DUHK: Vulnerability in ANSI X9.31 RNG allows a MITM to recover secret keys used for VPN connections.
https://duhkattack.com
Submitted October 25, 2017 at 02:15AM by SeventeenOhSeven
via reddit http://ift.tt/2yJfZvE
https://duhkattack.com
Submitted October 25, 2017 at 02:15AM by SeventeenOhSeven
via reddit http://ift.tt/2yJfZvE
reddit
DUHK: Vulnerability in ANSI X9.31 RNG allows a MITM to... • r/netsec
1 points and 0 comments so far on reddit
Multiple Vulnerabilities on CUF - Largest Portuguese Private Health Unit Web Services
http://ift.tt/2xm3hiC
Submitted October 25, 2017 at 01:52AM by salgfrancisco
via reddit http://ift.tt/2gFWNrR
http://ift.tt/2xm3hiC
Submitted October 25, 2017 at 01:52AM by salgfrancisco
via reddit http://ift.tt/2gFWNrR
Miguel de Moura
CUF - Largest Portuguese Private Health Unit Web Services - Multiple Vulnerabilities
Application DOS, Authenticated, Stored XSS and Email HTML Injection
Bad Rabbit ransomware technical dive
http://ift.tt/2zzScLB
Submitted October 25, 2017 at 12:49AM by exaltedgod
via reddit http://ift.tt/2gysbF4
http://ift.tt/2zzScLB
Submitted October 25, 2017 at 12:49AM by exaltedgod
via reddit http://ift.tt/2gysbF4
Securelist - Information about Viruses, Hackers and Spam
Bad Rabbit ransomware
On October 24th we observed notifications of mass attacks with ransomware called Bad Rabbit. It has been targeting organizations and consumers, mostly in Russia but there have also been reports of victims in Ukraine.
Important crypto papers for non-cryptographers
http://ift.tt/2yX97r7
Submitted October 25, 2017 at 02:13AM by paFarb
via reddit http://ift.tt/2xmvBBz
http://ift.tt/2yX97r7
Submitted October 25, 2017 at 02:13AM by paFarb
via reddit http://ift.tt/2xmvBBz
GitHub
pFarb/awesome-crypto-papers
awesome-crypto-papers - A curated list of cryptography papers, articles, tutorials and howtos.
How to Handle Your Business from All the Odds?
http://ift.tt/2zApo5M
Submitted October 25, 2017 at 03:12AM by LauraCunhaGomes
via reddit http://ift.tt/2ldvkiL
http://ift.tt/2zApo5M
Submitted October 25, 2017 at 03:12AM by LauraCunhaGomes
via reddit http://ift.tt/2ldvkiL
AtulHost
How to Handle Your Business from All the Odds?
Ideal Security Measures to Handle Cybercrime, and Dealing with Fallout if an Attack Occurs… Cybercrimes are on the rise, and cybersecurity solutions are growing alongside in order to combat new threats almost daily. In fact, securing your company from online…
NotPetya Returns as Bad Rabbit
http://ift.tt/2lcBYFP
Submitted October 25, 2017 at 03:59AM by 0xbaadf00dsec
via reddit http://ift.tt/2xm3qCV
http://ift.tt/2lcBYFP
Submitted October 25, 2017 at 03:59AM by 0xbaadf00dsec
via reddit http://ift.tt/2xm3qCV
Intezer
NotPetya Returns as Bad Rabbit - Intezer
Large scale cyber attacks seem to be happening once a month these days. Originally discovered by ESET (https://www.welivesecurity.com/2017/10/24/kiev-metro-hit-new-variant-infamous-diskcoder-ransomware/), Ukrainian and Russian organizations have been hit…
DHS issues public warning amidst growing concern over hackers targeting public infrastructure, such as major energy and industrial firms
http://ift.tt/2y0JpG6
Submitted October 25, 2017 at 07:08AM by nlongfors
via reddit http://ift.tt/2y38Y9L
http://ift.tt/2y0JpG6
Submitted October 25, 2017 at 07:08AM by nlongfors
via reddit http://ift.tt/2y38Y9L
The Merkle
DHS Issues Public Warning on Hackers Targeting US Public Infrastructure
Whenever a US agency launches a public warning regarding an imminent threat, people need to heed the government's words. Most recently, there has been growing concern over hackers targeting local e
FBI says its inability to hack into mobile devices is a ‘huge, huge problem’
http://ift.tt/2zzfelI
Submitted October 25, 2017 at 06:07AM by chull2058
via reddit http://ift.tt/2y2edX5
http://ift.tt/2zzfelI
Submitted October 25, 2017 at 06:07AM by chull2058
via reddit http://ift.tt/2y2edX5
BGR
FBI says its inability to hack into mobile devices is a ‘huge, huge problem’
The FBI’s surprising inability to bypass basic security measures on mobile devices was thrust into the spotlight nearly two years ago following the San Bernardino terrorist attack of December…
The world's wealthiest people are braced for details to be leaked
http://ift.tt/2gBuHdC
Submitted October 25, 2017 at 10:59AM by Bastet1
via reddit http://ift.tt/2i2seZU
http://ift.tt/2gBuHdC
Submitted October 25, 2017 at 10:59AM by Bastet1
via reddit http://ift.tt/2i2seZU
Mail Online
The world's wealthiest people are braced for details to be leaked
Law firm Appleby, which is based on the island of Bermuda (pictured), has now warned its wealthy clients that they may have their details exposed after the massive hack of its database.
