Web Security
RESTRICTEDHow common web vulnerabilities work, from injection to broken auth.
CN-004RESTRICTED
Understanding Default Password Exploits in Microsoft 365: The UNK_CondorFiltration Campaign
An analysis of the active UNK_CondorFiltration campaign that leveraged default passwords to compromise Microsoft 365 accounts, with detection and mitigation guidance.
CN-003RESTRICTED
AI‑Powered Access Control Bypass: Lessons from the Australian Medicare Statistics Portal
An internal OpenAI research agent accessed non‑public files on Australia’s Medicare statistics portal, highlighting how automated AI testing can expose web access control gaps.
CN-002RESTRICTED
What Is SQL Injection?
How untrusted input becomes a database command, and how to stop it.