IoT Security standards and guidelines
Does anyone know sources of open standards regarding IoT security?I could find good information from NIST, OWASP and GSMA.GSMA -> https://www.gsma.com/iot/future-iot-networks/iot-security-guidelines/OWASP -> https://www.owasp.org/index.php/OWASP_Internet_of_Things_ProjectNIST -> https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-183.pdf
Submitted March 07, 2018 at 12:33AM by neomer22
via reddit http://ift.tt/2D2K4Vj
Does anyone know sources of open standards regarding IoT security?I could find good information from NIST, OWASP and GSMA.GSMA -> https://www.gsma.com/iot/future-iot-networks/iot-security-guidelines/OWASP -> https://www.owasp.org/index.php/OWASP_Internet_of_Things_ProjectNIST -> https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-183.pdf
Submitted March 07, 2018 at 12:33AM by neomer22
via reddit http://ift.tt/2D2K4Vj
Internet of Things
GSMA IoT Security Guidelines | Internet of Things
GSMA IoT Security Guidelines & Assessment Drawing on the extensive security expertise of the mobile industry, the GSMA has delivered a set of IoT Security Guidelines, backed by an IoT Security Assessment scheme, to provide a proven and robust approach …
Clang CFI Bypass Techniques
http://ift.tt/2HaMHXp
Submitted March 06, 2018 at 11:20PM by aohgdao
via reddit http://ift.tt/2Fvk3Dq
http://ift.tt/2HaMHXp
Submitted March 06, 2018 at 11:20PM by aohgdao
via reddit http://ift.tt/2Fvk3Dq
GitHub
0xcl/clang-cfi-bypass-techniques
clang-cfi-bypass-techniques - Exploitation techniques to bypass Clang CFI when applied to Chromium
Is it possible that scammers hack someone's website and pursue their scam under that person's domain?
Long story short, I received a scam Paypal mail that links to a website where you are asked to update your PayPal information. The website is nearly identical to paypal.com in all aspects but the domain name, and I almost fell for the scam until I saw the url. Upon further investigation, I found the owner of the domain with all his personal information. I messaged him on twitter, and he claims he was hacked, and that he has notified the host. Please note that the scam website has been running for at least a month, probably longer (I received the mail a month ago, only checked it today). But the domain itself has been registered under his name for at least 7 years, possibly much longer. Other than that, the owner of the domain does not respond to my questions. I have recorded everything and I'm willing to expose this douchebag, who is surprisingly an Israeli lecturer at some university by the way. But I'm thinking, what if he really was hacked and had no idea this was happening? I find that unlikely but maybe things like this have happened before. I'm willing to provide any information you guys might need to corroborate my story.
Submitted March 07, 2018 at 02:11AM by mrdexie
via reddit http://ift.tt/2FgwUKr
Long story short, I received a scam Paypal mail that links to a website where you are asked to update your PayPal information. The website is nearly identical to paypal.com in all aspects but the domain name, and I almost fell for the scam until I saw the url. Upon further investigation, I found the owner of the domain with all his personal information. I messaged him on twitter, and he claims he was hacked, and that he has notified the host. Please note that the scam website has been running for at least a month, probably longer (I received the mail a month ago, only checked it today). But the domain itself has been registered under his name for at least 7 years, possibly much longer. Other than that, the owner of the domain does not respond to my questions. I have recorded everything and I'm willing to expose this douchebag, who is surprisingly an Israeli lecturer at some university by the way. But I'm thinking, what if he really was hacked and had no idea this was happening? I find that unlikely but maybe things like this have happened before. I'm willing to provide any information you guys might need to corroborate my story.
Submitted March 07, 2018 at 02:11AM by mrdexie
via reddit http://ift.tt/2FgwUKr
reddit
Is it possible that scammers hack someone's website... • r/security
Long story short, I received a scam Paypal mail that links to a website where you are asked to update your PayPal information. The website is...
How many websites have exposed their entire source codes?
https://twitter.com/mixnode/status/969265512680075264
Submitted March 07, 2018 at 01:54AM by mixnode
via reddit http://ift.tt/2Fkhoc5
https://twitter.com/mixnode/status/969265512680075264
Submitted March 07, 2018 at 01:54AM by mixnode
via reddit http://ift.tt/2Fkhoc5
Twitter
Mixnode
Ran a quick crawl on 10M websites; 8,012 (0.08%) have their .git folders exposed publicly (aka their entire source codes). This is a large ratio since there are over 100M active sites. #HideYourGits Fun fact: websites using HTTPS are twice as likely to be…
Point-of-Sale Breach Affects 160+ Applebee's Locations
http://ift.tt/2D4K8UD
Submitted March 07, 2018 at 03:08AM by petermal67
via reddit http://ift.tt/2FZ6pGn
http://ift.tt/2D4K8UD
Submitted March 07, 2018 at 03:08AM by petermal67
via reddit http://ift.tt/2FZ6pGn
Digital Guardian
Point-of-Sale Breach Affects 160+ Applebee's Locations
A breach at one of Applebee's largest franchisees, RMH Franchise Holdings, affected over 160 restaurants late last year.
