Oh Brother: Hackers can crash your unpatched printers – researchers
http://ift.tt/2m0XdL7
Submitted November 09, 2017 at 06:39AM by yourbasicgeek
via reddit http://ift.tt/2hUiUrZ
http://ift.tt/2m0XdL7
Submitted November 09, 2017 at 06:39AM by yourbasicgeek
via reddit http://ift.tt/2hUiUrZ
www.theregister.co.uk
Oh Brother: Hackers can crash your unpatched printers – researchers
DoSsing for fun and profit not just a 'nuisance', they warn
So did you include your computer monitors in your risk assessment? Better add it now!
http://ift.tt/2yjvsPQ
Submitted November 09, 2017 at 07:58AM by chull2058
via reddit http://ift.tt/2AwwrxJ
http://ift.tt/2yjvsPQ
Submitted November 09, 2017 at 07:58AM by chull2058
via reddit http://ift.tt/2AwwrxJ
SecureReading
A Monitor Darkly – Attack on Monitors Bypasses your Computer Security!
A Monitor Darkly, an attack on computer monitors, now wakes up the industry for further introspection.We were concerned about the Computer security for a while now. During a security review or assessments, how many of us included monitors?
The author of the KRACKATTACK exploit released source to allow people to test their own networks
http://ift.tt/2yFNY9e
Submitted November 09, 2017 at 07:43AM by chull2058
via reddit http://ift.tt/2yiYDCr
http://ift.tt/2yFNY9e
Submitted November 09, 2017 at 07:43AM by chull2058
via reddit http://ift.tt/2yiYDCr
GitHub
vanhoefm/krackattacks-noscripts
Contribute to krackattacks-noscripts development by creating an account on GitHub.
The Year Ahead in Cybersecurity
http://ift.tt/2zs12vW
Submitted November 09, 2017 at 08:08AM by julian88888888
via reddit http://ift.tt/2m6mXpx
http://ift.tt/2zs12vW
Submitted November 09, 2017 at 08:08AM by julian88888888
via reddit http://ift.tt/2m6mXpx
Bloomberg
The Year Ahead in Cybersecurity
Endgame Malware Researcher Amanda Rousseau discusses the greatest cyber threats facing business, government and individuals in 2018 at The Year Ahead Summit at Bloomberg headquarters in New York. (Source: Bloomberg)
Security Now 636 ROCA Pain | TWiT.TV
http://ift.tt/2zqtyy8
Submitted November 09, 2017 at 08:45AM by dmp1ce
via reddit http://ift.tt/2hWFosc
http://ift.tt/2zqtyy8
Submitted November 09, 2017 at 08:45AM by dmp1ce
via reddit http://ift.tt/2hWFosc
TWiT.tv
Security Now 636 ROCA Pain | TWiT.TV
This week we discuss the inevitable dilution in the value of code signing, a new worrisome cross-site privacy leakage, is Unix embedded in all our motherboards? The ongoing applica…
Risk Consulting – Security Services – SDB World
http://ift.tt/2hmzK5S
Submitted November 09, 2017 at 11:32AM by sdbworld
via reddit http://ift.tt/2jcDQxC
http://ift.tt/2hmzK5S
Submitted November 09, 2017 at 11:32AM by sdbworld
via reddit http://ift.tt/2jcDQxC
SDB World
Risk Consulting – Security Services – SDB World
Risk Consulting provides security services, Crisis Management , Assist management, Threat and Vulnerability Assessments.
