"New" attacks on TLS / HTTPS
http://ift.tt/2zUS2SC
Submitted November 21, 2017 at 04:23AM by agrrrdog
via reddit http://ift.tt/2hFgq07
http://ift.tt/2zUS2SC
Submitted November 21, 2017 at 04:23AM by agrrrdog
via reddit http://ift.tt/2hFgq07
GitHub
GrrrDog/TLS-Redirection
TLS-Redirection - TLS Redirection
Over 400 of the World's Most Popular Websites Record Your Every Keystroke, Princeton Researchers Find
http://ift.tt/2jEXv9L
Submitted November 21, 2017 at 05:56AM by oneultralamewhiteboy
via reddit http://ift.tt/2hPUR0A
http://ift.tt/2jEXv9L
Submitted November 21, 2017 at 05:56AM by oneultralamewhiteboy
via reddit http://ift.tt/2hPUR0A
Motherboard
Over 400 of the World's Most Popular Websites Record Your Every Keystroke, Princeton Researchers Find
“Session replay noscripts” can be used to log (and then playback) everything you typed or clicked on a website.
How would one setup to start pen testing?
Put random unsecured boxes on the net and have at it? Is there an index of unsecured boxes to test on maybe if you pay?Want to get a better idea of what is possible from an attackers position.Thank you for your input and have a good one.
Submitted November 21, 2017 at 11:37AM by Darknezz19
via reddit http://ift.tt/2hPGHg2
Put random unsecured boxes on the net and have at it? Is there an index of unsecured boxes to test on maybe if you pay?Want to get a better idea of what is possible from an attackers position.Thank you for your input and have a good one.
Submitted November 21, 2017 at 11:37AM by Darknezz19
via reddit http://ift.tt/2hPGHg2
reddit
How would one setup to start pen testing? • r/security
Put random unsecured boxes on the net and have at it? Is there an index of unsecured boxes to test on maybe if you pay? Want to get a better...
Government Cyber Security News - Cyware
http://ift.tt/2zUA1nm
Submitted November 21, 2017 at 01:37PM by cywarelabs
via reddit http://ift.tt/2hJlIaY
http://ift.tt/2zUA1nm
Submitted November 21, 2017 at 01:37PM by cywarelabs
via reddit http://ift.tt/2hJlIaY
Cyware
Government Cyber Security News | Cyber Security Infrastructure | Cyware
Cyware Presents Cyber News on the go. Receive Brief extracts of important government cyber security news articles, to keep you informed of the cyber incidents around the world.
7 Tips to Secure All Your Data and Network Endpoints
http://ift.tt/2mL6esh
Submitted November 21, 2017 at 02:29PM by jbirdsin
via reddit http://ift.tt/2jKaBCQ
http://ift.tt/2mL6esh
Submitted November 21, 2017 at 02:29PM by jbirdsin
via reddit http://ift.tt/2jKaBCQ
dzone.com
7 Tips to Secure All Your Data and Network Endpoints - DZone Security
A look at what dev teams and CISOs can do to ensure the security of their data and network when using a third-party service for data management/security.
Research firm fools iPhone X's Face ID with cheap mask
http://ift.tt/2B8I4v1
Submitted November 21, 2017 at 09:06AM by mycall
via reddit http://ift.tt/2hQOYQP
http://ift.tt/2B8I4v1
Submitted November 21, 2017 at 09:06AM by mycall
via reddit http://ift.tt/2hQOYQP
Technobuffalo
Research firm fools iPhone X’s Face ID with cheap mask
Before the iPhone X launched, Apple claimed the device’s Face ID system was very unlikely to be fooled. But according to Vietnamese cybersecurity firm Bkav, Apple’s technology was spoofed using a mask that cost only $150 to make.
