The SCRAM Authentication Protocol
http://ift.tt/2EqnHdS
Submitted February 14, 2018 at 06:49PM by cleeus
via reddit http://ift.tt/2o5m8Ly
http://ift.tt/2EqnHdS
Submitted February 14, 2018 at 06:49PM by cleeus
via reddit http://ift.tt/2o5m8Ly
Does anyone else find a public security issue on VirusTotal ironic?
http://ift.tt/2BY89AC
Submitted February 14, 2018 at 07:11PM by Gobo42
via reddit http://ift.tt/2Bs9uyy
http://ift.tt/2BY89AC
Submitted February 14, 2018 at 07:11PM by Gobo42
via reddit http://ift.tt/2Bs9uyy
Rogue AD Accounts
Hey guys - this topic has been on my mind as of late and I wanted to know if you could reccomend any software products that could scan for rogue AD accounts. Basically, we've had turnover in our IT dept and a former co-worker mentioned to me (after the fact) that he at some point created AD accounts with a decent amount of permissions. I want to a) possibly have reporting on thiis 2) possibly prevent this. We also have had a unique situation where someone else was let go and I want to ensure they dont have access. Any knowledge will be helpful. Thanks!
Submitted February 14, 2018 at 06:50PM by gabesans
via reddit http://ift.tt/2C0LbbO
Hey guys - this topic has been on my mind as of late and I wanted to know if you could reccomend any software products that could scan for rogue AD accounts. Basically, we've had turnover in our IT dept and a former co-worker mentioned to me (after the fact) that he at some point created AD accounts with a decent amount of permissions. I want to a) possibly have reporting on thiis 2) possibly prevent this. We also have had a unique situation where someone else was let go and I want to ensure they dont have access. Any knowledge will be helpful. Thanks!
Submitted February 14, 2018 at 06:50PM by gabesans
via reddit http://ift.tt/2C0LbbO
reddit
Rogue AD Accounts • r/security
Hey guys - this topic has been on my mind as of late and I wanted to know if you could reccomend any software products that could scan for rogue...
Cybersecurity & Technology Risk in Healthcare
http://ift.tt/2svtH3y
Submitted February 14, 2018 at 06:34PM by Uminekoshi
via reddit http://ift.tt/2BY1YMG
http://ift.tt/2svtH3y
Submitted February 14, 2018 at 06:34PM by Uminekoshi
via reddit http://ift.tt/2BY1YMG
SoundCloud
Episode 6 - Cybersecurity & Technology Risk in Healthcare
In this CyberTangent episode, we are joined by Tiffany Rosik, a Healthcare Business and Operations Consultant. Our podcast host is Landon Johnson.
Today's topic is "Cybersecurity & Technology Risk in
Today's topic is "Cybersecurity & Technology Risk in
DoubleDoor IoT Botnet Abuses Two Bugs to Bypass Firewalls, Modems
http://ift.tt/2F08RMd
Submitted February 14, 2018 at 06:24PM by Iot_Security
via reddit http://ift.tt/2BwICx4
http://ift.tt/2F08RMd
Submitted February 14, 2018 at 06:24PM by Iot_Security
via reddit http://ift.tt/2BwICx4
The State of Security
DoubleDoor IoT Botnet Abuses Two Bugs to Bypass Firewalls, Modems
The DoubleDoor Internet of Things (IoT) botnet circumvents firewall protection and other security measures by abusing two vulnerabilities.
