Cyber debt - What is the cost of doing nothing?
http://ift.tt/2p881Gu
Submitted March 13, 2018 at 06:49PM by Uminekoshi
via reddit http://ift.tt/2FxQCS3
http://ift.tt/2p881Gu
Submitted March 13, 2018 at 06:49PM by Uminekoshi
via reddit http://ift.tt/2FxQCS3
Nehemiah Security
The High Cost of Doing Nothing - Nehemiah Security
In business, the name of the game is to make hard choices with the hope that the decision made will pay off. IT is not exempt from these difficult decisions. Originally coined in 1992 to address quick and dirty coding in software development, technical debt…
FireEye's Marina Krotofil On Triton and ICS Threats (video)
http://ift.tt/2DliJ0N
Submitted March 13, 2018 at 06:44PM by volci
via reddit http://ift.tt/2FGgZkM
http://ift.tt/2DliJ0N
Submitted March 13, 2018 at 06:44PM by volci
via reddit http://ift.tt/2FGgZkM
Threatpost | The first stop for security news
FireEye's Marina Krotofil On Triton and ICS Threats
At the Security Analyst Summit this year in Cancun, FireEye's Marina Krotofil talks about the Triton malware, first disclosed in December 2017, that targets industrial control systems.
When I used the password recovery function, I received my old password.
Hello,I am worried because the trading platform I am using, provided me with my old password when I used the password recovery. I thought that the passwords were encrypted and they cannot be restored. Is the fact that they have provided me with my password a sign of weak security and lack of encryption?
Submitted March 13, 2018 at 06:29PM by slickobro
via reddit http://ift.tt/2FzLHji
Hello,I am worried because the trading platform I am using, provided me with my old password when I used the password recovery. I thought that the passwords were encrypted and they cannot be restored. Is the fact that they have provided me with my password a sign of weak security and lack of encryption?
Submitted March 13, 2018 at 06:29PM by slickobro
via reddit http://ift.tt/2FzLHji
reddit
When I used the password recovery function, I... • r/security
Hello, I am worried because the trading platform I am using, provided me with my old password when I used the password recovery. I thought that...
TSA Accused of Searching Devices During Domestic Travel
http://ift.tt/2FOLpnS
Submitted March 13, 2018 at 07:29PM by nojohntrumbull
via reddit http://ift.tt/2Hs0MQz
http://ift.tt/2FOLpnS
Submitted March 13, 2018 at 07:29PM by nojohntrumbull
via reddit http://ift.tt/2Hs0MQz
Tom's Guide
TSA Accused of Searching Your Devices
There are a growing number of reports that the Transportation Security Administration (TSA) is searching electronic devices at security checkpoints for domestic flights within the United States.
Security In 5: Episode 192 - How Much Is Your Identity Worth On The Dark Web
http://ift.tt/2pcvyFt
Submitted March 13, 2018 at 07:58PM by BinaryBlog
via reddit http://ift.tt/2IqgGwc
http://ift.tt/2pcvyFt
Submitted March 13, 2018 at 07:58PM by BinaryBlog
via reddit http://ift.tt/2IqgGwc
Libsyn
Security In Five Podcast: Episode 192 - How Much Is Your Identity Worth On The Dark Web
When you identity is stolen one of two things will happen. The thief will use your information or they will sell it. The Dark Web is the place where the nefarious actions take place but do you know how much you digital life is actually worth? This episode…
IDN Homograph attack is back for some crypto
http://ift.tt/2FMv8js
Submitted March 13, 2018 at 09:19PM by jekapats
via reddit http://ift.tt/2tMl1GJ
http://ift.tt/2FMv8js
Submitted March 13, 2018 at 09:19PM by jekapats
via reddit http://ift.tt/2tMl1GJ
PhishAI
IDN Homograph Attack Is Back For Some Crypto | PhishAI
Homograph attacks are a decade-old problem. Last time it made headlines was just last week with the attack on Binanace Exchange and before that when security enthusiast, Xudong Zheng published a vulnerability in the way modern browsers handle domain names.…
Secunia PSI will be end-of-life on April 20 (2018)
http://ift.tt/2HyeW2K
Submitted March 13, 2018 at 09:06PM by retrodanny
via reddit http://ift.tt/2tHFqN9
http://ift.tt/2HyeW2K
Submitted March 13, 2018 at 09:06PM by retrodanny
via reddit http://ift.tt/2tHFqN9
Assessment Mindset - I hope this mindmap could be useful for the infosec community when doing pentesting, bug bounty and red-team assessments. Feel free to contribute.
