Technical insights on web security, malware detection, certificate validation, and threat intelligence
Deep technical analysis of ShinyHunters' sophisticated real-time phishing kit used for SSO credential theft and MFA bypass. Detailed breakdown of the attack infrastructure, JavaScript malware, and MFA bypass mechanisms used against healthcare and fintech companies.
We're excited to announce the official ScanMalware CLI tool - a Rust-based command-line interface that brings the full power of ScanMalware's security analysis directly to your terminal for automation, batch processing, and DevSecOps workflows.
Learn how we added Certificate Authority Authorization (CAA) DNS record validation to our TLS analyzer, including a robust 6-tier DNS fallback strategy to ensure reliable lookups.
Certificate Transparency (CT) logs are now required by browsers for all publicly trusted certificates. Learn how we validate CT compliance and what it means for web security.
Modern browsers enforce strict limits on TLS certificate validity periods. Learn about the 398-day rule, why it exists, and how we detect certificates that violate these industry standards.