7ASecurity

📢 New 7ASecurity public report

🔐 KEDA audited by 7ASecurity through a whitebox security assessment
💬 https://7asecurity.com/blog/2026/06/keda-security-audit-7asecurity/

💬 Feedback welcome as always, props to &

KEDA audit by 7ASecurity 7ASecurity shares results of a KEDA security audit: 15 security-impact findings (4 high), 5 hardening recommendations, SLSA supply-chain review, and future security guidance.

🌐 Finding a WebDAV server isn't the finding.

The real question is what it actually allows.

Exposed methods, weak authentication, excessive permissions, and poor logging can quietly turn a file-sharing service into an attack surface. A scanner can tell you WebDAV exists. A proper pentest reveals what attackers can do with it.

👉 Learn how to assess and secure WebDAV exposure:
https://7asecurity.com/blog/2026/06/webdav-security-guide/

The Security Guide To WebDAV Servers And Exposed Methods What Is a WebDAV Server? How It Works, Use Cases, and Security Risks A WebDAV server lets users access and manage files over HTTP or HTTPS. It supports remote workflows such as document editing, collaboration, and legacy publishing. Now, WebDAV isn’t automatically unsafe. It becomes a risk when ex...

📱 Want to level up your Android and IoT hacking skills at DEF CON?

Join us in Las Vegas for 2 days of 100% hands-on training covering Android app testing, Frida, Objection, radare2, certificate pinning bypasses, root detection bypasses, reverse engineering, instrumentation, and much more.

You'll get lifetime access to the training portal, future updates, video recordings, CTF challenges, and direct support from the instructors.

🎟️ Use code DCTLV26SAVE10 for 10% OFF (limited to the first 10 registrations).

👉 Register now:
https://training.defcon.org/products/hacking-android-apps-by-example-abraham-aranguren-abhishek-j-m-anirudh-anand-dctlv2026

Hacking Android and IOT Apps by Example - Abraham Aranguren, Abhishek J M, Anirudh Anand & Amrudesh Balakrishnan - DCTLV2026 Name of Training: Hacking Android and IoT Apps by ExampleTrainer(s): Abraham Aranguren, Abhishek J M, Anirudh Anand, and Amrudesh BalakrishnanDates: August 10-11, 2026Time: 8:00 am to 5:00 pm Venue: Las Vegas Convention CenterCost: $2,250 (USD) Short Summary: This course is a 100% hands-on deep dive...