Adapting hashcat for SAP ‘half hashes’
http://ift.tt/2HaJPdk
Submitted March 07, 2018 at 01:40AM by gelim
via reddit http://ift.tt/2G42F6F
http://ift.tt/2HaJPdk
Submitted March 07, 2018 at 01:40AM by gelim
via reddit http://ift.tt/2G42F6F
ERPScan
Adapting hashcat for SAP ‘half hashes’
In this article we will show how to adapt hashcat to work with SAP’s “half hashes”. Context One crucial aspect during SAP penetration testing is abusing users’ privileges after we got access to their passwords. We often encounter a scenario when the server…
Was I legitimately hacked?
I think I might have been legitimately hacked through my iPhone, but I am not sure. I would really appreciate your guys' help.I was watching some explicit content in a private session in Safari on my iPhone running iOS 11.2.6. I accidentally navigated to a website that was clearly malicious -- it was the classic "you have won an Apple device" scam or something. However, this was different. Safari was completely locked up. I couldn't click any buttons in Safari, close the tabs, or anything. I could exit the app, but re-entering didn't allow me to regain control. After exiting the app and reentering multiple times, I was eventually able to close the tab.Just a little bit ago, I got an email to my personal email containing the following:Good day {my full name}. Just got several issues to resolve with you, won't take too long, for you to go through and will definitely get your awareness. Exactly how will you really feel if all ur relatives or friends will witness you taking care of your own self? How would they feel is the correct question here.You see where I am going with this one? I have infected a number of adult porn websites with my malware that steals all info from the machine and obtains an access to it's cams, and a lot more. And so today i have a video clip of u wanking and a film u jerked to, additionally all your contacts.It is your job e-mail, that I have located on your personal ps btw.Oh yeah, I have additionally edited the video to fit on a single screen, so it is going to be more comfortable to enjoy for everybody. Anyway- if u want me to get rid of all ur contact info with the video, this is my BTC wallet address -1CFdsWVuZVMJuk6bQVC16T8992XHBv5MhLjust make sure that you won't copy no spaces or different symbols. U can quickly get the info on the internet on how you can use this payment method if you do not know how to. 630 is the sum in us dollars i will need to leave you alone permanently.This letter has invisible monitoring tool inside and i will know when you will open it, and from that minute on, you will receive 5 days, to make-up ur mind.i promise that every single contact coming from ur list will see this movie, in case for whatever reason i won't see my funds. You are welcome to get in touch with ur nearby cops or anyone, i doubt it will help.I thought it was bs at first, but they got access to my personal email as well as my full name. Once I realized that, I got pretty nervous. Any advice would be extremely appreciated. Thank you.
Submitted March 07, 2018 at 06:21AM by alwsfwd
via reddit http://ift.tt/2Fr9QYH
I think I might have been legitimately hacked through my iPhone, but I am not sure. I would really appreciate your guys' help.I was watching some explicit content in a private session in Safari on my iPhone running iOS 11.2.6. I accidentally navigated to a website that was clearly malicious -- it was the classic "you have won an Apple device" scam or something. However, this was different. Safari was completely locked up. I couldn't click any buttons in Safari, close the tabs, or anything. I could exit the app, but re-entering didn't allow me to regain control. After exiting the app and reentering multiple times, I was eventually able to close the tab.Just a little bit ago, I got an email to my personal email containing the following:Good day {my full name}. Just got several issues to resolve with you, won't take too long, for you to go through and will definitely get your awareness. Exactly how will you really feel if all ur relatives or friends will witness you taking care of your own self? How would they feel is the correct question here.You see where I am going with this one? I have infected a number of adult porn websites with my malware that steals all info from the machine and obtains an access to it's cams, and a lot more. And so today i have a video clip of u wanking and a film u jerked to, additionally all your contacts.It is your job e-mail, that I have located on your personal ps btw.Oh yeah, I have additionally edited the video to fit on a single screen, so it is going to be more comfortable to enjoy for everybody. Anyway- if u want me to get rid of all ur contact info with the video, this is my BTC wallet address -1CFdsWVuZVMJuk6bQVC16T8992XHBv5MhLjust make sure that you won't copy no spaces or different symbols. U can quickly get the info on the internet on how you can use this payment method if you do not know how to. 630 is the sum in us dollars i will need to leave you alone permanently.This letter has invisible monitoring tool inside and i will know when you will open it, and from that minute on, you will receive 5 days, to make-up ur mind.i promise that every single contact coming from ur list will see this movie, in case for whatever reason i won't see my funds. You are welcome to get in touch with ur nearby cops or anyone, i doubt it will help.I thought it was bs at first, but they got access to my personal email as well as my full name. Once I realized that, I got pretty nervous. Any advice would be extremely appreciated. Thank you.
