Cloud, Digitalization and Advanced Attacks are Breaking the Old Stack
http://ift.tt/2hZhMGo
Submitted October 10, 2017 at 04:26AM by SecurityTrust
via reddit http://ift.tt/2fXN8Jm
http://ift.tt/2hZhMGo
Submitted October 10, 2017 at 04:26AM by SecurityTrust
via reddit http://ift.tt/2fXN8Jm
Vidder
Cloud, Digitalization and Advanced Attacks are Breaking the Old Stack
The current security stack of firewalls amalgamated with a dozen other security products has been rendered irrelevant by advanced cyberthreats.
Cameradar: a tool to attack CCTV cameras
http://ift.tt/2qDdnHZ
Submitted October 10, 2017 at 04:23AM by Ullaakut
via reddit http://ift.tt/2zaCPK2
http://ift.tt/2qDdnHZ
Submitted October 10, 2017 at 04:23AM by Ullaakut
via reddit http://ift.tt/2zaCPK2
GitHub
EtixLabs/cameradar
cameradar - Cameradar hacks its way into RTSP CCTV cameras
People are getting kicked off of Venmo for not reading the fine print
http://ift.tt/2ybw4d1
Submitted October 10, 2017 at 03:53AM by samp615
via reddit http://ift.tt/2g7zZky
http://ift.tt/2ybw4d1
Submitted October 10, 2017 at 03:53AM by samp615
via reddit http://ift.tt/2g7zZky
The Hustle
People are getting kicked off of Venmo for not reading the fine print
Venmo, a popular payments app, is freezing and completely removing people from its platform for not reading their 27-page-long user agreement.
Exposed Brother Printers could allow copies of printed documents to be sent to an attacker!
http://ift.tt/2wJtTd6
Submitted October 10, 2017 at 08:07AM by securitynewsIO
via reddit http://ift.tt/2yVhjbh
http://ift.tt/2wJtTd6
Submitted October 10, 2017 at 08:07AM by securitynewsIO
via reddit http://ift.tt/2yVhjbh
Security News iO
Possibly Thousands of Exposed Brother Printers Online | Security News iO
Security researcher Ankit Anubhav, principal researcher at NewSky Security, has discovered a bunch of Brother printers exposed online.
Metasploit Module for Tomcat JSP Upload via PUT Bypass (CVE-2017-12615)
http://ift.tt/2ycE7G8
Submitted October 10, 2017 at 08:34AM by peewpw
via reddit http://ift.tt/2fYMLhC
http://ift.tt/2ycE7G8
Submitted October 10, 2017 at 08:34AM by peewpw
via reddit http://ift.tt/2fYMLhC
Peew.pw
New Vulnerability, Same Old Tomcat: CVE-2017-12615
Tomcat has been a staple target for penetration testers and malicious
actors for years. With ample opportunities to exploit security
misconfigurations in the management GUI (tomcat:tomcat….) or technical
vulnerabilities, it’s no wonder attackers continue…
actors for years. With ample opportunities to exploit security
misconfigurations in the management GUI (tomcat:tomcat….) or technical
vulnerabilities, it’s no wonder attackers continue…
Allies' North Korean War Plans hacked
http://ift.tt/2yDGrqU
Submitted October 10, 2017 at 09:11AM by securitynewsIO
via reddit http://ift.tt/2grmTLK
http://ift.tt/2yDGrqU
Submitted October 10, 2017 at 09:11AM by securitynewsIO
via reddit http://ift.tt/2grmTLK
Security News iO
Allies' North Korean War Plans hacked | Security News iO
The North Korean war plans included classified military documents, including a joint South Korea-US wartime operational plans for a conflict by Pyongyang.
How to choose the right criminal background check service?
http://ift.tt/2yByItL
Submitted October 10, 2017 at 09:57AM by vrfctncanada
via reddit http://ift.tt/2xvuTkF
http://ift.tt/2yByItL
Submitted October 10, 2017 at 09:57AM by vrfctncanada
via reddit http://ift.tt/2xvuTkF
Remote Code Execution on rubygems.org
http://ift.tt/2gqteHk
Submitted October 10, 2017 at 09:53AM by daangmaan
via reddit http://ift.tt/2wKcXTS
http://ift.tt/2gqteHk
Submitted October 10, 2017 at 09:53AM by daangmaan
via reddit http://ift.tt/2wKcXTS
justi.cz
Remote Code Execution on rubygems.org
tl;dr Remote code execution via a deserialization vulnerability on rubygems.org, a very popular hosting service for ruby dependencies. A fix was rolled out q...
