Great Incident Response: Grammarly, -addon for Chrome or Firefox- the vulnerable spellchecker got fixed in 2 days.
http://ift.tt/2nFGKdU
Submitted February 06, 2018 at 03:47PM by akapranos
via reddit http://ift.tt/2nLiXZa
http://ift.tt/2nFGKdU
Submitted February 06, 2018 at 03:47PM by akapranos
via reddit http://ift.tt/2nLiXZa
easy InfoSec for all, for everyone
Grammarly exposed user’s sensitive data on Chrome and Firefox
You are writing something in your browser like an email or a blog and you wish to check your grammar and use a spell checker for it. There are thousands of tools you can add to your browser (add-on…
Research papers and Youtube videos from BlueHat Israel 2018
http://ift.tt/2EMkDtm
Submitted February 06, 2018 at 05:12PM by campuscodi
via reddit http://ift.tt/2E6JVBF
http://ift.tt/2EMkDtm
Submitted February 06, 2018 at 05:12PM by campuscodi
via reddit http://ift.tt/2E6JVBF
reddit
Research papers and Youtube videos from BlueHat Israel 2018 • r/netsec
2 points and 0 comments so far on reddit
The IoT CyberSecurity arms race is about to escalate
http://tek.io/2EjuDwu
Submitted February 06, 2018 at 05:55PM by Iot_Security
via reddit http://ift.tt/2GS5uHD
http://tek.io/2EjuDwu
Submitted February 06, 2018 at 05:55PM by Iot_Security
via reddit http://ift.tt/2GS5uHD
TechRepublic
The IoT cybersecurity arms race is about to escalate
As IT innovations like big data, automation, and IoT evolve so too do cyber-threats. TechRepublic's Bill Detwiler details the latest business technology cybersecurity trends from TechProResearch.
How fingerprint sensors work? Are under screen fingerprint scanners secure enough?
https://youtu.be/OmZEaS4biuk
Submitted February 06, 2018 at 06:58PM by iamparameswaran
via reddit http://ift.tt/2nNZ83A
https://youtu.be/OmZEaS4biuk
Submitted February 06, 2018 at 06:58PM by iamparameswaran
via reddit http://ift.tt/2nNZ83A
YouTube
How fingerprint scanners work? Are under-screen touch IDs, new trend? Galaxy S10 fingerprint reader
In CES 2018, Vivo unvieled under screen fingerprint scanner. The first of its kind. Is this making a mark in smartphones? Like diminishing bezels was a trend in 2017, would under screen fingerprint scanner be the new smartphone innovation in 2018? We'll find…
Phone was held by state authorities for five hours...
Let us say that, hypothetically, a smart phone was seized by authorities upon exit from a sensitive country and held for five hours before being returned to me.Erring on the side of caution, what efforts would you take, apart from wiping the phone?
Submitted February 06, 2018 at 07:36PM by CiggyTardust
via reddit http://ift.tt/2FP2ef6
Let us say that, hypothetically, a smart phone was seized by authorities upon exit from a sensitive country and held for five hours before being returned to me.Erring on the side of caution, what efforts would you take, apart from wiping the phone?
Submitted February 06, 2018 at 07:36PM by CiggyTardust
via reddit http://ift.tt/2FP2ef6
reddit
Phone was held by state authorities for five hours... • r/security
Let us say that, hypothetically, a smart phone was seized by authorities upon exit from a sensitive country and held for five hours before being...
Security In 5: Episode 168 - Celebrate Safer Internet Day Today!
http://ift.tt/2EllKT9
Submitted February 06, 2018 at 07:32PM by BinaryBlog
via reddit http://ift.tt/2FTGrTn
http://ift.tt/2EllKT9
Submitted February 06, 2018 at 07:32PM by BinaryBlog
via reddit http://ift.tt/2FTGrTn
Libsyn
Security In Five Podcast: Episode 168 - Celebrate Safer Internet Day Today!