Water Utility Infected by Cryptocurrency Mining Software
http://ift.tt/2Esb4lL
Submitted February 14, 2018 at 08:09PM by volci
via reddit http://ift.tt/2CkwPyE
http://ift.tt/2Esb4lL
Submitted February 14, 2018 at 08:09PM by volci
via reddit http://ift.tt/2CkwPyE
Water Utility Infected by Cryptocurrency Mining Software
http://ift.tt/2Esb4lL
Submitted February 14, 2018 at 08:09PM by volci
via reddit http://ift.tt/2CkwPyE
http://ift.tt/2Esb4lL
Submitted February 14, 2018 at 08:09PM by volci
via reddit http://ift.tt/2CkwPyE
reddit
Water Utility Infected by Cryptocurrency Mining Software • r/security
2 points and 0 comments so far on reddit
Telegram zero-day exploit is a warning
http://ift.tt/2o5H5WJ
Submitted February 14, 2018 at 07:56PM by wlscr
via reddit http://ift.tt/2EuF8Or
http://ift.tt/2o5H5WJ
Submitted February 14, 2018 at 07:56PM by wlscr
via reddit http://ift.tt/2EuF8Or
Roses are red, Kaspersky is blue: 'That ban's unconstitutional!' Boo hoo hoo
http://ift.tt/2Bv7bLd
Submitted February 14, 2018 at 07:55PM by wlscr
via reddit http://ift.tt/2BY5Kpo
http://ift.tt/2Bv7bLd
Submitted February 14, 2018 at 07:55PM by wlscr
via reddit http://ift.tt/2BY5Kpo
www.theregister.co.uk
Roses are red, Kaspersky is blue: 'That ban's unconstitutional!' Boo hoo hoo
New front opens in Russian firm's legal fight with US gov
Security In 5: Episode 174 - How To Create An Incident Response Plan In A Few Easy Steps
http://ift.tt/2BtR9AV
Submitted February 14, 2018 at 07:35PM by BinaryBlog
via reddit http://ift.tt/2C2zIZs
http://ift.tt/2BtR9AV
Submitted February 14, 2018 at 07:35PM by BinaryBlog
via reddit http://ift.tt/2C2zIZs
Libsyn
Security In Five Podcast: Episode 174 - How To Create An Incident Response Plan In A Few Easy Steps
When you have an incident in your business, from a virus infection or massive outage, do you and your business know how to react? Incident response plans are an important part of an effective security program. This episode lays out some simple steps to begin…
Why the hack-back is still the worst idea in cybersecurity
http://ift.tt/2Es1ETZ
Submitted February 14, 2018 at 09:05PM by CrankyBear
via reddit http://ift.tt/2F4if1s
http://ift.tt/2Es1ETZ
Submitted February 14, 2018 at 09:05PM by CrankyBear
via reddit http://ift.tt/2F4if1s
TechBeacon
Why the hack-back is still the worst idea in cybersecurity
Too much can go wrong when private firms have permission to pursue attackers into other companies' networks, security experts say.
Using Google Analytics for data extraction - How to Bypassing CSP with Google Analytics
http://ift.tt/2Dqn0Rr
Submitted February 14, 2018 at 10:08PM by speckz
via reddit http://ift.tt/2F2YbfH
http://ift.tt/2Dqn0Rr
Submitted February 14, 2018 at 10:08PM by speckz
via reddit http://ift.tt/2F2YbfH
reddit
Using Google Analytics for data extraction - How to... • r/security
1 points and 0 comments so far on reddit
Forensic Readiness: Setting the Foundation For Cybersecurity
http://ift.tt/2Ge1Y9o
Submitted February 14, 2018 at 10:06PM by houlila
via reddit http://ift.tt/2EE6Zem
http://ift.tt/2Ge1Y9o
Submitted February 14, 2018 at 10:06PM by houlila
via reddit http://ift.tt/2EE6Zem
CrossRealms
Forensic Readiness: Setting the Foundation For Cybersecurity
Although data collection is a sub section of forensic readiness, it cannot be underestimated because in every incident I have participated in, the logs pertaining to the attack were never sufficient.
