Playbook Walkthrough: Driving End-User Participation With Failed Login Playbooks
http://ift.tt/2fQtfDL
Submitted October 07, 2017 at 03:33AM by abhishekiyer
via reddit http://ift.tt/2xXZjjX
http://ift.tt/2fQtfDL
Submitted October 07, 2017 at 03:33AM by abhishekiyer
via reddit http://ift.tt/2xXZjjX
Demisto
Playbook Walkthrough: Driving End-User Participation With Failed Login Playbooks
Through a failed login example, we illustrates how playbooks can be configured to read end user responses, analyze them, and perform subsequent actions.
ReproNow: Capture and Sync Screen + Network - Can be used for reproducing security bugs and also bug bounty
http://ift.tt/2xRlMPm
Submitted October 07, 2017 at 05:20AM by vinayendratn
via reddit http://ift.tt/2hUiX9S
http://ift.tt/2xRlMPm
Submitted October 07, 2017 at 05:20AM by vinayendratn
via reddit http://ift.tt/2hUiX9S
Medium
Capture Screen + Network = ReproNow
Let’s imagine you are given a task to fix a web bug that is filed by someone. You will have to understand what is the bug, find the…
Automatically connect your iOS-Device to a VPN when joining an unknown WiFi network
http://ift.tt/2yNVmLe
Submitted October 07, 2017 at 06:16AM by thomas_witt
via reddit http://ift.tt/2kwILtU
http://ift.tt/2yNVmLe
Submitted October 07, 2017 at 06:16AM by thomas_witt
via reddit http://ift.tt/2kwILtU
Thomas Witt
How to automatically connect your iOS device to a VPN when joining an unknown WiFi network by setting up an OnDemand profile
How to create an iOS profile for iPad and iPhone that automatically connects you to different VPNs (e.g. Meraki, FRITZ!Box and Streisand)
Disqus hacked!
http://ift.tt/2y68MVk
Submitted October 07, 2017 at 07:40AM by CornCobBobby
via reddit http://ift.tt/2y1EdPi
http://ift.tt/2y68MVk
Submitted October 07, 2017 at 07:40AM by CornCobBobby
via reddit http://ift.tt/2y1EdPi
BetaNews
Disqus hacked!
So, Disqus has been hacked. Yeah, it is what we at BetaNews — plus many other websites — use for commenting. Should you be worried? Probably not. You see, this hack happened all the way…
Laying Internet Pipe | TechSNAP 339 | Jupiter Broadcasting
http://ift.tt/2yOgQaP
Submitted October 07, 2017 at 07:29AM by dmp1ce
via reddit http://ift.tt/2fZkkni
http://ift.tt/2yOgQaP
Submitted October 07, 2017 at 07:29AM by dmp1ce
via reddit http://ift.tt/2fZkkni
Jupiterbroadcasting
Laying Internet Pipe | TechSNAP 339 | Jupiter Broadcasting
The problematic implacations of SESTA, PR troubles for CBS's Showtime after cryptocoin mining software was found embedded in their webpage & much more!
Opinions on running US based and Russian based antivirus software amidst recent conflict of interest concerns?
No text found
Submitted October 07, 2017 at 10:37AM by messiahsk8er
via reddit http://ift.tt/2y6KTxi
No text found
Submitted October 07, 2017 at 10:37AM by messiahsk8er
via reddit http://ift.tt/2y6KTxi
reddit
Opinions on running US based and Russian based... • r/security
1 points and 0 comments so far on reddit
Google: Microsoft's focus on Windows 10 puts Windows 7 and 8 users at risk - gHacks Tech News
http://ift.tt/2y6J1Vn
Submitted October 07, 2017 at 10:23AM by mikhoulee
via reddit http://ift.tt/2kus6qG
http://ift.tt/2y6J1Vn
Submitted October 07, 2017 at 10:23AM by mikhoulee
via reddit http://ift.tt/2kus6qG
gHacks Technology News
Google: Microsoft’s focus on Windows 10 puts Windows 7 and 8 users at risk
Microsoft's focus on Windows 10 in regards to security puts users who run devices with older but still supported versions of Windows at risk.
