Attack Surface: articles and guides

A defensive explainer on attack vectors: what an attack vector is and how it differs from the attack surface, the most common vectors including phishing, stolen credentials, unpatched vulnerabilities, misconfigurations, supply-chain compromise, insiders and physical access, and how layered controls and reducing the attack surface defend against them.

Citrix NetScaler keeps getting mass-exploited — Shitrix, CitrixBleed, CitrixBleed 2 and new zero-days. The durable reason, the CVE timeline, and the fix.

Browser extensions run with broad access to everything you do online, making them a real and often-ignored attack surface. How to audit Chrome extensions for security risk across your organisation.

Ars0n Framework v2 by rs0n (github.com/R-s0n/ars0n-framework-v2) is an open-source GPL-3.0 Docker recon platform wrapping 50+ tools with ROI target ranking.