http://ift.tt/2pbpY6n
Submitted March 13, 2018 at 08:35PM by s0pas
via reddit http://ift.tt/2IlNYwt
http://ift.tt/2pbpY6n
Submitted March 13, 2018 at 08:35PM by s0pas
via reddit http://ift.tt/2IlNYwt
GitHub
dsopas/assessment-mindset
assessment-mindset - I hope this mindmap could be useful for the infosec community when doing pentesting, bug bounty, red-team assessments, etc.
Severe Security Advisory on AMD Processors
https://amdflaws.com/
Submitted March 13, 2018 at 08:15PM by I_am_UNIX
via reddit http://ift.tt/2p4Xqwc
https://amdflaws.com/
Submitted March 13, 2018 at 08:15PM by I_am_UNIX
via reddit http://ift.tt/2p4Xqwc
reddit
Severe Security Advisory on AMD Processors • r/netsec
14 points and 8 comments so far on reddit
CCleaner Attackers Intended To Deploy Keylogger In Third Stage
http://ift.tt/2FxJrcj
Submitted March 13, 2018 at 09:02PM by EvanConover
via reddit http://ift.tt/2FDABWA
http://ift.tt/2FxJrcj
Submitted March 13, 2018 at 09:02PM by EvanConover
via reddit http://ift.tt/2FDABWA
Threatpost | The first stop for security news
CCleaner Attackers Intended To Deploy Keylogger In Third Stage
As investigations continue about the backdoor that was planted in CCleaner, Avast said it has found that the actors behind the attack were planning to install a third round of malware on compromised computers.
Phantom Secure is one of the most infamous companies in the secure phone industry. Sources and court documents detail that its owner has been arrested for allegedly helping criminal organizations.
http://ift.tt/2p4KRjl
Submitted March 13, 2018 at 09:53PM by GemmaJ123
via reddit http://ift.tt/2p7InAW
http://ift.tt/2p4KRjl
Submitted March 13, 2018 at 09:53PM by GemmaJ123
via reddit http://ift.tt/2p7InAW
Motherboard
Feds Bust CEO Allegedly Selling Custom BlackBerry Phones to Sinaloa Drug Cartel
Phantom Secure is one of the most infamous companies in the secure phone industry. Sources and court documents detail that its owner has been arrested for allegedly helping criminal organizations.
Researchers say AMD has a big chip security problem to solve
http://ift.tt/2DnyBQp
Submitted March 13, 2018 at 09:51PM by ScurfyBun
via reddit http://ift.tt/2In0tYv
http://ift.tt/2DnyBQp
Submitted March 13, 2018 at 09:51PM by ScurfyBun
via reddit http://ift.tt/2In0tYv
CNET
AMD has a Spectre/Meltdown-like security flaw of its own
Researchers find 13 vulnerabilities in AMD’s Ryzen and EPYC chips, which could let attackers install malware on highly guarded portions of the processor.
Public-facing websites that have an ECC cert?
Does anybody know of any public-facing websites protected by an ECC cert? Even the websites listed as references for ECC all seem to have RSA certs.
Submitted March 13, 2018 at 09:50PM by satyenshah
via reddit http://ift.tt/2p7IoF0
Does anybody know of any public-facing websites protected by an ECC cert? Even the websites listed as references for ECC all seem to have RSA certs.
Submitted March 13, 2018 at 09:50PM by satyenshah
via reddit http://ift.tt/2p7IoF0
Firefox turns out the lights on two privacy-sucking features
http://ift.tt/2p8ViCI
Submitted March 13, 2018 at 10:19PM by volci
via reddit http://ift.tt/2GmKpW1
http://ift.tt/2p8ViCI
Submitted March 13, 2018 at 10:19PM by volci
via reddit http://ift.tt/2GmKpW1
Naked Security
Firefox turns out the lights on two privacy-sucking features
Thanks to some illuminating privacy research, it’s “lights out” for another pair of esoteric APIs.