Intel finds critical holes in secret Management Engine hidden in tons of desktop, server chipsets
http://ift.tt/2AYA9iS
Submitted November 21, 2017 at 03:02PM by thijser2
via reddit http://ift.tt/2mKreza
http://ift.tt/2AYA9iS
Submitted November 21, 2017 at 03:02PM by thijser2
via reddit http://ift.tt/2mKreza
www.theregister.co.uk
Intel finds critical holes in secret Management Engine hidden in tons of desktop, server chipsets
Bugs can be exploited to extract info, potentially insert rootkits
Affordable Electric Gates in Meath
http://ift.tt/2iAO87M
Submitted November 21, 2017 at 04:10PM by safesecureie
via reddit http://ift.tt/2AYPmk2
http://ift.tt/2iAO87M
Submitted November 21, 2017 at 04:10PM by safesecureie
via reddit http://ift.tt/2AYPmk2
SafeSecure Solution
About Us
Safe Secure Solutions
Safe Secure Solutions is a wholly owed Irish business established to provide cost effective security solutions to both residential and commercial customers.
Our highly skilled team has over 30 years experience in the security…
Safe Secure Solutions is a wholly owed Irish business established to provide cost effective security solutions to both residential and commercial customers.
Our highly skilled team has over 30 years experience in the security…
Microsoft Appears to Have Lost the Source Code of an Office Component
http://ift.tt/2zeOhrM
Submitted November 21, 2017 at 03:40PM by neau
via reddit http://ift.tt/2zUI5ot
http://ift.tt/2zeOhrM
Submitted November 21, 2017 at 03:40PM by neau
via reddit http://ift.tt/2zUI5ot
BleepingComputer
Microsoft Appears to Have Lost the Source Code of an Office Component
The way Microsoft patched a recent security bug has made several security and software experts believe the company might have lost the source code to one of its Office components.
Golden SAML: Newly Discovered Attack Technique Forges Authentication to Cloud Apps
http://ift.tt/2z9xSkr
Submitted November 21, 2017 at 06:38PM by alex_artol5
via reddit http://ift.tt/2zY2Qz0
http://ift.tt/2z9xSkr
Submitted November 21, 2017 at 06:38PM by alex_artol5
via reddit http://ift.tt/2zY2Qz0
CyberArk
Golden SAML: Newly Discovered Attack Technique Forges Authentication to Cloud Apps - CyberArk
In this blog post, we introduce a new attack vector discovered by CyberArk Labs and dubbed “golden SAML.” The vector enables an attacker to create a golden SAML, which is basically a forged SAML “authentication object,” and authenticate across every service…
Windows oneliners to download remote payload and execute arbitrary code
http://ift.tt/2zTK8J6
Submitted November 21, 2017 at 06:36PM by agumonkey
via reddit http://ift.tt/2hJ9QWo
http://ift.tt/2zTK8J6
Submitted November 21, 2017 at 06:36PM by agumonkey
via reddit http://ift.tt/2hJ9QWo
arno0x0x
Windows oneliners to download remote payload and execute arbitrary code
In the wake of the recent buzz and trend in using DDE for executing arbitrary command lines and eventually compromising a system, I asked myself « what are the coolest command lines an a…
Security In 5: Episode 116 - OWASP - A6 - Sensitive Data Exposure
http://ift.tt/2iBSDim
Submitted November 21, 2017 at 07:35PM by BinaryBlog
via reddit http://ift.tt/2AZqqJl
http://ift.tt/2iBSDim
Submitted November 21, 2017 at 07:35PM by BinaryBlog
via reddit http://ift.tt/2AZqqJl
Libsyn
Security In Five Podcast: Episode 116 - OWASP - A6 - Sensitive Data Exposure
Continuing with the OWASP Top 10 mini-series we are up to number 6, Sensitive Data Exposure. This episode reviews the challenge of figuring out what data you deem sensitive and all the areas you need to worry about securing properly to prevent leaking any…
OSINT from ship satcoms
http://ift.tt/2wUn20n
Submitted November 21, 2017 at 07:18PM by Kerrovitar
via reddit http://ift.tt/2zYwmCN
http://ift.tt/2wUn20n
Submitted November 21, 2017 at 07:18PM by Kerrovitar
via reddit http://ift.tt/2zYwmCN
Pentestpartners
OSINT from ship satcoms | Pen Test Partners
The Cobham 'Sailor 900' system is a bit more interesting from an information disclosure perspective: Search 'noscript:"sailor 900"' and you'll get the satellite
Senator Asks White House Cyber Chief to Block Malicious Ads on Government Networks
http://ift.tt/2j3vfcS
Submitted November 21, 2017 at 07:49PM by DJRWolf
via reddit http://ift.tt/2iDSJWZ
http://ift.tt/2j3vfcS
Submitted November 21, 2017 at 07:49PM by DJRWolf
via reddit http://ift.tt/2iDSJWZ
BleepingComputer
Senator Asks White House Cyber Chief to Block Malicious Ads on Government Networks
A US senator has asked the White House to look into the threat that malicious ads —also known as malvertising— pose to US government networks and computers.