Security system offer you finish insurance from robberies
http://ift.tt/2g7qaDb
Submitted October 10, 2017 at 11:15AM by falcontrackers
via reddit http://ift.tt/2ycIXn1
http://ift.tt/2g7qaDb
Submitted October 10, 2017 at 11:15AM by falcontrackers
via reddit http://ift.tt/2ycIXn1
Medium
Security system offer you finish insurance from robberies
As per learns around 70% of organizations misfortunes are a result of shoplifting, from the two clients and representatives. Security…
New NIST and DHS Standards Get Ready to Tackle BGP Hijacks
http://ift.tt/2ybHoFz
Submitted October 10, 2017 at 12:58PM by dimitrirosto
via reddit http://ift.tt/2wJJfOH
http://ift.tt/2ybHoFz
Submitted October 10, 2017 at 12:58PM by dimitrirosto
via reddit http://ift.tt/2wJJfOH
BleepingComputer
New NIST and DHS Standards Get Ready to Tackle BGP Hijacks
Two US government agencies have united forces to coordinate the creation of a new set of standards aimed at securing the process of routing of information between major Internet entities, such as Internet Service Providers, hosting providers, cloud providers…
Sandeep Sengupta, Director, ISOAH Data Securities Pvt Ltd speaks on the Security Aspect of HR
http://ift.tt/2i2oQ5f
Submitted October 10, 2017 at 02:07PM by SayaniBan
via reddit http://ift.tt/2zbvdai
http://ift.tt/2i2oQ5f
Submitted October 10, 2017 at 02:07PM by SayaniBan
via reddit http://ift.tt/2zbvdai
How to do cybersecurity at work
http://ift.tt/2z9JfcF
Submitted October 10, 2017 at 02:40PM by MicheeLengronne
via reddit http://ift.tt/2ycVOFn
http://ift.tt/2z9JfcF
Submitted October 10, 2017 at 02:40PM by MicheeLengronne
via reddit http://ift.tt/2ycVOFn
Naked Security
How to do cybersecurity at work
This week in National Cybersecurity Awareness Month is about how to do cybersecurity at work – and we mean all of us, not just IT!
The Absurdly Underestimated Dangers of CSV Injection [x-post from /r/programming]
http://ift.tt/2ycgGNp
Submitted October 10, 2017 at 03:53PM by 746865626c617a
via reddit http://ift.tt/2g9trlx
http://ift.tt/2ycgGNp
Submitted October 10, 2017 at 03:53PM by 746865626c617a
via reddit http://ift.tt/2g9trlx
reddit
The Absurdly Underestimated Dangers of CSV Injection... • r/netsec
5 points and 2 comments so far on reddit
The Absurdly Underestimated Dangers of CSV Injection
http://ift.tt/2ycgGNp
Submitted October 10, 2017 at 05:09PM by speckz
via reddit http://ift.tt/2xtUe3j
http://ift.tt/2ycgGNp
Submitted October 10, 2017 at 05:09PM by speckz
via reddit http://ift.tt/2xtUe3j
reddit
The Absurdly Underestimated Dangers of CSV Injection • r/security
1 points and 0 comments so far on reddit
OxygenOS is collecting a lot of personal info about your phone usage
http://ift.tt/2xupdMw
Submitted October 10, 2017 at 05:53PM by Marc66FR
via reddit http://ift.tt/2ydw9wy
http://ift.tt/2xupdMw
Submitted October 10, 2017 at 05:53PM by Marc66FR
via reddit http://ift.tt/2ydw9wy
reddit
OxygenOS is collecting a lot of personal info about... • r/netsec
16 points and 1 comments so far on reddit
North Korea and Iran Use CodeProject to Develop Their Malware
http://ift.tt/2xwwyq7
Submitted October 10, 2017 at 06:35PM by TheHermon2
via reddit http://ift.tt/2ydNx4e
http://ift.tt/2xwwyq7
Submitted October 10, 2017 at 06:35PM by TheHermon2
via reddit http://ift.tt/2ydNx4e
Intezer
North Korea and Iran Use CodeProject to Develop Their Malware - Intezer
Software developers and malware authors share a desire to work smart, not hard In the software development world, engineers frequently use ready-made code for various tasks, whether it involves copying a snippet from Stack Overflow, taking a library from…
Security In 5: Episode 86 - OWASP Top 10 Introduction
http://ift.tt/2xwwOFP