Google beyondcorp- opinions
http://ift.tt/2n4QLT1Looking for opinions on this new way of thinking. Beyondcorp is a trust based system that does away with firewalls and VPN's and replaces them with certificates and access proxys.
Submitted October 07, 2017 at 06:51PM by mitchy93
via reddit http://ift.tt/2hTtGl7
http://ift.tt/2n4QLT1Looking for opinions on this new way of thinking. Beyondcorp is a trust based system that does away with firewalls and VPN's and replaces them with certificates and access proxys.
Submitted October 07, 2017 at 06:51PM by mitchy93
via reddit http://ift.tt/2hTtGl7
Google Cloud Platform
BeyondCorp - Enterprise Security | Google Cloud Platform
BeyondCorp is an enterprise security model that allows employees to work more securely from any location without the need for a traditional VPN. Learn more.
Russia reportedly stole NSA secrets with help of Kasperskyâwhat we know now
http://ift.tt/2y4rOfp
Submitted October 07, 2017 at 07:10PM by DerBootsMann
via reddit http://ift.tt/2gk0MH0
http://ift.tt/2y4rOfp
Submitted October 07, 2017 at 07:10PM by DerBootsMann
via reddit http://ift.tt/2gk0MH0
Ars Technica
Russia reportedly stole NSA secrets with help of Kaspersky—what we know now
Proven or not, the accusations almost certainly mean the end of Kaspersky as we know it.
How tough is your security glasses??
https://www.youtube.com/watch?v=RuSUtNiBcDg
Submitted October 07, 2017 at 07:06PM by warmachine01fire
via reddit http://ift.tt/2y1Z7gQ
https://www.youtube.com/watch?v=RuSUtNiBcDg
Submitted October 07, 2017 at 07:06PM by warmachine01fire
via reddit http://ift.tt/2y1Z7gQ
YouTube
How Tough Is Your Security Glass???
In this video we see how much strong are the unbreakable Security Glasses which are offered by different companies/organizations for your Home/office/apartme...
Crowdfunder for a free/open phone crosses $1M mark
http://ift.tt/2knMlGk
Submitted October 07, 2017 at 09:02PM by casabanclock
via reddit http://ift.tt/2y7c5vs
http://ift.tt/2knMlGk
Submitted October 07, 2017 at 09:02PM by casabanclock
via reddit http://ift.tt/2y7c5vs
Boing Boing
Crowdfunder for a free/open phone crosses $1M mark
Crowdfunder for a free/open phone crosses $1M mark
🎬 Movies For Hackers - A curated list of movies every hacker & cyberpunk must watch.
http://ift.tt/2lAqcDQ
Submitted October 07, 2017 at 09:35PM by _k4m4_
via reddit http://ift.tt/2y7We07
http://ift.tt/2lAqcDQ
Submitted October 07, 2017 at 09:35PM by _k4m4_
via reddit http://ift.tt/2y7We07
GitHub
k4m4/movies-for-hackers
movies-for-hackers - 🎬 A curated list of movies every hacker & cyberpunk must watch.