Tool to check if your TPM is affected by the Infineon disaster
http://ift.tt/2y4V4yS
Submitted October 25, 2017 at 01:42PM by tomtennn
via reddit http://ift.tt/2i3z6X0
http://ift.tt/2y4V4yS
Submitted October 25, 2017 at 01:42PM by tomtennn
via reddit http://ift.tt/2i3z6X0
blog.habets.se
Is my TPM affected by the Infineon disaster?
I made a tool to check if your TPM chip is bad. Well, it extracts the SRK public key and checks if it’s good or bad. If the SRK is bad then you can bet all o...
Password Algorithms
http://ift.tt/2yPVNIs
Submitted October 25, 2017 at 01:29PM by djsumdog
via reddit http://ift.tt/2yKrr7P
http://ift.tt/2yPVNIs
Submitted October 25, 2017 at 01:29PM by djsumdog
via reddit http://ift.tt/2yKrr7P
reddit
Password Algorithms • r/security
1 points and 0 comments so far on reddit
'Bad Rabbit' Ransomware Attacks Rock Russia, ...
http://ift.tt/2yKebAc
Submitted October 25, 2017 at 02:41PM by MicheeLengronne
via reddit http://ift.tt/2h5ZAaD
http://ift.tt/2yKebAc
Submitted October 25, 2017 at 02:41PM by MicheeLengronne
via reddit http://ift.tt/2h5ZAaD
Dark Reading
'Bad Rabbit' Ransomware Attacks Rock Russia, Ukraine - and Beyond
Attack employs new version of infamous NotPetya ransomware used in June attacks on Ukraine targets.
SSL|TLS Server Identity
http://ift.tt/2zBoSVb
Submitted October 25, 2017 at 03:13PM by MicheeLengronne
via reddit http://ift.tt/2xmfxzG
http://ift.tt/2zBoSVb
Submitted October 25, 2017 at 03:13PM by MicheeLengronne
via reddit http://ift.tt/2xmfxzG
Limawi
SSL|TLS Server Identity
SSL/TLS identity server protocol with Let’s Encrypt.
Worker who snuck NSA malware home had his PC backdoored, Kaspersky says
http://ift.tt/2xn4BBM
Submitted October 25, 2017 at 03:30PM by NISMO1968
via reddit http://ift.tt/2yN4VwK
http://ift.tt/2xn4BBM
Submitted October 25, 2017 at 03:30PM by NISMO1968
via reddit http://ift.tt/2yN4VwK
Ars Technica
Worker who snuck NSA malware home had his PC backdoored, Kaspersky says
Kaspersky presses its case it didn't knowingly help Russia steal NSA secrets.
New ransomware strikes Ukraine and Russia
http://ift.tt/2yLn1iJ
Submitted October 25, 2017 at 03:29PM by NISMO1968
via reddit http://ift.tt/2zE9h70
http://ift.tt/2yLn1iJ
Submitted October 25, 2017 at 03:29PM by NISMO1968
via reddit http://ift.tt/2zE9h70
BBC News
New ransomware strikes Ukraine and Russia
The new strain of computer-locking malware has hit Russian media websites and an airport in Ukraine.
