OffensiveCon 2018 Videos
https://www.youtube.com/channel/UCMNvAtT4ak2azKNk6UlB1QQ
Submitted March 19, 2018 at 07:13PM by juken
via reddit http://ift.tt/2u1CeMf
https://www.youtube.com/channel/UCMNvAtT4ak2azKNk6UlB1QQ
Submitted March 19, 2018 at 07:13PM by juken
via reddit http://ift.tt/2u1CeMf
YouTube
OffensiveCon
OffensiveCon Berlin is a highly technical international security conference focused on offensive security only. The aim of OffensiveCon is to bring the community of hackers together for high quality and deep technical talks, engaging and renowned technical…
Drachten man suspected of leaking nude footage of Dutch handball team
http://ift.tt/2HNNi1L
Submitted March 19, 2018 at 07:28PM by Iot_Security
via reddit http://ift.tt/2FOhlcX
http://ift.tt/2HNNi1L
Submitted March 19, 2018 at 07:28PM by Iot_Security
via reddit http://ift.tt/2FOhlcX
NL Times
Drachten man suspected of leaking nude footage of Dutch handball team
A man from Drachten is suspected of posting nude images of the Dutch women's handball team, recorded at sauna Oase in Nederasselt, online. He hasn't been arrested yet, but the police confiscated various digital data carriers from him, the police said on Monday.
Linux distro with one eye on security and other on sweet looking? I will switch from MacOS so sweet means MacOS sweet. Security means Fort Knox.
Full disk encryption is not an option.
Submitted March 19, 2018 at 08:04PM by NebelMe
via reddit http://ift.tt/2psYYQ3
Full disk encryption is not an option.
Submitted March 19, 2018 at 08:04PM by NebelMe
via reddit http://ift.tt/2psYYQ3
reddit
Linux distro with one eye on security and other on... • r/security
Full disk encryption is not an option.
The Newest IoT Threat: Child Predators
http://ift.tt/2u1LpfF
Submitted March 19, 2018 at 07:48PM by Iot_Security
via reddit http://ift.tt/2FKP3jM
http://ift.tt/2u1LpfF
Submitted March 19, 2018 at 07:48PM by Iot_Security
via reddit http://ift.tt/2FKP3jM
Security Today
The Newest IoT Threat: Child Predators -- Security Today
Connected devices at home can record the voices, movements, weight and eating habits of those who live there. They are, in effect, very sophisticated sensors installed in the home environment. As such, they can be utilized by all sorts of people with various…
Fast tools to protect businesses
I'm putting together a data-protection package for companies to comply with GDPR (doesn't matter if you don't know it). It seems easy and natural to place some basic security with the package.This isn't a security package, so I'm only looking to cover bare-bones basics - jobs which can be done quickly - and not turn WeLikeShoes.com into Cyber-Fort Knox. I have some tools and I'd love to hear about others which are also quick and simple to implement.So far I have:nmap can scan for vulnerabilities within minutes.sqlmap can do the same.Basic password checks by comparing people's passwords to the rockyou wordlist or guestimating if a dictionary attack would penetrate a field.Possibly setting up Phishing awareness and tests - but that's getting into the realms of too much time.Any other quick and easy, but potentially useful security checks one might add to protect a business?Also, how much should I worry about permissions? Obviously I will obtain permission from the company, but will I also need permission from the people hosting their data on their webpage? Or is the company
Submitted March 19, 2018 at 07:48PM by intrepidraspberry
via reddit http://ift.tt/2IBTU4j
I'm putting together a data-protection package for companies to comply with GDPR (doesn't matter if you don't know it). It seems easy and natural to place some basic security with the package.This isn't a security package, so I'm only looking to cover bare-bones basics - jobs which can be done quickly - and not turn WeLikeShoes.com into Cyber-Fort Knox. I have some tools and I'd love to hear about others which are also quick and simple to implement.So far I have:nmap can scan for vulnerabilities within minutes.sqlmap can do the same.Basic password checks by comparing people's passwords to the rockyou wordlist or guestimating if a dictionary attack would penetrate a field.Possibly setting up Phishing awareness and tests - but that's getting into the realms of too much time.Any other quick and easy, but potentially useful security checks one might add to protect a business?Also, how much should I worry about permissions? Obviously I will obtain permission from the company, but will I also need permission from the people hosting their data on their webpage? Or is the company
Submitted March 19, 2018 at 07:48PM by intrepidraspberry
via reddit http://ift.tt/2IBTU4j
reddit
Fast tools to protect businesses • r/security
I'm putting together a data-protection package for companies to comply with GDPR (doesn't matter if you don't know it). It seems easy and natural...