Out of character: Homograph attacks explained - Malwarebytes Labs
http://ift.tt/2wC1Dcg
Submitted October 07, 2017 at 09:28PM by majorllama
via reddit http://ift.tt/2y7jPxU
http://ift.tt/2wC1Dcg
Submitted October 07, 2017 at 09:28PM by majorllama
via reddit http://ift.tt/2y7jPxU
Malwarebytes Labs
Out of character: Homograph attacks explained - Malwarebytes Labs
Online and on traditional media, we hear and read about different kinds of cybersecurity attacks that sometimes we get overwhelmed with the terminologies. Most of us grasp what phishing attacks and denial of service (DoS) attacks are, but how familiar are…
How I broke Envato Search Engine
http://ift.tt/2xq5opF
Submitted October 08, 2017 at 12:49AM by serhack
via reddit http://ift.tt/2yxHLMc
http://ift.tt/2xq5opF
Submitted October 08, 2017 at 12:49AM by serhack
via reddit http://ift.tt/2yxHLMc
serhack.me
How I broke Envato Search Engine
See how I could perform an XSS Injection with Envato Search Field. SerHack Blog, a blog about security researcher, development and reverse engineering.
A critical vulnerability affects Siemens smart meters
http://ift.tt/2y5ZoB6
Submitted October 08, 2017 at 02:06AM by chull2058
via reddit http://ift.tt/2gki8Uh
http://ift.tt/2y5ZoB6
Submitted October 08, 2017 at 02:06AM by chull2058
via reddit http://ift.tt/2gki8Uh
Security Affairs
A critical vulnerability tracked as CVE-2017-9944 affects Siemens smart meters
Siemens has just released a firmware update for the 7KT PAC1200 Siemens smart meters that addresses a critical vulnerability.
How good are the password managers in Chrome and Firefox?
I was a Lastpass user. I have since moved to Keepass, because I liked the idea of switching to something that was local. But Keepass presents challenges and on iOS devices, and neither solution supports Gnome Web, which is my preferred browser on my desktop.With the release of Gnome 3.26, Gnome Web will now sync with Firefox Sync and allow me to sync my bookmarks and passwords. This would allow me to use Gnome Web on my Linux machine and use Firefox on my Windows and Mac machines at home and work, and be able to maintain password information across platforms.I know Keepass, and I trust Lastpass (for the most part), but I know nothing about the Firefox sync infrastructure and how secure it is.Anyone have insights into how secure Firefox sync is?
Submitted October 08, 2017 at 04:08AM by plazman30
via reddit http://ift.tt/2xqt4oW
I was a Lastpass user. I have since moved to Keepass, because I liked the idea of switching to something that was local. But Keepass presents challenges and on iOS devices, and neither solution supports Gnome Web, which is my preferred browser on my desktop.With the release of Gnome 3.26, Gnome Web will now sync with Firefox Sync and allow me to sync my bookmarks and passwords. This would allow me to use Gnome Web on my Linux machine and use Firefox on my Windows and Mac machines at home and work, and be able to maintain password information across platforms.I know Keepass, and I trust Lastpass (for the most part), but I know nothing about the Firefox sync infrastructure and how secure it is.Anyone have insights into how secure Firefox sync is?
Submitted October 08, 2017 at 04:08AM by plazman30
via reddit http://ift.tt/2xqt4oW
reddit
How good are the password managers in Chrome and Firefox? • r/security
I was a Lastpass user. I have since moved to Keepass, because I liked the idea of switching to something that was local. But Keepass presents...
POC - Hiding Your Process From SysInternals
http://ift.tt/2y6D2A4
Submitted October 08, 2017 at 04:55AM by MalwareSeattle
via reddit http://ift.tt/2glENj7
http://ift.tt/2y6D2A4
Submitted October 08, 2017 at 04:55AM by MalwareSeattle
via reddit http://ift.tt/2glENj7
Riscy Business
Hiding Your Process from Sysinternals
Malicious.exe running, but does not show up in Procexp.exe I was researching ways to not just do anti-analysis, but to rather run executables in spite of analysis, while evading analysis. I …
Cable modem user/pass discoverable?