Submitted March 07, 2018 at 06:21AM by alwsfwd
via reddit http://ift.tt/2Fr9QYH
reddit
Was I legitimately hacked? • r/security
I think I might have been legitimately hacked through my iPhone, but I am not sure. I would really appreciate your guys' help. I was watching...
Is PreyProject safe to use as far as privacy?
Haven't seen any negative reports on them, but I am still giving them a lot of leeway. It's great to have a free app to track my laptop and phone if they are lost/stolen, but at what cost?
Submitted March 07, 2018 at 05:48AM by SteveBozell
via reddit http://ift.tt/2HeNxmf
Haven't seen any negative reports on them, but I am still giving them a lot of leeway. It's great to have a free app to track my laptop and phone if they are lost/stolen, but at what cost?
Submitted March 07, 2018 at 05:48AM by SteveBozell
via reddit http://ift.tt/2HeNxmf
reddit
Is PreyProject safe to use as far as privacy? • r/security
Haven't seen any negative reports on them, but I am still giving them a lot of leeway. It's great to have a free app to track my laptop and phone...
POS Malware Found at 160 Applebee's Restaurant Locations
http://ift.tt/2I7QqGs
Submitted March 07, 2018 at 05:37AM by volci
via reddit http://ift.tt/2FuDHPF
http://ift.tt/2I7QqGs
Submitted March 07, 2018 at 05:37AM by volci
via reddit http://ift.tt/2FuDHPF
Threatpost | The first stop for security news
POS Malware Found at 160 Applebee's Restaurant Locations
Malware found on POS systems at Applebee's restaurants potentially stole customer credit card information.
Vulnerability Affects Half of the Internet's Email Servers
http://ift.tt/2Fv3BTy
Submitted March 07, 2018 at 05:24AM by majorllama
via reddit http://ift.tt/2oNGJ86
http://ift.tt/2Fv3BTy
Submitted March 07, 2018 at 05:24AM by majorllama
via reddit http://ift.tt/2oNGJ86
BleepingComputer
Vulnerability Affects Half of the Internet's Email Servers
A critical vulnerability affects hundreds of thousands of email servers. A fix has been released but this flaw affects more than half of the Internet's email servers, and patching the issue will take weeks if not months.
How Hackers Bypassed an Adobe Flash Protection Mechanism
http://ift.tt/2FhHShO
Submitted March 07, 2018 at 10:06AM by TechLord2
via reddit http://ift.tt/2HcxJQG
http://ift.tt/2FhHShO
Submitted March 07, 2018 at 10:06AM by TechLord2
via reddit http://ift.tt/2HcxJQG
McAfee Blogs
How Hackers Bypassed an Adobe Flash Protection Mechanism | McAfee Blogs
The number of Flash Player exploits has recently declined, due to Adobe’s introduction of various measures to strengthen Flash’s security. Occasionally, however, an exploit still arises. On January 31, Kr-Cert reported a zero-day vulnerability, identified…
Encryption 101: How to break encryption - Malwarebytes Labs
http://ift.tt/2He6SUD
Submitted March 07, 2018 at 10:17AM by TechLord2
via reddit http://ift.tt/2tnhfDd
http://ift.tt/2He6SUD
Submitted March 07, 2018 at 10:17AM by TechLord2
via reddit http://ift.tt/2tnhfDd
Malwarebytes Labs
Encryption 101: How to break encryption - Malwarebytes Labs
Continuing on in our Encryption 101 series, we now look at what it takes to break encryption. In order for something as powerful as encryption to break, there needs to be some kind of weakness to exploit. That weakness is often a result of an error in implementation.
Encryption 101: ShiOne ransomware case study - Malwarebytes Labs
http://ift.tt/2CqbsAI
Submitted March 07, 2018 at 10:14AM by TechLord2
via reddit http://ift.tt/2Hd6VA7
http://ift.tt/2CqbsAI
Submitted March 07, 2018 at 10:14AM by TechLord2
via reddit http://ift.tt/2Hd6VA7
Malwarebytes Labs
Encryption 101: ShiOne ransomware case study - Malwarebytes Labs
In this case study on ShiOne ransomware, part of our Encryption 101 series, we will be reviewing the encryption process line by line and showing the different methods ransomware can use to encrypt files.