Code release: Defeating Google's reCaptcha with over 85% accuracy
http://ift.tt/2zMfFdv
Submitted October 25, 2017 at 05:55PM by Correcthorse121
via reddit http://ift.tt/2h8QMki
http://ift.tt/2zMfFdv
Submitted October 25, 2017 at 05:55PM by Correcthorse121
via reddit http://ift.tt/2h8QMki
GitHub
ecthros/uncaptcha
Defeating Google's audio reCaptcha with 85% accuracy. - ecthros/uncaptcha
How can I protect my PC/Phone etc on a WiFi network?
I am moving into a share-house soon and will be using their wifi. I don't expect them to try hack me (they're nice people) but I like to stay safe.I'm going to get them to turn WPS off on the router as well.What can I do with my PC/Phone etc to make sure no-one can monitor/hack me etc?
Submitted October 25, 2017 at 06:31PM by c0ntradictions
via reddit http://ift.tt/2yNxf2l
I am moving into a share-house soon and will be using their wifi. I don't expect them to try hack me (they're nice people) but I like to stay safe.I'm going to get them to turn WPS off on the router as well.What can I do with my PC/Phone etc to make sure no-one can monitor/hack me etc?
Submitted October 25, 2017 at 06:31PM by c0ntradictions
via reddit http://ift.tt/2yNxf2l
reddit
How can I protect my PC/Phone etc on a WiFi network? • r/security
I am moving into a share-house soon and will be using their wifi. I don't expect them to try hack me (they're nice people) but I like to stay...
Amazon Key is a new service that lets couriers unlock your front door
http://ift.tt/2zD1fvj
Submitted October 25, 2017 at 06:22PM by QuirkySpiceBush
via reddit http://ift.tt/2yIar4N
http://ift.tt/2zD1fvj
Submitted October 25, 2017 at 06:22PM by QuirkySpiceBush
via reddit http://ift.tt/2yIar4N
The Verge
Amazon Key is a new service that lets couriers unlock your front door
You’ll need a smart lock and Amazon’s new Cloud Cam
Bad Rabbit
http://ift.tt/2i2ldbH
Submitted October 25, 2017 at 06:54PM by RzRzRzRzR
via reddit http://ift.tt/2yPbmA5
http://ift.tt/2i2ldbH
Submitted October 25, 2017 at 06:54PM by RzRzRzRzR
via reddit http://ift.tt/2yPbmA5
WeLiveSecurity
Bad Rabbit: Not-Petya is back with improved ransomware
A new ransomware outbreak today has hit some major infrastructure in Ukraine including Kiev metro. Here are some details about this new variant of Petya.
Security In 5: Episode 97 - You Have No Expectation Of Privacy On Business Systems
http://ift.tt/2gAPmym
Submitted October 25, 2017 at 06:41PM by BinaryBlog
via reddit http://ift.tt/2yPbpMh
http://ift.tt/2gAPmym
Submitted October 25, 2017 at 06:41PM by BinaryBlog
via reddit http://ift.tt/2yPbpMh
Libsyn
Security In Five Podcast: Episode 97 - You Have No Expectation Of Privacy On Business Systems
There is a balance between business use and personal on computers and systems businesses provide to employees. Personal use is inevitable, a personal email to your wife, saving off a photo and so on. If you do store personal files or use company email for…
Does anyone know if the recent APT targeting US energy sector is linked to the attacks on the power grid in Ukraine?
http://ift.tt/2hUJUXw
Submitted October 25, 2017 at 06:31PM by Derbel__McDillet
via reddit http://ift.tt/2gCjppy
http://ift.tt/2hUJUXw
Submitted October 25, 2017 at 06:31PM by Derbel__McDillet
via reddit http://ift.tt/2gCjppy
www.us-cert.gov
Advanced Persistent Threat Activity Targeting Energy and Other Critical Infrastructure Sectors
Since at least May 2017, threat actors have targeted government entities and the energy, water, aviation, nuclear, and critical manufacturing sectors, and, in some cases, have leveraged their capabilities to compromise victims’ networks. Historically, cyber…