28 min read
Access Control Facades and Hardcoded Secrets: A Sage 300 Case Study (Part 2)
This is a continuation of the Sage 300 case study series where we explore the process of discovering and developing exploits for six (6) different...
19 min read
Access Control Facades and Hardcoded Secrets: A Sage 300 Case Study (Part 1)
Software solutions have had to evolve rapidly to keep pace with cybersecurity threats. Today, nearly every significant software solution is loaded...
3 min read
Enhancing Vulnerability Assessment and Risk Scoring with CVSS 4.0
In the realm of cybersecurity, accurately assessing and quantifying the severity of vulnerabilities is crucial for organizations to effectively...
2 min read
The New Google .zip TLD: Examining Potential Cybersecurity Risks
On May 3rd Google introduced several new top-level domains (TLDs), including the .zip TLD which has generated warnings from the cybersecurity...
3 min read
Control Gap Vulnerability Roundup: April 29th to May 5th
This week saw the publication of 294 new CVE IDs. Of those, 99 have not yet been assigned official CVSS scores, however, of the ones that were,...
4 min read
Control Gap Vulnerability Roundup: April 22nd to April 28th
This week saw the publication of 501 new CVE IDs. Of those, 430 have not yet been assigned official CVSS scores, however, of the ones that were,...
3 min read
Critical Vulnerability Disclosure: Sage 300
In 2022 Konrad Haase, a member of the Control Gap Offensive Security team, discovered a series of vulnerabilities in Sage 300, a well-established...
3 min read
Control Gap Vulnerability Roundup: April 8th to April14th
This week saw the publication of 652 new CVE IDs. Of those, 240 have not yet been assigned official CVSS scores, however, of the ones that were,...
3 min read
Control Gap Vulnerability Roundup: April 1st to April 7th
This week saw the publication of 579 new CVE IDs. Of those, 314 have not yet been assigned official CVSS scores, however, of the ones that were,...