Symantec has released an update to address an issue in the Symantec Management Console product (CVE-2017-15527)
http://ift.tt/2jd3Vt0
Submitted November 21, 2017 at 08:38PM by EvanConover
via reddit http://ift.tt/2jKA2UI
http://ift.tt/2jd3Vt0
Submitted November 21, 2017 at 08:38PM by EvanConover
via reddit http://ift.tt/2jKA2UI
Denmark to ramp up cyber security efforts - defence minister
http://ift.tt/2mNSZqF
Submitted November 21, 2017 at 08:26PM by pmillerbd
via reddit http://ift.tt/2zoZ2YM
http://ift.tt/2mNSZqF
Submitted November 21, 2017 at 08:26PM by pmillerbd
via reddit http://ift.tt/2zoZ2YM
reddit
Denmark to ramp up cyber security efforts - defence... • r/security
1 points and 0 comments so far on reddit
Announcing Qaclana - a Web Application Firewall (WAF) built for cloud-native workloads
http://ift.tt/2AkxmUU
Submitted November 21, 2017 at 09:22PM by jpkroehling
via reddit http://ift.tt/2zVRWKQ
http://ift.tt/2AkxmUU
Submitted November 21, 2017 at 09:22PM by jpkroehling
via reddit http://ift.tt/2zVRWKQ
Medium
Announcing Qaclana
I’m proud to announce the Qaclana project, a Web Application Firewall (WAF) built for cloud-native workloads.
10 critical security skills every IT team needs
http://ift.tt/2AkquqB
Submitted November 21, 2017 at 09:13PM by jenwei2000
via reddit http://ift.tt/2zWw81o
http://ift.tt/2AkquqB
Submitted November 21, 2017 at 09:13PM by jenwei2000
via reddit http://ift.tt/2zWw81o
CIO
10 critical security skills every IT team needs
Focus on hiring talent with the following security skills and your team will be equipped to prevent, protect and mitigate the damage of cybersecurity attacks — and speed recovery efforts.
The results from the 2017 Volatility Plugin Contest are in!
http://ift.tt/2zV2n1d
Submitted November 21, 2017 at 10:09PM by transt
via reddit http://ift.tt/2zpIP5m
http://ift.tt/2zV2n1d
Submitted November 21, 2017 at 10:09PM by transt
via reddit http://ift.tt/2zpIP5m
volatility-labs.blogspot.co.uk
Results from the (5th Annual) 2017 Volatility Plugin Contest are in!
Congratulations to all the participants! This year's contest resulted in a ton of new and exciting functionality available to law enforcem...
How Ransomware Is Bleeding Over From Desktop to Mobile
http://ift.tt/2zo22EJ
Submitted November 21, 2017 at 10:51PM by Mi3Security
via reddit http://ift.tt/2mP2upG
http://ift.tt/2zo22EJ
Submitted November 21, 2017 at 10:51PM by Mi3Security
via reddit http://ift.tt/2mP2upG
Mi3 Security
How Ransomware Is Bleeding Over From Desktop to Mobile
Ransomware is rapidly becoming one of the biggest Android malware threats.
Millennials are Top IT Security Risk for Businesses
http://ift.tt/2B2SXgK
Submitted November 21, 2017 at 11:29PM by BCNGroup
via reddit http://ift.tt/2iEAArV
http://ift.tt/2B2SXgK
Submitted November 21, 2017 at 11:29PM by BCNGroup
via reddit http://ift.tt/2iEAArV
IT Support & Consultancy - Stockport, Cheshire, Manchester & Beyond
Millennials are Top IT Security Risk for Businesses | IT Support & Consultancy - Stockport, Cheshire, Manchester & Beyond
According to research by FirstData, millennials are less concerned with cybersecurity than older generations...