google/log4jscanner: A log4j vulnerability filesystem scanner and Go package for analyzing JAR files.
https://ift.tt/3JzNwdw

Submitted January 03, 2022 at 01:39PM by maryetan
via reddit https://ift.tt/3HpiyTo

/r/netsec's Q1 2022 Information Security Hiring Thread
OverviewIf you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.Please reserve top level comments for those posting open positions.Rules & GuidelinesInclude the company name in the post. If you want to be topsykret, go recruit elsewhere. Include the geographic location of the position along with the availability of relocation assistance or remote work.If you are a third party recruiter, you must disclose this in your posting.Please be thorough and upfront with the position details.Use of non-hr'd (realistic) requirements is encouraged.While it's fine to link to the position on your companies website, provide the important details in the comment.Mention if applicants should apply officially through HR, or directly through you.Please clearly list citizenship, visa, and security clearance requirements.You can see an example of acceptable posts by perusing past hiring threads.FeedbackFeedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)

Submitted January 03, 2022 at 08:45PM by ranok
via reddit https://ift.tt/3qCOqgs

Malicious Telegram Installer Drops Purple Fox Rootkit
https://ift.tt/3zkRceo

Submitted January 03, 2022 at 08:09PM by woja111
via reddit https://ift.tt/31lR9CD

Vulnerability in log4j 2.17.0 more hype than substance | LunaSec
https://ift.tt/3ELXhBF

Submitted January 03, 2022 at 09:58PM by breadchris
via reddit https://ift.tt/3pNy59C

One of my better-documented exploits, CVE-2017-5816 whitepaper
https://ift.tt/3JDK6X5

Submitted January 03, 2022 at 11:53PM by oxagast
via reddit https://ift.tt/3qOiczf

A Beginner's Story on How a Cheapo Standard Issue Router was hacked.
https://ift.tt/3zkg1XG

Submitted January 03, 2022 at 11:58PM by secnigma
via reddit https://ift.tt/3pOa8yZ

Domain Persistence - AdminSDHolder
https://ift.tt/3JDchpd

Submitted January 04, 2022 at 06:37PM by netbiosX
via reddit https://ift.tt/3mV28dw

Cache Poisoning at Scale
https://ift.tt/3JeJp6e

Submitted January 04, 2022 at 06:33PM by albinowax
via reddit https://ift.tt/3JHQv3o

Sears Garage Door Signal Reverse Engineering
https://ift.tt/3HBmKzs

Submitted January 04, 2022 at 09:30PM by mdulin2
via reddit https://ift.tt/3eMS3Lq

Inoitsu email breach analysis gives a summary of data found in all breaches for an address. This makes it much easier to tell what info may be at risk. Shows breakdowns of the type of data found and an unique Relative Exposure Rating to help make sense of the overall data risk. Instant results.
https://ift.tt/3HsIm14

Submitted January 05, 2022 at 08:58AM by inoitsu
via reddit https://ift.tt/3JI7RNW

Microsoft releases Windows Server Update to fix Remote Desktop Issues
https://ift.tt/3EZE7Iy

Submitted January 05, 2022 at 12:19PM by 97-007
via reddit https://ift.tt/3mZxcZL

The Kubernetes (K8s) Network Security Effect
https://ift.tt/3HArZPT

Submitted January 05, 2022 at 02:16PM by catgoddim
via reddit https://ift.tt/3sW9zFd

We desperately need a way to rapidly notify people of high-impact vulnerabilities, so I built one
https://ift.tt/3EVLlNT

Submitted January 05, 2022 at 08:09PM by sullivanmatt
via reddit https://ift.tt/3mTEgqX

Best Practices for Securing SSH in 2022
https://ift.tt/3G0Q3Lt

Submitted January 06, 2022 at 12:04AM by old-gregg
via reddit https://ift.tt/331SnTV

PPTShots - Unintentionally shared data in PowerPoint presentations
https://ift.tt/3eWcTId

Submitted January 06, 2022 at 02:13AM by df_works
via reddit https://ift.tt/3JVqLB0

SANS Christmas Challenge 2021 - Write-up
https://ift.tt/337rEoS

Submitted January 06, 2022 at 04:39PM by the-useless-one
via reddit https://ift.tt/3JHT9qd

Tek Fog: An App for Online Troops to Automate Hate, Manipulate Trends
https://ift.tt/3zw0Evp

Submitted January 06, 2022 at 04:10PM by goodwallboy
via reddit https://ift.tt/3qNlPoW

Asimov Security | Enterprise Ready Security Solutions For Robotics
https://ift.tt/3zuZj8n

Submitted January 06, 2022 at 07:44PM by Da5h_Solo
via reddit https://ift.tt/3eZrgM5

Announcing the first open source security tool for Heroku!
https://ift.tt/32SvUc8

Submitted January 06, 2022 at 11:48PM by cloud-defender
via reddit https://ift.tt/3q0SIPH

Garlicshare - Private and secure file sharing over the Tor network
https://ift.tt/3qW6yC9

Submitted January 07, 2022 at 12:06AM by ILDVUCE
via reddit https://ift.tt/31vpVJE

The JNDI Strikes Back – Unauthenticated RCE in H2 Database Console
https://ift.tt/3pZHISD

Submitted January 07, 2022 at 02:52AM by SRMish3
via reddit https://ift.tt/3F7bXeF