The art of iOS and iCloud forensics
http://ift.tt/2imQOF3
Submitted November 09, 2017 at 12:19PM by numberbuzy
via reddit http://ift.tt/2hVQg9Y
http://ift.tt/2imQOF3
Submitted November 09, 2017 at 12:19PM by numberbuzy
via reddit http://ift.tt/2hVQg9Y
Powershell Socks5 Proxy
http://ift.tt/2zuLRSE
Submitted November 09, 2017 at 11:55AM by p3nt4
via reddit http://ift.tt/2iHkyg0
http://ift.tt/2zuLRSE
Submitted November 09, 2017 at 11:55AM by p3nt4
via reddit http://ift.tt/2iHkyg0
GitHub
p3nt4/Invoke-SocksProxy
Socks proxy server using powershell. Supports local and reverse connections for pivoting. - p3nt4/Invoke-SocksProxy
Remember Cisco is against TLS 1.3? Look at their unsecure switches
http://ift.tt/2mDYHqi
Submitted November 09, 2017 at 02:22PM by rediii123
via reddit http://ift.tt/2zJf3IK
http://ift.tt/2mDYHqi
Submitted November 09, 2017 at 02:22PM by rediii123
via reddit http://ift.tt/2zJf3IK
blogs@Cisco - Cisco Blogs
Cisco PSIRT – Mitigating and Detecting Potential Abuse of Cisco Smart Install Feature
A Cisco Security Response alerts about possible abuse of the Smart Install feature. While not considered a vulnerability, the Response provides guidance on how to protect their networks against abuse.
Where there's a JTAG, there's a way: obtaining full system access via USB. (Uses Intel ME)
http://ift.tt/2xTznBQ
Submitted November 09, 2017 at 04:46PM by joosto
via reddit http://ift.tt/2zthj3Z
http://ift.tt/2xTznBQ
Submitted November 09, 2017 at 04:46PM by joosto
via reddit http://ift.tt/2zthj3Z
Netflix scam detected
http://ift.tt/2yK0l3Z
Submitted November 09, 2017 at 06:14PM by 3f0x9
via reddit http://ift.tt/2jdt7mL
http://ift.tt/2yK0l3Z
Submitted November 09, 2017 at 06:14PM by 3f0x9
via reddit http://ift.tt/2jdt7mL
IT SECURITY GURU
Netflix scam detected - IT SECURITY GURU
Millions of people who hold a Netflix account are currently exposed to the latest email phishing scam that is telling users that their account is suspended due to a problem validating their credit cards. Beware – this is a scam. View Full Story ORIGINAL SOURCE:…
Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
http://ift.tt/1SheO7I
Submitted November 09, 2017 at 06:50PM by speckz
via reddit http://ift.tt/2m8ZDri
http://ift.tt/1SheO7I
Submitted November 09, 2017 at 06:50PM by speckz
via reddit http://ift.tt/2m8ZDri
GitHub
elceef/dnstwist
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation - elceef/dnstwist
Senators push to ditch Social Security numbers in light of Equifax hack
http://ift.tt/2zH57zg
Submitted November 09, 2017 at 06:19PM by Astralarogance
via reddit http://ift.tt/2zo8quJ
http://ift.tt/2zH57zg
Submitted November 09, 2017 at 06:19PM by Astralarogance
via reddit http://ift.tt/2zo8quJ
TechCrunch
Senators push to ditch Social Security numbers in light of Equifax hack
Eyeing more secure alternatives to Social Security numbers, lawmakers in the U.S. are looking abroad. Today, the Senate Commerce Committee questioned former Yahoo CEO Marissa Mayer, Verizon Chief…
VestaCP root Privilege Escalation (PHP-FPM + Nginx)
http://ift.tt/2AiAzB6
Submitted November 09, 2017 at 06:55PM by TarqDirtyToMe
via reddit http://ift.tt/2yLMmux
http://ift.tt/2AiAzB6
Submitted November 09, 2017 at 06:55PM by TarqDirtyToMe
via reddit http://ift.tt/2yLMmux
Christopher Tarquini's Blog
VestaCP - Root Privilege Escalation
VestaCP allows for root privilege escalation from PHP leveraging Nginx configuration.