Can Consumers' Online Data Be Protected?
http://ift.tt/2EpjcAq
Submitted February 14, 2018 at 11:34PM by volci
via reddit http://ift.tt/2EtU5R1
http://ift.tt/2EpjcAq
Submitted February 14, 2018 at 11:34PM by volci
via reddit http://ift.tt/2EtU5R1
reddit
Can Consumers' Online Data Be Protected? • r/security
1 points and 0 comments so far on reddit
Did the UN check their certs before declaring Symantec the most ethical company?
http://ift.tt/2Eo9SAS
Submitted February 14, 2018 at 11:54PM by Noobmode
via reddit http://ift.tt/2o6CWlr
http://ift.tt/2Eo9SAS
Submitted February 14, 2018 at 11:54PM by Noobmode
via reddit http://ift.tt/2o6CWlr
Symantec
ROI That Matters – Return On Integrity
For 11th Consecutive Year, Symantec Recognized as one of the World's Most Ethical Companies
Meltdown, Spectre, and user stories from the new security “normal”
http://ift.tt/2nZpLn0
Submitted February 15, 2018 at 12:46AM by personman
via reddit http://ift.tt/2o7yXoC
http://ift.tt/2nZpLn0
Submitted February 15, 2018 at 12:46AM by personman
via reddit http://ift.tt/2o7yXoC
Medium
Meltdown, Spectre, and user stories from the new security “normal”
This article was originally published on the ThoughtWorks Insights blog.
Your ISP is Probably Spying On You
http://ift.tt/2F79a8h
Submitted February 15, 2018 at 02:11AM by fo0bat
via reddit http://ift.tt/2Ety3JO
http://ift.tt/2F79a8h
Submitted February 15, 2018 at 02:11AM by fo0bat
via reddit http://ift.tt/2Ety3JO
Orchestrating New Employee Onboarding With Custom Playbook
http://ift.tt/2Clbrta
Submitted February 15, 2018 at 02:09AM by abhishekiyer
via reddit http://ift.tt/2F79bJn
http://ift.tt/2Clbrta
Submitted February 15, 2018 at 02:09AM by abhishekiyer
via reddit http://ift.tt/2F79bJn
Demisto
How Demisto Uses Demisto Part 1: Orchestrating Employee Onboarding
Learn how we use a custom Demisto playbook that orchestrates actions across people, processes, and technology to ensure seamless new employee onboarding.
U.S. intelligence agencies are still warning against buying Huawei and ZTE phones
http://ift.tt/2HdI6Vg
Submitted February 15, 2018 at 01:43AM by liotier
via reddit http://ift.tt/2ssoSrL
http://ift.tt/2HdI6Vg
Submitted February 15, 2018 at 01:43AM by liotier
via reddit http://ift.tt/2ssoSrL
TechCrunch
U.S. intelligence agencies are still warning against buying Huawei and ZTE phones
Things are still looking pretty bleak for Huawei’s plans to conquer the U.S. market. Earlier this week, half a dozen top members of intelligence agencies, including the FBI, CIA and NSA…
Differing service names in the Google Service Management API cause an authorization bypass (And a $7500 bounty)
http://ift.tt/2Bu8cD2
Submitted February 15, 2018 at 01:37AM by epereiralopez
via reddit http://ift.tt/2EIZOlg
http://ift.tt/2Bu8cD2
Submitted February 15, 2018 at 01:37AM by epereiralopez
via reddit http://ift.tt/2EIZOlg
Google
$7.5k Google services mix-up - Ezequiel Pereira
Testing
ROP, NX and ASLR - A Love Triangle - Remote Code Execution - CVE-2018-5767
http://ift.tt/2Ckmnra
Submitted February 15, 2018 at 03:24AM by JustAPenTester
via reddit http://ift.tt/2sun95n
http://ift.tt/2Ckmnra
Submitted February 15, 2018 at 03:24AM by JustAPenTester
via reddit http://ift.tt/2sun95n
Fidus InfoSecurity | Cyber Security, Penetration Testing, Red Teaming
ROP, NX and ASLR - A Love Triangle - Remote Code Execution - CVE-2018-5767 - Fidus InfoSecurity | Cyber Security, Penetration Testing…
Remote Code Execution (CVE-2018-5767) Walkthrough on Tenda AC15 Router Introduction In this post we will be presenting a pre-authenticated remote code execution vulnerability present in Tenda’s AC15 router. We start by analysing the vulnerability, before…