Quickly access insights about apex domains on the attack surface
TL/DR: Customers now have the ability to drill down into specific apex domains by simply clicking one of them from the Root Assets page to …
Security Updates
Detectify Security Advisor explains account hijacking attack scenarios using abnormal OAuth-flows
TL/DR: OAuth users are being urged to check their sign-in flows for third-party scripts, including error flows, that could expose them to newly uncovered attack …
Newly minted filters, improvements to bulk actions, and SSL assessments
TL/DR: We’ve launched new filters to the /Vulnerabilities and /Attack Surface view and expanded the SSL assessment offering to all customers. Filter by vulnerability type …
Improvements to boost the attack surface view, ports & more
TL/DR: Users now get additional insights on what is discovered on the attack surface. This includes information such as when an asset was last seen …
Security updates to cover your entire attack surface
TL/DR: Just as vulnerabilities are constantly evolving, so must your approach to external attack surface monitoring. In addition to our ongoing Crowdsource security research, we …
[New research] Subdomain takeovers are on the rise and are getting harder to monitor
BOSTON/STOCKHOLM, March 22, 2022. New research from Detectify, the SaaS security company powered by ethical hackers, shows that Subdomain takeovers are on the rise but …
Security Updates for August 17
Our Crowdsource ethical hacker community has been busy sending us security updates, including 0-day research. Due to confidentially agreements, we cannot publicize all security update releases here but …
Top 5 high severity CVEs detected by Detectify since June 2020
We’re going to highlight the Top high severity CVEs found by Detectify. Thanks to the Crowdsource global community of handpicked ethical hackers, Detectify users get …