A Sheep in Wolf’s Clothing – Finding RCE in HP’s Printer Fleet
http://ift.tt/2zmhbGJ
Submitted November 21, 2017 at 01:01AM by breen-machine
via reddit http://ift.tt/2zSwfLF
http://ift.tt/2zmhbGJ
Submitted November 21, 2017 at 01:01AM by breen-machine
via reddit http://ift.tt/2zSwfLF
Foxglovesecurity
A Sheep in Wolf’s Clothing – Finding RCE in HP’s Printer Fleet
By @breenmachine Sometimes the marketing department goes a little too far. Most of us who work in security have been there, non-technical people enthusiastic about selling the technical feat…
"The Security Awareness Board Game - At the EU #SecAwareSummit"
http://ift.tt/2mIBkRc
Submitted November 21, 2017 at 01:37AM by volci
via reddit http://ift.tt/2hQRwhE
http://ift.tt/2mIBkRc
Submitted November 21, 2017 at 01:37AM by volci
via reddit http://ift.tt/2hQRwhE
securingthehuman.sans.org
Security Awareness Blog | The Security Awareness Board Game - At the EU #SecAwareSummit
Security Awareness Blog blog pertaining to The Security Awareness Board Game - At the EU #SecAwareSummit
OWASP Top 10 - 2017 (pdf)
http://ift.tt/2z4aViD
Submitted November 21, 2017 at 02:21AM by based2
via reddit http://ift.tt/2B7UFye
http://ift.tt/2z4aViD
Submitted November 21, 2017 at 02:21AM by based2
via reddit http://ift.tt/2B7UFye
Man gets threats—not bug bounty—after finding DJI customer data in public view
http://ift.tt/2zbOV9y
Submitted November 21, 2017 at 02:51AM by speckz
via reddit http://ift.tt/2hPzY5q
http://ift.tt/2zbOV9y
Submitted November 21, 2017 at 02:51AM by speckz
via reddit http://ift.tt/2hPzY5q
Ars Technica
Man gets threats—not bug bounty—after finding DJI customer data in public view
A bug bounty hunter shared evidence; DJI called him a hacker and threatened with CFAA.
[Part 1] - Analysis the new Linux/AES.DDoS IoT malware
http://ift.tt/2mM3DhP
Submitted November 21, 2017 at 03:28AM by LloydLabs
via reddit http://ift.tt/2izGRFi
http://ift.tt/2mM3DhP
Submitted November 21, 2017 at 03:28AM by LloydLabs
via reddit http://ift.tt/2izGRFi
reddit
[Part 1] - Analysis the new Linux/AES.DDoS IoT malware • r/netsec
reddit: the front page of the internet
Intel audits their management engine and surprises fucking nobody
http://ift.tt/2iAjwDe
Submitted November 21, 2017 at 03:21AM by SlackerCrewsic
via reddit http://ift.tt/2AYeI1v
http://ift.tt/2iAjwDe
Submitted November 21, 2017 at 03:21AM by SlackerCrewsic
via reddit http://ift.tt/2AYeI1v
reddit
Intel audits their management engine and surprises... • r/netsec
3 points and 1 comments so far on reddit
Mobile banking Trojan sneaks into Google Play targeting Wells Fargo, Chase and Citibank customers
http://ift.tt/2z2CvNa
Submitted November 21, 2017 at 04:05AM by EvanConover
via reddit http://ift.tt/2zlakNN
http://ift.tt/2z2CvNa
Submitted November 21, 2017 at 04:05AM by EvanConover
via reddit http://ift.tt/2zlakNN
Avast
Mobile banking Trojan sneaks into Google Play targeting Wells Fargo, Chase and Citibank customers
Malicious mobile BankBot Trojan injected into everyday apps, taking advantage of unknowing users whose banking apps could be compromised
[Part 1] - Analysing the new Linux/AES.DDoS IoT malware.
