Latest blog articles

Our latest articles.

Get insights on the latest trending CVE's, our own novel security research and everything which related to bolstering the security posture of your externally facing assets.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Talks
July 11, 2023
Email Security Gone Wrong - How does email security strategy of organizations leaks sensitive information to the public?

Learn from our research presentation how active email security detection tools exposes sensitive information about your company without any interaction - and what you can do about it!

EASM
June 5, 2023
Subdomain Takeover: How a Misconfigured DNS Record Could Lead to a Huge Supply Chain Attack

This blog post discusses the discovery of a vulnerability by Shockwave's team which allowed malicious actors to claim assets.npmjs.com subdomain, and would likely have constructed a significant supply chain attack with.

Research
May 1, 2023
Privilege Escalation via Mass Assignment: Practical Example hacking one of the World's Largest Consulting Firm

Shockwave's Security Research team, identified and responsibly reported a Mass Assignment vulnerability that allowed us to escalate privileges from a normal membership level to that of an administrator account, giving us full access to the organization's systems.

The security first platform

Supercharge your security

Identify, Secure and Continuously Monitor your Externally Facing Attack Surface.
Significantly Improve your security posture within minutes with an easy, smooth onboarding process.

Get Started