The third annual Cyber Security Summit: Atlanta connects C-Suite & Senior Executives responsible for protecting their companies’ critical infrastructures with innovative solution providers and renowned information security experts. Admission is $350 each…

PERVS were able to watch thousands of British kids online after hackers broke into school CCTV systems and broadcast the footage on the internet. Surveillance feeds from four schools were among hun…

It is expected that Google officially announces the newest version on his mobile platform. It should be on May, 8th during the I/O developers conference in Mountain View, California but little by l…

Findsploit - Find exploits in local and online databases instantly

A warning upfront: this is not a “passwords are dead pls don’t use” article, but my attempt at convincing you to consider alternatives to password authentication. I also include a primer on the different passwordless authentication techniques you might want…

Don’t have time to read? Start listening to this blog post now: As a 20+ year security, compliance, and risk veteran, I am surprised that no one has solved the security risk puzzle yet.  Trust me, I’ve tried, and so have others.  But, here we are in 2018…

10 questions a CISO has to ask to gain a rockstar team around the organization to protect and reduce risks.

tl;dr - a collection of nearly 3k alleged data breaches has appeared with a bunch of data already proven legitimate from previous incidents, but also tens of millions of addresses that haven't been seen in HIBP before. Those 80M records are now searchable…

Google has a security research team called Project Zero that looks for security vulnerabilities in pretty much anything. There is an agreed rule that ethical security researchers notify vendors of any vulnerabilities found and allow the vendor 90 days to…

1 points and 0 comments so far on reddit

vuejs-serverside-template-xss - Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability

In the early days of the encrypted web you could get certificates valid for any period of time. Long gone are those days and as more time goes by we realise just how much we need to be doing a lot more to greatly reduce the maximum validity period on

Threat Report 2017 for Nepal

Video from at least four UK schools is being streamed live online, from outside pick-up points, corridors, playgrounds, and toilets.

Vol. 6 | No. 2 | 2018 | Click here to Download the Entire Issue The 11th issue of JCTS (Journal of Conflict Transformation & Security) is out now... Download the issue here... TABLE OF CONTENTS Introductory Note Five generations after the Balfour Declaration: How…

Our Smart Lock Installations are latest trends in the Locksmith industry for better security. They can be unlocked with smartphones and convenient for commercial & residential security. Call 08 9444 2089.

Free Ethical Hacking Course. Module 5 - System Hacking, you will learn the techniques that hackers use to attack objective systems.

In short: On 23rd February 2018, CoinDash received 20,000 ETH from the address that stole approximately 37,000 ETH during CoinDash ICO event which was held in July 2017. This marks the second instance tranche of funds to the company’s wallet from the address…

Pulsedive is a free threat intelligence platform. Search, scan, and enrich IPs, URLs, domains and other IOCs from OSINT feeds or submit your own.

Note: This is the second in a two-part blog series. This companion blog post covers the more technical, prenoscriptive tactics on executing…

A misguided bill in Georgia (S.B. 315) threatens to criminalize independent computer security research and punish ordinary technology users who violate fine-print terms of service clauses. S.B. 315 is currently making its way through the state’s legislature…