The latest Port Swigger research is coming to Black Hat Europe 2020
Summary: PortSwigger researchers Gareth Heyes and James Kettle are presenting at Black Hat Europe 2020, held as a digital event December 7th-10th. Heyes's December 10 talk covers PDF XSS attacks and evaluates common PDF readers for injection attacks, while Kettle joins peers to reflect on conference themes and where InfoSec is headed.
What you should know: Heyes's session describes injecting PDF code to escape objects, hijack links, and execute arbitrary JavaScript inside a PDF document - a delivery path that reaches users through files your web controls were not built to inspect.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026