Zenis Ransomware – Deletes Your Backup and Encrypts Files
http://ift.tt/2ppYQ3L
Submitted March 19, 2018 at 07:35PM by vaxfms
via reddit http://ift.tt/2IxDMkx
http://ift.tt/2ppYQ3L
Submitted March 19, 2018 at 07:35PM by vaxfms
via reddit http://ift.tt/2IxDMkx
OSRadar
Zenis Ransomware – Deletes Your Backup and Encrypts Files - OSRadar
Ransomware has been the hot topic of security world for quite a few months. This is a type of attack that encrypts a system’s file and asks for a ransom to the victim for the unlocking password. A new ransomware is in the wild. Learn more about Zenis - the…
Why Scarlett Johansson’s Picture Got My Postgre Database to Start Mining Monero
http://ift.tt/2tGXfvH
Submitted March 19, 2018 at 08:33PM by whitehattracker
via reddit http://ift.tt/2HO2D2h
http://ift.tt/2tGXfvH
Submitted March 19, 2018 at 08:33PM by whitehattracker
via reddit http://ift.tt/2HO2D2h
Blog | Imperva
A Deep Dive into Database Attacks [Part III]: Why Scarlett Johansson’s Picture Got My Postgre Database to Start Mining Monero
DNS Poisoning and How To Prevent It
http://ift.tt/2G999n1
Submitted March 19, 2018 at 08:19PM by volci
via reddit http://ift.tt/2HIAolB
http://ift.tt/2G999n1
Submitted March 19, 2018 at 08:19PM by volci
via reddit http://ift.tt/2HIAolB
AlienVault
DNS Poisoning and How To Prevent It
DNS poisoning. Simply the name conjures up the kind of thoughts that keep network admins up at night. What if my RNDC key gets leaked? Could there be a rogue DHCP server within my perimeter? Are the Lizard Squad planning an attack on for Christmas?Much of…
The Machine Learning and Artificial Intelligence (AI) wiki
http://ift.tt/2FLeqC2
Submitted March 19, 2018 at 10:02PM by Chouma
via reddit http://ift.tt/2u5zq0W
http://ift.tt/2FLeqC2
Submitted March 19, 2018 at 10:02PM by Chouma
via reddit http://ift.tt/2u5zq0W
Peerlyst
The Machine Learning and Artificial Intelligence (AI) wiki
A wiki for posts about machine learning and artificial intelligence.Basics of Machine Learning:Infosec Basics: Definition of and understanding Machine Learning by Gina Robertson Whats AI and Machine Learning? And How Can We Take Advantage Of It. (
Reversing iBank Trojan [Injection Phase]
http://ift.tt/2FNBkZz
Submitted March 19, 2018 at 10:43PM by khasaia
via reddit http://ift.tt/2IAQ9fB
http://ift.tt/2FNBkZz
Submitted March 19, 2018 at 10:43PM by khasaia
via reddit http://ift.tt/2IAQ9fB
secrary[dot]com
Reversing iBank Trojan [Injection Phase]
This blog is about malware analysis and reverse engineering. I’m Lasha Khasaia
Recovering plaintext passwords from Azure VMs like it's the 1990s
http://ift.tt/2IDB7pl
Submitted March 19, 2018 at 09:17PM by yoniyoniyoni
via reddit http://ift.tt/2G3a8VV
http://ift.tt/2IDB7pl
Submitted March 19, 2018 at 09:17PM by yoniyoniyoni
via reddit http://ift.tt/2G3a8VV
GuardiCore - Data Center and Cloud Security
Recovering Plaintext Passwords from Azure Virtual Machines | GuardiCore
Security design flaw in the VM Access plugin that may enable a cross platform attack impacting every machine type provided by Azure. Read More...
