Security review of the Vilfo VPN router finds severe issues
http://ift.tt/2FXYU1B
Submitted March 20, 2018 at 07:48PM by Aeyoun
via reddit http://ift.tt/2ppVPjO
http://ift.tt/2FXYU1B
Submitted March 20, 2018 at 07:48PM by Aeyoun
via reddit http://ift.tt/2ppVPjO
Ctrl blog
Vilfo VPN router review: Not designed for security or privacy – Part 3/4
The Vilfo VPN router is built by a Swedish company and is going on the market just a month before the General Data Protection Regulation (GDPR) comes into effect. Anyone…
5 surefire cloud security certifications to boost your career (and your paycheck): They did the math
http://ift.tt/2GMI9rq
Submitted March 20, 2018 at 10:08PM by yourbasicgeek
via reddit http://ift.tt/2FOPiKF
http://ift.tt/2GMI9rq
Submitted March 20, 2018 at 10:08PM by yourbasicgeek
via reddit http://ift.tt/2FOPiKF
2FA Best Practices: Why you shouldn’t use Google Authenticator and what to use instead
http://ift.tt/2u5GieG
Submitted March 20, 2018 at 09:07PM by ddusko
via reddit http://ift.tt/2GPTozq
http://ift.tt/2u5GieG
Submitted March 20, 2018 at 09:07PM by ddusko
via reddit http://ift.tt/2GPTozq
Medium
Securing Your Accounts With Two-Factor Authentication (2FA)
Why a password is not enough, why you shouldn’t use Google Authenticator and what to use instead
6 tricky obstacles security teams face in GDPR compliance
http://ift.tt/2HKgS84
Submitted March 20, 2018 at 09:05PM by CrankyBear
via reddit http://ift.tt/2u2Xl0X
http://ift.tt/2HKgS84
Submitted March 20, 2018 at 09:05PM by CrankyBear
via reddit http://ift.tt/2u2Xl0X
Security Boulevard
6 tricky obstacles security teams face in GDPR compliance
The EU’s GDPR data privacy regulation takes effect May 25 and it’s chock full of hurdles for security teams. Here are six tricky ones to watch out for.
Implications and Mitigation Strategies When You Lose Your End-Entity PKI
http://ift.tt/2HMajCb
Submitted March 20, 2018 at 11:56PM by BillyPricePgh
via reddit http://ift.tt/2FNYE9w
http://ift.tt/2HMajCb
Submitted March 20, 2018 at 11:56PM by BillyPricePgh
via reddit http://ift.tt/2FNYE9w
insights.sei.cmu.edu
Implications and Mitigation Strategies for the Loss of End-Entity Private Keys
This post is co-authored by Thomas Scanlon. When a private key in a public-key infrastructure (PKI) environment is lost or stolen, compromised end-entity certificates can be used to impersonate a principal (a singular and identifiable logical or physical…
Programs Controlling ICS Robotics Are 'Wide Open' to Vulnerabilities
http://ift.tt/2FNqgeJ
Submitted March 21, 2018 at 12:19AM by volci
via reddit http://ift.tt/2u4Bo1g
http://ift.tt/2FNqgeJ
Submitted March 21, 2018 at 12:19AM by volci
via reddit http://ift.tt/2u4Bo1g
Threatpost | The first stop for security news
Programs Controlling ICS Robotics Are 'Wide Open' to Vulnerabilities
Dewan Chowdhury, founder of MalCrawler, talks at SAS about the risks that companies face when securing their industrial control systems and robotics.
Yubikey NEO TOTP/U2F configuration and secret backup
Hello everyone, I purchased a Yubikey Neo and am a little confused. From what I understand, I do not need to use the desktop manager app and change any settings in order for my yubikey neo to function in CCID mode (this contains OATH-TOTP, which I want to use as a replacement for google authenticator) and by default, it also has u2f enabled. Is this correct, or do I need to change any configuration out-of-the-box to enable these features?Also, is there a way to backup my yubikey OTP and u2f secrets? I know the yubikey is write-only, but is there a way to basically generate the secrets/the whole configuration in the yubikey manager, and then write them to the device while also encrypting and saving them somewhere else so that I can restore these secrets if my yubikey fails? Thanks for any feedback!
Submitted March 21, 2018 at 12:56AM by RiBc_
via reddit http://ift.tt/2IEWkzp
Hello everyone, I purchased a Yubikey Neo and am a little confused. From what I understand, I do not need to use the desktop manager app and change any settings in order for my yubikey neo to function in CCID mode (this contains OATH-TOTP, which I want to use as a replacement for google authenticator) and by default, it also has u2f enabled. Is this correct, or do I need to change any configuration out-of-the-box to enable these features?Also, is there a way to backup my yubikey OTP and u2f secrets? I know the yubikey is write-only, but is there a way to basically generate the secrets/the whole configuration in the yubikey manager, and then write them to the device while also encrypting and saving them somewhere else so that I can restore these secrets if my yubikey fails? Thanks for any feedback!