Submitted October 10, 2017 at 06:32PM by BinaryBlog
via reddit http://ift.tt/2yWa0jU
http://ift.tt/2xwwOFP
Submitted October 10, 2017 at 06:32PM by BinaryBlog
via reddit http://ift.tt/2yWa0jU
Libsyn
Security In Five Podcast: Episode 86 - OWASP Top 10 Introduction
OWASP is the Open Web Application Security Project. A global group set to provide developers and security professionals the tips and best practices in application development. There is more to the OWASP Top 10 than good coding practices. This is an introduction…
Threat Hunting with Sysmon: Word Document with Macros
Wrote an article on how you can detect a typical phishing attack in which a user clicks or downloads a ".doc" word document and enables a macro. This is useful when there's an incident and when we want to gain insight on how a certain malware got to a client's machine. I hope you find it useful in your environment.TLDR; Find users who open ".doc" documents and enable macros and monitor the actions with sysmon.
Submitted October 10, 2017 at 07:18PM by pdelgado
via reddit http://ift.tt/2wLXen8
Wrote an article on how you can detect a typical phishing attack in which a user clicks or downloads a ".doc" word document and enables a macro. This is useful when there's an incident and when we want to gain insight on how a certain malware got to a client's machine. I hope you find it useful in your environment.TLDR; Find users who open ".doc" documents and enable macros and monitor the actions with sysmon.
Submitted October 10, 2017 at 07:18PM by pdelgado
via reddit http://ift.tt/2wLXen8
Syspanda
Threat Hunting with Sysmon: Word Document with Macro - Syspanda
As I’ve stated before, Sysmon is a great tool for gaining insight of what’s running in our systems and what changes are occurring in our endpoints. With that being said,... [Continue Reading]
RUSSIA blocks again
http://ift.tt/2xvAX1i
Submitted October 10, 2017 at 09:21PM by dimitrirosto
via reddit http://ift.tt/2kDupb4
http://ift.tt/2xvAX1i
Submitted October 10, 2017 at 09:21PM by dimitrirosto
via reddit http://ift.tt/2kDupb4
BleepingComputer
Russia Says It Will Ban Cryptocurrency Exchanges
Sergei Shvetsov, First Deputy Chairman of the Central Bank of Russia, said he plans to ban websites that offer cryptocurrencies inside the country.
iOS Privacy: steal.password - Easily get the user's Apple ID password, just by asking
http://ift.tt/2y6h54D
Submitted October 10, 2017 at 09:06PM by FaxCelestis
via reddit http://ift.tt/2kCvaRM
http://ift.tt/2y6h54D
Submitted October 10, 2017 at 09:06PM by FaxCelestis
via reddit http://ift.tt/2kCvaRM
Felix Krause
iOS Privacy: steal.password - Easily get the user's Apple ID password, just by asking
Do you want the user's Apple ID password, to get access to their Apple
account, or to try the same email/password combination on different web
services? Just ask your users politely, they'll probably just hand over
their credentials, as they're trained…
account, or to try the same email/password combination on different web
services? Just ask your users politely, they'll probably just hand over
their credentials, as they're trained…
Proposal For Improving Social Security Numbers
http://ift.tt/2yejVDX
Submitted October 10, 2017 at 10:08PM by eldridgea
via reddit http://ift.tt/2gs3Fpq
http://ift.tt/2yejVDX
Submitted October 10, 2017 at 10:08PM by eldridgea
via reddit http://ift.tt/2gs3Fpq
Eldridge's Blog
Proposal For Improving Social Security Numbers
In the wake of the Equifax breach there's increasing discussion about making changes to Social Security Numbers. Any changes will need to be discussed and will take a long time to implement, but the discussion is overdue. I doubt that...