http://ift.tt/2mM3DhP
Submitted November 21, 2017 at 03:49AM by LloydLabs
via reddit http://ift.tt/2jH3fA1
http://ift.tt/2mM3DhP
Submitted November 21, 2017 at 03:49AM by LloydLabs
via reddit http://ift.tt/2jH3fA1
reddit
[Part 1] - Analysing the new Linux/AES.DDoS IoT malware. • r/netsec
1 points and 0 comments so far on reddit
The Humble Book Bundle: Java presented by O’Reilly is Live
http://ift.tt/2znSCcf
Submitted November 21, 2017 at 04:28AM by 13378
via reddit http://ift.tt/2hFVfuL
http://ift.tt/2znSCcf
Submitted November 21, 2017 at 04:28AM by 13378
via reddit http://ift.tt/2hFVfuL
Humble Bundle
Humble Book Bundle: Java by O'Reilly
Pay what you want for books on Java and support charity!
"New" attacks on TLS / HTTPS
http://ift.tt/2zUS2SC
Submitted November 21, 2017 at 04:23AM by agrrrdog
via reddit http://ift.tt/2hFgq07
http://ift.tt/2zUS2SC
Submitted November 21, 2017 at 04:23AM by agrrrdog
via reddit http://ift.tt/2hFgq07
GitHub
GrrrDog/TLS-Redirection
TLS-Redirection - TLS Redirection
Over 400 of the World's Most Popular Websites Record Your Every Keystroke, Princeton Researchers Find
http://ift.tt/2jEXv9L
Submitted November 21, 2017 at 05:56AM by oneultralamewhiteboy
via reddit http://ift.tt/2hPUR0A
http://ift.tt/2jEXv9L
Submitted November 21, 2017 at 05:56AM by oneultralamewhiteboy
via reddit http://ift.tt/2hPUR0A
Motherboard
Over 400 of the World's Most Popular Websites Record Your Every Keystroke, Princeton Researchers Find
“Session replay noscripts” can be used to log (and then playback) everything you typed or clicked on a website.
How would one setup to start pen testing?
Put random unsecured boxes on the net and have at it? Is there an index of unsecured boxes to test on maybe if you pay?Want to get a better idea of what is possible from an attackers position.Thank you for your input and have a good one.
Submitted November 21, 2017 at 11:37AM by Darknezz19
via reddit http://ift.tt/2hPGHg2
Put random unsecured boxes on the net and have at it? Is there an index of unsecured boxes to test on maybe if you pay?Want to get a better idea of what is possible from an attackers position.Thank you for your input and have a good one.
Submitted November 21, 2017 at 11:37AM by Darknezz19
via reddit http://ift.tt/2hPGHg2
reddit
How would one setup to start pen testing? • r/security
Put random unsecured boxes on the net and have at it? Is there an index of unsecured boxes to test on maybe if you pay? Want to get a better...
Government Cyber Security News - Cyware
http://ift.tt/2zUA1nm
Submitted November 21, 2017 at 01:37PM by cywarelabs
via reddit http://ift.tt/2hJlIaY
http://ift.tt/2zUA1nm
Submitted November 21, 2017 at 01:37PM by cywarelabs
via reddit http://ift.tt/2hJlIaY
Cyware
Government Cyber Security News | Cyber Security Infrastructure | Cyware
Cyware Presents Cyber News on the go. Receive Brief extracts of important government cyber security news articles, to keep you informed of the cyber incidents around the world.
7 Tips to Secure All Your Data and Network Endpoints
http://ift.tt/2mL6esh
Submitted November 21, 2017 at 02:29PM by jbirdsin
via reddit http://ift.tt/2jKaBCQ
http://ift.tt/2mL6esh
Submitted November 21, 2017 at 02:29PM by jbirdsin
via reddit http://ift.tt/2jKaBCQ
dzone.com
7 Tips to Secure All Your Data and Network Endpoints - DZone Security
A look at what dev teams and CISOs can do to ensure the security of their data and network when using a third-party service for data management/security.
Research firm fools iPhone X's Face ID with cheap mask
http://ift.tt/2B8I4v1
Submitted November 21, 2017 at 09:06AM by mycall
via reddit http://ift.tt/2hQOYQP
http://ift.tt/2B8I4v1
Submitted November 21, 2017 at 09:06AM by mycall
via reddit http://ift.tt/2hQOYQP
Technobuffalo
Research firm fools iPhone X’s Face ID with cheap mask
Before the iPhone X launched, Apple claimed the device’s Face ID system was very unlikely to be fooled. But according to Vietnamese cybersecurity firm Bkav, Apple’s technology was spoofed using a mask that cost only $150 to make.