Reversing iBank Trojan [Injection Phase]
http://ift.tt/2FNBkZz
Submitted March 19, 2018 at 10:43PM by khasaia
via reddit http://ift.tt/2IAQ9fB
http://ift.tt/2FNBkZz
Submitted March 19, 2018 at 10:43PM by khasaia
via reddit http://ift.tt/2IAQ9fB
secrary[dot]com
Reversing iBank Trojan [Injection Phase]
This blog is about malware analysis and reverse engineering. I’m Lasha Khasaia
Analysis of a Kubernetes hack — Backdooring through kubelet
http://ift.tt/2GoAmzO
Submitted March 19, 2018 at 11:15PM by speckz
via reddit http://ift.tt/2G6wUMk
http://ift.tt/2GoAmzO
Submitted March 19, 2018 at 11:15PM by speckz
via reddit http://ift.tt/2G6wUMk
Medium
Analysis of a Kubernetes hack — Backdooring through kubelet
Unless you’ve been living under a rock for the past three years, you’ve probably heard about Kubernetes. At Handy, our infrastructure is…
Firefox Master Password System Has Been Poorly Secured for the Past 9 Years
http://ift.tt/2IyvVDf
Submitted March 19, 2018 at 10:48PM by dabshitty
via reddit http://ift.tt/2HNcaXx
http://ift.tt/2IyvVDf
Submitted March 19, 2018 at 10:48PM by dabshitty
via reddit http://ift.tt/2HNcaXx
BleepingComputer
Firefox Master Password System Has Been Poorly Secured for the Past 9 Years
For at past nine years, Mozilla has been using an insufficiently strong encryption mechanism for the "master password" feature.
Ending DNS Hijacking with DNSCrypt
http://ift.tt/2ICfvtI
Submitted March 19, 2018 at 11:05PM by nykzhang
via reddit http://ift.tt/2Gb2Ijc
http://ift.tt/2ICfvtI
Submitted March 19, 2018 at 11:05PM by nykzhang
via reddit http://ift.tt/2Gb2Ijc
Medium
Ending DNS Hijacking with DNSCrypt
I was at a Marriot hotel last week with my family and I noticed that they were doing DNS hijacking and redirecting all my DNS requests to…
The Complete Beginner Guide to Learn Ethical Hacking
http://ift.tt/2HMRtuq
Submitted March 20, 2018 at 12:13AM by basikthngs
via reddit http://ift.tt/2FUX1CO
http://ift.tt/2HMRtuq
Submitted March 20, 2018 at 12:13AM by basikthngs
via reddit http://ift.tt/2FUX1CO
Medium
The Complete Beginner Guide to Learn Ethical Hacking
If you want to learn ethical hacking so that you can hack computer systems like black hat hackers and secure them like security experts…
Writing an Exploit in Golang - From A to Z
https://www.youtube.com/watch?v=U2mpUQTWRhI
Submitted March 19, 2018 at 10:58PM by secdevops
via reddit http://ift.tt/2FPihxS
https://www.youtube.com/watch?v=U2mpUQTWRhI
Submitted March 19, 2018 at 10:58PM by secdevops
via reddit http://ift.tt/2FPihxS
So I got hacked, any advice?
