scanner identifies security weaknesses on internet-facing assets. It probes public IP addresses, domain names, and web services from an outside perspective. Use it for...
What Is Attack Surface Management Explained for Security Practitioners
Attack surface management (ASM) identifies, inventories, and monitors all internet-facing assets an organization owns or controls. It aims to reduce the attack surface by finding unknown, forgotten,...
External Attack Surface Management Explained for Security Practitioners
External attack surface management identifies, inventories, classifies, monitors, and remediates all internet-facing assets an organization owns or controls. This process gives security teams an...
10 Best Attack Surface Management Tools Worth Testing in 2026
Choosing the right attack surface management tools requires understanding your asset scope, automation needs, and integration capabilities. Prioritize solutions offering continuous discovery and...
OSVDB-115695: DokuWiki Reflected XSS via Malicious SWF Upload
OSVDB ID: 115695 · Class: Reflected cross-site scripting (XSS) · Affected: DokuWiki instances allowing file upload of Flash (SWF) content. Summary OSVDB-115695 documents a reflected...
OSVDB-97562: OAuth Protocol HMAC Timing Disclosure Weakness
OSVDB ID: 97562 · Class: Cryptographic weakness / timing side-channel · Affected: OAuth protocol implementations performing HMAC signature verification with non-constant-time...