Today is Safer Internet Day! A day each year in February to help bring awareness for creating a safer Internet for children and young people. The 2018 theme, "Create, connect and share respect: A better internet starts with you" is a call to action for every…
Flash 0-Day In The Wild: Group 123 At The Controls
http://ift.tt/2EyiFwK
Submitted February 06, 2018 at 08:21PM by Sjoerder
via reddit http://ift.tt/2BZE0we
http://ift.tt/2EyiFwK
Submitted February 06, 2018 at 08:21PM by Sjoerder
via reddit http://ift.tt/2BZE0we
Talosintelligence
Flash 0 Day In The Wild: Group 123 At The Controls
A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group
Grammarly: auth tokens are accessible to all websites
http://ift.tt/2EfDy2d
Submitted February 06, 2018 at 08:08PM by Sjoerder
via reddit http://ift.tt/2nOzhbI
http://ift.tt/2EfDy2d
Submitted February 06, 2018 at 08:08PM by Sjoerder
via reddit http://ift.tt/2nOzhbI
reddit
Grammarly: auth tokens are accessible to all websites • r/netsec
1 points and 0 comments so far on reddit
Cryptocurrency Botnets Potentially Damaging Business Operations
http://ift.tt/2E6FJBH
Submitted February 06, 2018 at 08:35PM by htbridgedigital
via reddit http://ift.tt/2nGOAUq
http://ift.tt/2E6FJBH
Submitted February 06, 2018 at 08:35PM by htbridgedigital
via reddit http://ift.tt/2nGOAUq
Htbridge
Cryptocurrency Botnets Potentially Damaging Business Operations
One example, the Smominru cryptocurrency botnet, has infected 526,000 machines, generated as much as $3.6 million.
230-OOB - An Out-of-Band XXE server for retrieving file contents over FTP
http://ift.tt/2FRs16m
Submitted February 06, 2018 at 09:17PM by howucan
via reddit http://ift.tt/2nON0iK
http://ift.tt/2FRs16m
Submitted February 06, 2018 at 09:17PM by howucan
via reddit http://ift.tt/2nON0iK
howucan.gr
230-OOB - An Out-of-Band XXE server for retrieving file contents over FTP
230-OOB - An Out-of-Band XXE server for retrieving file contents over FTP
Bug bounty left over (and rant) Part III (Google and Twitter)
http://ift.tt/2E7tUQ1
Submitted February 06, 2018 at 09:05PM by asanso
via reddit http://ift.tt/2E3Qrcd
http://ift.tt/2E7tUQ1
Submitted February 06, 2018 at 09:05PM by asanso
via reddit http://ift.tt/2E3Qrcd
Intothesymmetry
Bug bounty left over (and rant) Part III (Google and Twitter)
tl;dr in this blog post I am going to talk about some bug bounty left over with a little rant. Here you can find bug bounty left over part...
Smart Homes - Inadequate Security?
http://ift.tt/2BXvmhD
Submitted February 06, 2018 at 09:10PM by Mi3Security
via reddit http://ift.tt/2nHOTyB
http://ift.tt/2BXvmhD
Submitted February 06, 2018 at 09:10PM by Mi3Security
via reddit http://ift.tt/2nHOTyB
Mi3 Security
Smart Homes - Inadequate Security?
The rise of Alexa, Siri and Google Home make it easy to say commands to unlock your door, or turn on your television and set your lights to 50% brightness. However, this convenience factor presents a new and unique risk to the security posture of your home.
Robin Hood vs Cisco ASA AnyConnect - Recon Brussels
http://ift.tt/2BJo7hR
Submitted February 06, 2018 at 10:01PM by bill__24
via reddit http://ift.tt/2C0MJy1
http://ift.tt/2BJo7hR
Submitted February 06, 2018 at 10:01PM by bill__24
via reddit http://ift.tt/2C0MJy1
reddit
Robin Hood vs Cisco ASA AnyConnect - Recon Brussels • r/netsec
4 points and 0 comments so far on reddit
ZDI Researcher digs through a failed patch for more post-auth bugs in HPE IMC and provides Metasploit module for testing.