CyberArk Labs - Kerberos Decryption
http://ift.tt/2tnm4MP
Submitted March 07, 2018 at 02:20AM by bono353
via reddit http://ift.tt/2FhswdY
http://ift.tt/2tnm4MP
Submitted March 07, 2018 at 02:20AM by bono353
via reddit http://ift.tt/2FhswdY
R.I.P. Kernelmode.info - Popular InfoSec Site Closes Down
http://ift.tt/2oVaJ11
Submitted March 07, 2018 at 01:50PM by alessiodelv
via reddit http://ift.tt/2FiiVUf
http://ift.tt/2oVaJ11
Submitted March 07, 2018 at 01:50PM by alessiodelv
via reddit http://ift.tt/2FiiVUf
BleepingComputer
R.I.P. Kernelmode.info - Popular InfoSec Site Closes Down
Today we mark the passing of a great information security site called Kernelmode.info. Created back in 2010 by a security developer named A_D_13, it quickly became a popular forum for the analysis of malware.
Vulnerability Affects Half of the Internet's Email Servers
http://ift.tt/2Fv3BTy
Submitted March 07, 2018 at 01:48PM by alessiodelv
via reddit http://ift.tt/2D4QUJZ
http://ift.tt/2Fv3BTy
Submitted March 07, 2018 at 01:48PM by alessiodelv
via reddit http://ift.tt/2D4QUJZ
BleepingComputer
Vulnerability Affects Half of the Internet's Email Servers
A critical vulnerability affects hundreds of thousands of email servers. A fix has been released but this flaw affects more than half of the Internet's email servers, and patching the issue will take weeks if not months.
Starting in Security or transitioning into security wiki
http://ift.tt/2Foc0EW
Submitted March 07, 2018 at 02:21PM by Chouma
via reddit http://ift.tt/2FfjEFE
http://ift.tt/2Foc0EW
Submitted March 07, 2018 at 02:21PM by Chouma
via reddit http://ift.tt/2FfjEFE
Peerlyst
A collection of posts about moving into or starting an InfoSec career
Reading material:How to Make a Career Change from IT to Cyber Security? by Magda CHELLY, CISSP, Ph.D. How to Build a Successful Information Security Career by Chiheb Chebbi https://tisiphone.net/2015/10/12/starting-an-infosec-career-the-megamix-cha
Security Update Rolling out for Google Pixel, Nexus Devices
http://ift.tt/2Fm4cUp
Submitted March 07, 2018 at 02:06PM by technewstuff
via reddit http://ift.tt/2FfjGxg
http://ift.tt/2Fm4cUp
Submitted March 07, 2018 at 02:06PM by technewstuff
via reddit http://ift.tt/2FfjGxg
Technology News
March Android Security Update Rolling out for Google Pixel,Nexus Devices - Technology News
March Android Security Update: Google’s new Pixel Phones are actually the great products of the famous search engine namely the
These Are Most Worst Types Of Cyber Attacks
http://ift.tt/2tqC8xk
Submitted March 07, 2018 at 03:23PM by tomzikerburg009
via reddit http://ift.tt/2tkx5i9
http://ift.tt/2tqC8xk
Submitted March 07, 2018 at 03:23PM by tomzikerburg009
via reddit http://ift.tt/2tkx5i9
Tech Whirl Pool
6 Worst Types Of Cyber Attacks & Best Ways To Stay Protected
6 Worst Types Of Cyber Attacks & Best Ways To Stay Protected: http://bit.ly/2FogI5A
Payload Generation using SharpShooter
http://ift.tt/2G2mpaE
Submitted March 07, 2018 at 03:19PM by dmchell
via reddit http://ift.tt/2D8hPEv
http://ift.tt/2G2mpaE
Submitted March 07, 2018 at 03:19PM by dmchell
via reddit http://ift.tt/2D8hPEv
reddit
Payload Generation using SharpShooter • r/netsec
2 points and 0 comments so far on reddit
DAFF: Android application (browsers & pdf readers) fuzzing framework with fuzzers and crash monitor
http://ift.tt/2FsFtAP
Submitted March 07, 2018 at 02:53PM by ajinabraham
via reddit http://ift.tt/2G1Qwz3
http://ift.tt/2FsFtAP
Submitted March 07, 2018 at 02:53PM by ajinabraham
via reddit http://ift.tt/2G1Qwz3
GitHub
ajinabraham/Droid-Application-Fuzz-Framework
Droid-Application-Fuzz-Framework - Android application fuzzing framework with fuzzers and crash monitor.