A DoS Attack against the C# Compiler
http://ift.tt/2hTJSzR
Submitted November 09, 2017 at 06:42PM by maxxori
via reddit http://ift.tt/2m8OkPF
http://ift.tt/2hTJSzR
Submitted November 09, 2017 at 06:42PM by maxxori
via reddit http://ift.tt/2m8OkPF
reddit
A DoS Attack against the C# Compiler • r/netsec
3 points and 0 comments so far on reddit
Security In 5: Episode 108 - Top 10 Security Tips For Your Network - 2 - Patch
http://ift.tt/2jfZ91H
Submitted November 09, 2017 at 07:43PM by BinaryBlog
via reddit http://ift.tt/2hn6b4a
http://ift.tt/2jfZ91H
Submitted November 09, 2017 at 07:43PM by BinaryBlog
via reddit http://ift.tt/2hn6b4a
Libsyn
Security In Five Podcast: Episode 108 - Top 10 Security Tips For Your Network - 2 - Patch
Continuing with the mini-series Top 10 Security Tips For Your Network number 2 is about patching. Equifax happened, ultimately, due to a lack of prompt patching. Updates to your network components and software fix bugs, improve performance but also close…
iMessagesBackdoor - Outlook All Over Again
http://ift.tt/2zYhvqK
Submitted November 09, 2017 at 08:51PM by Killswitch-GUI
via reddit http://ift.tt/2Ao3Vx9
http://ift.tt/2zYhvqK
Submitted November 09, 2017 at 08:51PM by Killswitch-GUI
via reddit http://ift.tt/2Ao3Vx9
GitHub
checkyfuntime/iMessagesBackdoor
iMessagesBackdoor - A noscript to help set up an event handler in order to install a persistent backdoor that can be activated by sending a message.
Toast Overlay weaponized to install several Android malware
http://ift.tt/2zq3q92
Submitted November 09, 2017 at 08:45PM by EvanConover
via reddit http://ift.tt/2hWIUmz
http://ift.tt/2zq3q92
Submitted November 09, 2017 at 08:45PM by EvanConover
via reddit http://ift.tt/2hWIUmz
Trendmicro
Toast Overlay Weaponized to Install Several Android Malware - TrendLabs Security Intelligence Blog
We uncovered new Android malware that can surreptitiously install other malware on the affected device via the Toast Overlay attack: TOASTAMIGO.
Local File Read via XSS in a PDF
http://ift.tt/2AkvHdT
Submitted November 09, 2017 at 02:14PM by albinowax
via reddit http://ift.tt/2jgfun3
http://ift.tt/2AkvHdT
Submitted November 09, 2017 at 02:14PM by albinowax
via reddit http://ift.tt/2jgfun3
www.noob.ninja
Local File Read via XSS in Dynamically Generated PDF
Hello Hunters, This time I am writing about a Vulnerability found in another private program(xyz.com) on Bugcrowd ...
Finding my first CVE: Analysis of a Remote DoS vulnerability in VirtualBox
http://ift.tt/2m14ydV
Submitted November 10, 2017 at 12:47AM by vaiii
via reddit http://ift.tt/2zuU2Ax
http://ift.tt/2m14ydV
Submitted November 10, 2017 at 12:47AM by vaiii
via reddit http://ift.tt/2zuU2Ax
reddit
Finding my first CVE: Analysis of a Remote DoS... • r/netsec
1 points and 0 comments so far on reddit
[Sharing] OReilly Security Conference 2017
check here: http://ift.tt/2zKI0UN
Submitted November 10, 2017 at 12:40AM by Fssuploader
via reddit http://ift.tt/2zpo0X8
check here: http://ift.tt/2zKI0UN
Submitted November 10, 2017 at 12:40AM by Fssuploader
via reddit http://ift.tt/2zpo0X8
FAST RELEASE
OReilly Security Conference 2017 - FAST RELEASE
OReilly Security Conference 2017 - New York, NY MP4 | Video: AVC 1920x1080 | Audio: AAC 48KHz 2ch | Duration: 2 Hours | 4.20 GB