Security Insights
Deep dives, expert analysis, and practical guidance on exposure management, adversarial validation, and the future of AI-driven exposure management.
wp2shell: A Pre-Authentication RCE in WordPress Core, and Why It Is an Exposure Validation Problem
wp2shell is a pre-authentication RCE in WordPress Core that an anonymous request can trigger on a default install. Here are the affected versions, the patch steps, and why events like this are really an exposure validation problem.
WordPress Security and Penetration Testing Guide
WordPress runs 40% of the web, and the core almost never lets you in. Plugins do. Here is how to pentest a WordPress site with wpscan and harden what attackers actually hit.
Use Case: Rapid Identification and Escalation of a Critical Threat by Strobes ASM
Introduction In a recent critical incident, Strobes ASM, an attack surface management platform, played a key role in identifying and mitigating a severe threat in a custom-made WordPress application. The application was designed to require authentication for access, but due to a misconfiguration in