This post may be 80% rant and 20% inquisitive.I bought a cable modem. Got rid of the one we have been paying a monthly fee for and hookup the new one. The modem powers up and self configures. First thing I do is change the admin password and ssid. Plug everything in that used to be connected to the old modem and restart the modem. Everything comes up fine. Nice. Goodbye monthly bill.The next thing I do is plug a laptop in to the modem and go to speedtest.net. I am redirected to a Centurylink "hello" web page. The page lets me know there is additional configuration necessary. I am miffed, but click the next button. It asks me to provide some account holder identifying info, which I do.The next window displays the new ssid and new cable modem admin password. wtf? It asks me to write down this important information and I give my computer screen the middle finger. I click next and "configuration" is complete.Am I naive to assume that ISPs (or anyone with the know how) should not be able to discover the admin password for a modem I own? I feel I have lost the security I assumed I had on my home network. Please don't park outside my house and access my home network. Thanks for being considerate.Edit: apostrophes are hard
Submitted October 08, 2017 at 08:48AM by SoBeefy
via reddit http://ift.tt/2xp6rq2
This post may be 80% rant and 20% inquisitive.I bought a cable modem. Got rid of the one we have been paying a monthly fee for and hookup the new one. The modem powers up and self configures. First thing I do is change the admin password and ssid. Plug everything in that used to be connected to the old modem and restart the modem. Everything comes up fine. Nice. Goodbye monthly bill.The next thing I do is plug a laptop in to the modem and go to speedtest.net. I am redirected to a Centurylink "hello" web page. The page lets me know there is additional configuration necessary. I am miffed, but click the next button. It asks me to provide some account holder identifying info, which I do.The next window displays the new ssid and new cable modem admin password. wtf? It asks me to write down this important information and I give my computer screen the middle finger. I click next and "configuration" is complete.Am I naive to assume that ISPs (or anyone with the know how) should not be able to discover the admin password for a modem I own? I feel I have lost the security I assumed I had on my home network. Please don't park outside my house and access my home network. Thanks for being considerate.Edit: apostrophes are hard
Submitted October 08, 2017 at 08:48AM by SoBeefy
via reddit http://ift.tt/2xp6rq2
reddit
Cable modem user/pass discoverable? • r/security
This post may be 80% rant and 20% inquisitive. I bought a cable modem. Got rid of the one we have been paying a monthly fee for and hookup...
NSA Hack caused by Kaspersky. Are you protected?
http://ift.tt/2wEPrYu
Submitted October 08, 2017 at 09:42AM by securitynewsIO
via reddit http://ift.tt/2y3m82Y
http://ift.tt/2wEPrYu
Submitted October 08, 2017 at 09:42AM by securitynewsIO
via reddit http://ift.tt/2y3m82Y
Security News iO
NSA Hack, Russians used Kaspersky | Security News iO
Russian backed hackers stole highly classified secrets during the 2015 NSA hack after a contractor put information on a personal computer.
Man in the Middle attacks
http://ift.tt/2gkBs3E
Submitted October 08, 2017 at 01:57PM by WTSxDev
via reddit http://ift.tt/2xqCK2N
http://ift.tt/2gkBs3E
Submitted October 08, 2017 at 01:57PM by WTSxDev
via reddit http://ift.tt/2xqCK2N
Kali Linux Tutorial
Kali Linux Tutorial: Man in the Middle attacks
Man in the middle attacks are methods (which have been discussed since 1995), in which the attacker latches into a communication link, and then sits in the middle between the two communication endpoints
Finding Diamonds in the Rough- Parsing for Pentesters
http://ift.tt/2kvUBEl
Submitted October 08, 2017 at 04:03PM by maxxori
via reddit http://ift.tt/2yPA284
http://ift.tt/2kvUBEl
Submitted October 08, 2017 at 04:03PM by maxxori
via reddit http://ift.tt/2yPA284
bluescreenofjeff.com - a blog about penetration testing and red teaming
Finding Diamonds in the Rough- Parsing for Pentesters
Parsing data is a fundamental ability that anyone serious about information security should consider putting time and effort into understanding. It can mean the difference between spamming Ctrl+F in a text editor and pulling out exactly what you need with…