http://ift.tt/2FSwmpZ
Submitted February 06, 2018 at 09:55PM by RedmondSecGnome
via reddit http://ift.tt/2E5566X
http://ift.tt/2FSwmpZ
Submitted February 06, 2018 at 09:55PM by RedmondSecGnome
via reddit http://ift.tt/2E5566X
Zero Day Initiative
One man's patch is another man's treasure: A tale of a failed HPE patch
A further analysis of various attack vectors in HPE IMC – Part 2. You can find Part 1 here. Developers often think code behind an authentication mechanism is safe from attackers and therefore the program inputs are relatively “safe.” This thought often results…
dnscrypt-proxy 2.0.0 released
http://ift.tt/1gYmWJe
Submitted February 06, 2018 at 09:41PM by jedisct1
via reddit http://ift.tt/2nFYJ3F
http://ift.tt/1gYmWJe
Submitted February 06, 2018 at 09:41PM by jedisct1
via reddit http://ift.tt/2nFYJ3F
GitHub
GitHub - DNSCrypt/dnscrypt-proxy: dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols. - GitHub - DNSCrypt/dnscrypt-proxy: dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protoc...
A witch-hunt for trojans in our chips
http://ift.tt/2nFYpCa
Submitted February 06, 2018 at 10:46PM by sjmurdoch
via reddit http://ift.tt/2E5pJE1
http://ift.tt/2nFYpCa
Submitted February 06, 2018 at 10:46PM by sjmurdoch
via reddit http://ift.tt/2E5pJE1
reddit
A witch-hunt for trojans in our chips • r/netsec
1 points and 0 comments so far on reddit
Joomla! 3.8.3 Core: Privilege Escalation via SQL Injection
http://ift.tt/2C0ERfX
Submitted February 06, 2018 at 11:20PM by websecdev
via reddit http://ift.tt/2BZXssK
http://ift.tt/2C0ERfX
Submitted February 06, 2018 at 11:20PM by websecdev
via reddit http://ift.tt/2BZXssK
It’s Hard To Change The Keys To The Internet And It Involves Destroying HSM’s
http://ift.tt/2FT8Jxc
Submitted February 07, 2018 at 05:22AM by rmddos
via reddit http://ift.tt/2EpUao0
http://ift.tt/2FT8Jxc
Submitted February 07, 2018 at 05:22AM by rmddos
via reddit http://ift.tt/2EpUao0
Cloudflare Blog
It’s Hard To Change The Keys To The Internet And It Involves Destroying HSM’s
The root of the DNS tree has been using DNSSEC to protect the zone content since 2010. DNSSEC is simply a mechanism to provide cryptographic signatures alongside DNS records that can be validated, i.e. prove the answer is correct and has not been tampered…
Internals of AFL fuzzer - QEMU Instrumentation
http://ift.tt/2E2Zie7
Submitted February 07, 2018 at 05:10AM by tunnelshade
via reddit http://ift.tt/2FPlI35
http://ift.tt/2E2Zie7
Submitted February 07, 2018 at 05:10AM by tunnelshade
via reddit http://ift.tt/2FPlI35
usn-search: a tool to facilitate local search and processing of Ubuntu's packages vulnerabilities and its CVEs.
http://ift.tt/2GT3Cyv
Submitted February 07, 2018 at 06:06AM by lukeberner
via reddit http://ift.tt/2nHQxzY
http://ift.tt/2GT3Cyv
Submitted February 07, 2018 at 06:06AM by lukeberner
via reddit http://ift.tt/2nHQxzY
GitHub
lukeber4/usn-search
usn-search is a tool to import USN (Ubuntu Security Notices) database dump into a MongoDB to facilitate search and processing of .deb packages vulnerabilities and its CVEs.
usn-search: a tool to facilitate local search and processing of Ubuntu's packages vulnerabilities and its CVEs.
http://ift.tt/2GT3Cyv
Submitted February 07, 2018 at 06:06AM by lukeberner
via reddit http://ift.tt/2nHQxzY
http://ift.tt/2GT3Cyv
Submitted February 07, 2018 at 06:06AM by lukeberner
via reddit http://ift.tt/2nHQxzY
GitHub
lukeber4/usn-search
usn-search is a tool to import USN (Ubuntu Security Notices) database dump into a MongoDB to facilitate search and processing of .deb packages vulnerabilities and its CVEs.