Intel finds critical holes in secret Management Engine hidden in tons of desktop, server chipsets
http://ift.tt/2AYA9iS
Submitted November 21, 2017 at 03:02PM by thijser2
via reddit http://ift.tt/2mKreza
http://ift.tt/2AYA9iS
Submitted November 21, 2017 at 03:02PM by thijser2
via reddit http://ift.tt/2mKreza
www.theregister.co.uk
Intel finds critical holes in secret Management Engine hidden in tons of desktop, server chipsets
Bugs can be exploited to extract info, potentially insert rootkits
Affordable Electric Gates in Meath
http://ift.tt/2iAO87M
Submitted November 21, 2017 at 04:10PM by safesecureie
via reddit http://ift.tt/2AYPmk2
http://ift.tt/2iAO87M
Submitted November 21, 2017 at 04:10PM by safesecureie
via reddit http://ift.tt/2AYPmk2
SafeSecure Solution
About Us
Safe Secure Solutions
Safe Secure Solutions is a wholly owed Irish business established to provide cost effective security solutions to both residential and commercial customers.
Our highly skilled team has over 30 years experience in the security…
Safe Secure Solutions is a wholly owed Irish business established to provide cost effective security solutions to both residential and commercial customers.
Our highly skilled team has over 30 years experience in the security…
Microsoft Appears to Have Lost the Source Code of an Office Component
http://ift.tt/2zeOhrM
Submitted November 21, 2017 at 03:40PM by neau
via reddit http://ift.tt/2zUI5ot
http://ift.tt/2zeOhrM
Submitted November 21, 2017 at 03:40PM by neau
via reddit http://ift.tt/2zUI5ot
BleepingComputer
Microsoft Appears to Have Lost the Source Code of an Office Component
The way Microsoft patched a recent security bug has made several security and software experts believe the company might have lost the source code to one of its Office components.
Golden SAML: Newly Discovered Attack Technique Forges Authentication to Cloud Apps
http://ift.tt/2z9xSkr
Submitted November 21, 2017 at 06:38PM by alex_artol5
via reddit http://ift.tt/2zY2Qz0
http://ift.tt/2z9xSkr
Submitted November 21, 2017 at 06:38PM by alex_artol5
via reddit http://ift.tt/2zY2Qz0
CyberArk
Golden SAML: Newly Discovered Attack Technique Forges Authentication to Cloud Apps - CyberArk
In this blog post, we introduce a new attack vector discovered by CyberArk Labs and dubbed “golden SAML.” The vector enables an attacker to create a golden SAML, which is basically a forged SAML “authentication object,” and authenticate across every service…
Windows oneliners to download remote payload and execute arbitrary code
http://ift.tt/2zTK8J6
Submitted November 21, 2017 at 06:36PM by agumonkey
via reddit http://ift.tt/2hJ9QWo
http://ift.tt/2zTK8J6
Submitted November 21, 2017 at 06:36PM by agumonkey
via reddit http://ift.tt/2hJ9QWo
arno0x0x
Windows oneliners to download remote payload and execute arbitrary code
In the wake of the recent buzz and trend in using DDE for executing arbitrary command lines and eventually compromising a system, I asked myself « what are the coolest command lines an a…
Security In 5: Episode 116 - OWASP - A6 - Sensitive Data Exposure
http://ift.tt/2iBSDim
Submitted November 21, 2017 at 07:35PM by BinaryBlog
via reddit http://ift.tt/2AZqqJl
http://ift.tt/2iBSDim
Submitted November 21, 2017 at 07:35PM by BinaryBlog
via reddit http://ift.tt/2AZqqJl
Libsyn
Security In Five Podcast: Episode 116 - OWASP - A6 - Sensitive Data Exposure
Continuing with the OWASP Top 10 mini-series we are up to number 6, Sensitive Data Exposure. This episode reviews the challenge of figuring out what data you deem sensitive and all the areas you need to worry about securing properly to prevent leaking any…