Hey everyone,Got a text message saying my account might have been compromised on hotmail. Turns out someone from Vietnam got in, but had attempts from Japan and others as it showed in recent activity. Also some syncing happened within the past 3 days. I'm from England btw, they tried to log in using my Skype username which I haven't used in years but it's linked to my Microsoft, and they finally got in. Uhm, changed my password, enabled 2FA. Got an email saying my epic games account was locked because of attempts, haven't used that since roughly June 2017 when I was finishing off my games design course at college, just activated 2FA on that too. I ran malwarebytes Adaware and MBAM, turned up nothing on my computer or laptop. Anything else I can do? Could it be my iPhone that's hacked? IOS 11.2.5 I believe. Seems to be all linked to my main account. I have way too many things signed up on that account, as I've had it for like 13 years. Scared that someone may access or create accounts on like twitch or Instagram and so on, they can literally ruin me so badly of course. I have accounts like eBay, Amazon, Wish, PayPal, Playstation, and so much more with my main account.Thanks everyone :)
Submitted March 20, 2018 at 01:27AM by Jianni12
via reddit http://ift.tt/2poLIN2
Hey everyone,Got a text message saying my account might have been compromised on hotmail. Turns out someone from Vietnam got in, but had attempts from Japan and others as it showed in recent activity. Also some syncing happened within the past 3 days. I'm from England btw, they tried to log in using my Skype username which I haven't used in years but it's linked to my Microsoft, and they finally got in. Uhm, changed my password, enabled 2FA. Got an email saying my epic games account was locked because of attempts, haven't used that since roughly June 2017 when I was finishing off my games design course at college, just activated 2FA on that too. I ran malwarebytes Adaware and MBAM, turned up nothing on my computer or laptop. Anything else I can do? Could it be my iPhone that's hacked? IOS 11.2.5 I believe. Seems to be all linked to my main account. I have way too many things signed up on that account, as I've had it for like 13 years. Scared that someone may access or create accounts on like twitch or Instagram and so on, they can literally ruin me so badly of course. I have accounts like eBay, Amazon, Wish, PayPal, Playstation, and so much more with my main account.Thanks everyone :)
Submitted March 20, 2018 at 01:27AM by Jianni12
via reddit http://ift.tt/2poLIN2
reddit
So I got hacked, any advice? • r/security
Hey everyone, Got a text message saying my account might have been compromised on hotmail. Turns out someone from Vietnam got in, but had...
Ending DNS Hijacking with DNSCrypt
http://ift.tt/2ICfvtI
Submitted March 20, 2018 at 02:38AM by nykzhang
via reddit http://ift.tt/2GIHyXM
http://ift.tt/2ICfvtI
Submitted March 20, 2018 at 02:38AM by nykzhang
via reddit http://ift.tt/2GIHyXM
Medium
Ending DNS Hijacking with DNSCrypt
I was at a Marriot hotel last week with my family and I noticed that they were doing DNS hijacking and redirecting all my DNS requests to…
Dynamic analysis of iOS apps without Jailbreak
http://ift.tt/2DFtRFN
Submitted March 20, 2018 at 03:12AM by ninjazeroone
via reddit http://ift.tt/2FVr3qa
http://ift.tt/2DFtRFN
Submitted March 20, 2018 at 03:12AM by ninjazeroone
via reddit http://ift.tt/2FVr3qa
Medium
Dynamic analysis of iOS apps without Jailbreak
In the article I will share my experience in solving some of the problems I faced when analyzing the security of iOS applications. All the…
S3scanner v1.0.0 - Scan, list, and dump open S3 buckets
http://ift.tt/2kJdikH
Submitted March 20, 2018 at 02:59AM by GoGoGadgetSalmon
via reddit http://ift.tt/2ptSoZB
http://ift.tt/2kJdikH
Submitted March 20, 2018 at 02:59AM by GoGoGadgetSalmon
via reddit http://ift.tt/2ptSoZB
GitHub
sa7mon/S3Scanner
Scan for open AWS S3 buckets and dump the contents - sa7mon/S3Scanner