Warning! Spreading crypto mining malware!
http://ift.tt/2p89xIQ
Submitted March 13, 2018 at 10:12PM by tomasstatkus
via reddit http://ift.tt/2DmZdkv
http://ift.tt/2p89xIQ
Submitted March 13, 2018 at 10:12PM by tomasstatkus
via reddit http://ift.tt/2DmZdkv
Reviewedbypro
Rapidly spreading crypto-mining malware infected 500,000 machines
A rapidly spreading cryptocurrency mining malware infected nearly 500,000 Microsoft Windows PCs in just 12 hours time period. The cryptocurrency mining malware also known as
Bypassing Payments Using Webhooks
http://ift.tt/2tOSGQ4
Submitted March 13, 2018 at 10:32PM by cablej
via reddit http://ift.tt/2FBanYH
http://ift.tt/2tOSGQ4
Submitted March 13, 2018 at 10:32PM by cablej
via reddit http://ift.tt/2FBanYH
lightningsecurity.io
Bypassing Payments Using Webhooks
Metta: Uber’s Open Source Tool for Adversarial Simulation
http://ift.tt/2FFM87N
Submitted March 13, 2018 at 10:07PM by mubix
via reddit http://ift.tt/2paMeOk
http://ift.tt/2FFM87N
Submitted March 13, 2018 at 10:07PM by mubix
via reddit http://ift.tt/2paMeOk
Medium
Introducing Metta: Uber’s Open Source Tool for Adversarial Simulation
Chris Gates, Senior Security Engineer
Reverse Engineering a Self-Modifying Binary with radare2
http://ift.tt/2tO9Ux4
Submitted March 13, 2018 at 10:06PM by Megabeets
via reddit http://ift.tt/2FRDIO0
http://ift.tt/2tO9Ux4
Submitted March 13, 2018 at 10:06PM by Megabeets
via reddit http://ift.tt/2FRDIO0
Megabeets
Reversing a Self-Modifying Binary with radare2
This is how I used radare2 to solve a self-modifying binary challenge from r2con 2017. This is a radare2 tutorial for advanced users. Don't miss my series of articles for beginners.
March's Patch Tuesday update will fix a critical vulnerability in Microsoft Remote Desktop Protocol
http://ift.tt/2HwKPsv
Submitted March 13, 2018 at 10:42PM by BengaliKyd
via reddit http://ift.tt/2tOwd5o
http://ift.tt/2HwKPsv
Submitted March 13, 2018 at 10:42PM by BengaliKyd
via reddit http://ift.tt/2tOwd5o
On MSFT
March’s Patch Tuesday update will fix a critical vulnerability in Microsoft Remote Desktop Protocol
This month's Patch Tuesday update will fix a critical vulnerability in Microsoft's Remote Desktop Protocol affecting all PCs running Windows Vista and newer. The vulnerability allows attackers to exploit remote desktop and Windows remote management to run…
The Java Soothsayer: A practical application for insecure randomness (With free 0day).
http://ift.tt/2In4j3R
Submitted March 13, 2018 at 10:23PM by alex91ar
via reddit http://ift.tt/2IqnslA
http://ift.tt/2In4j3R
Submitted March 13, 2018 at 10:23PM by alex91ar
via reddit http://ift.tt/2IqnslA
Medium
The Java Soothsayer: A practical application for insecure randomness. (Includes free 0day)
As a pentester is quite usual that for several reasons one might not find as many shiny beautiful critical bugs as one might want to. Some…
Diamorphine + Hideusage fork. Kernel rootkit to spoof system load and load averages.
http://ift.tt/2HxJVMd
Submitted March 13, 2018 at 10:33PM by alex91ar
via reddit http://ift.tt/2p8j8PQ
http://ift.tt/2HxJVMd
Submitted March 13, 2018 at 10:33PM by alex91ar
via reddit http://ift.tt/2p8j8PQ
GitHub
alex91ar/Diamorphine
Diamorphine - LKM rootkit for Linux Kernels 2.6.x/3.x/4.x