Tag: vulnerability

31/07/2026

Week 31 – CertiGhost: The Certificate That Shouldn’t Exist

27 July – 02 Aug 2026 This week’s CVE of the Week is CVE-2026-54121, also known as CertiGhost, a critical vulnerability affecting Microsoft Active Directory Certificate Services (AD CS). The flaw allows a low-privileged authenticated domain user to obtain a certificate for a Domain Controller, …

CVE of the Week
-
by White Hat IT Security
Faking GitHub Commits – What Could Go Wrong?
07/11/2024

Faking GitHub Commits – What Could Go Wrong?

Found: a tool creating dummy GitHub source code commits to help programmers game job evaluation mechanisms. This illustrates a deeper issue with how badly designed incentives can have serious security consequences.

The CyAN Blog
-
by John Salomon
23/10/2023

Article Publication – “Protecting Responsible Cybersecurity Vulnerability Research”

CyAN members John Salomon and Nick Kelly have just published an article in the European Cybersecurity Journal on the legal treatment of responsible cybersecurity vulnerability disclosure.

CyAN News
-
by John Salomon