Submitted March 21, 2018 at 12:56AM by RiBc_
via reddit http://ift.tt/2IEWkzp
reddit
Yubikey NEO TOTP/U2F configuration and secret backup • r/security
Hello everyone, I purchased a Yubikey Neo and am a little confused. From what I understand, I do not need to use the desktop manager app and...
Account Hacked or only Attempted compromise?
So I consider myself careful when it comes to internet security. Although today, some individual had managed to successfully get into my Macy's account (of which I never really use) to place an order to someone else within my state of residence, but different address and credit card number. It seems as though the only information used of mine was my email address.Now aside from this, my email address received ~100-200 new account creation/password reset emails from mom & pop ecom stores and affiliate programs. Basically stores I've never heard of but follow the same pattern for their emails (maybe had the same backend software between them all)Now none of these messages were read, I have 2FA enabled and checking my security on my Google account, I don't believe my email was compromised. I checked my credit cards/financials and nothing seems out of the ordinary.I called Macy's and they were no help. They said because only my email was used and none of the other information was my own, I could not cancel the order as it doesn't count as a fraud purchase. They said the address looks legitimate on their end, it just wasn't mine. I changed my password/email/security question on my account once that occurred, but that's all I seem to be able to do at this point.So my question is, has anyone dealt with this before? What the hell is going on, what are they trying to accomplish when creating hundreds of accounts with my email/password changes if they can't access my information? It was either a noscript or bot because no human could create that many accounts so quickly.What other security steps should I do? I am a bit alarmed as this never happened to me before.
Submitted March 21, 2018 at 02:36AM by curious_wanderer14
via reddit http://ift.tt/2FW1aX4
So I consider myself careful when it comes to internet security. Although today, some individual had managed to successfully get into my Macy's account (of which I never really use) to place an order to someone else within my state of residence, but different address and credit card number. It seems as though the only information used of mine was my email address.Now aside from this, my email address received ~100-200 new account creation/password reset emails from mom & pop ecom stores and affiliate programs. Basically stores I've never heard of but follow the same pattern for their emails (maybe had the same backend software between them all)Now none of these messages were read, I have 2FA enabled and checking my security on my Google account, I don't believe my email was compromised. I checked my credit cards/financials and nothing seems out of the ordinary.I called Macy's and they were no help. They said because only my email was used and none of the other information was my own, I could not cancel the order as it doesn't count as a fraud purchase. They said the address looks legitimate on their end, it just wasn't mine. I changed my password/email/security question on my account once that occurred, but that's all I seem to be able to do at this point.So my question is, has anyone dealt with this before? What the hell is going on, what are they trying to accomplish when creating hundreds of accounts with my email/password changes if they can't access my information? It was either a noscript or bot because no human could create that many accounts so quickly.What other security steps should I do? I am a bit alarmed as this never happened to me before.
Submitted March 21, 2018 at 02:36AM by curious_wanderer14
via reddit http://ift.tt/2FW1aX4
reddit
Account Hacked or only Attempted compromise? • r/security
So I consider myself careful when it comes to internet security. Although today, some individual had managed to successfully get into my Macy's...
A look at which countries are ranked the worst in the world when it comes to Censorship and Surveillance
http://ift.tt/2HOH01I
Submitted March 21, 2018 at 03:14AM by ChenneGivenSunday
via reddit http://ift.tt/2G7bKhd
http://ift.tt/2HOH01I
Submitted March 21, 2018 at 03:14AM by ChenneGivenSunday
via reddit http://ift.tt/2G7bKhd
Security Baron
Which Countries Are the Worst-Rated for Censorship and Surveillance in the World?
Developed by SecurityBaron.com Like this infographic? Consider sharing it with this link or embed on your own site with the embed code below! Developed by SecurityBaron.com We’re living in the Information Age. Today, you can connect with anyone virtually…
TeleRAT: Another Android Trojan Leveraging Telegram’s Bot API to Target Iranian Users
http://ift.tt/2HMrGCT
Submitted March 21, 2018 at 03:08AM by intelot
via reddit http://ift.tt/2FQX5aQ
http://ift.tt/2HMrGCT
Submitted March 21, 2018 at 03:08AM by intelot
via reddit http://ift.tt/2FQX5aQ
Palo Alto Networks Blog
TeleRAT: Another Android Trojan Leveraging Telegram’s Bot API to Target Iranian Users
Unit 42 discovers TeleRAT, an Android Trojan abusing Telegram’s Bot API for command and control and data exfiltration.
DDoS Attacks Are $10 per Hour on the Dark Web
http://ift.tt/2HReEEi
Submitted March 21, 2018 at 04:01AM by alessiodelv
via reddit http://ift.tt/2pxeOtN
http://ift.tt/2HReEEi
Submitted March 21, 2018 at 04:01AM by alessiodelv
via reddit http://ift.tt/2pxeOtN
BleepingComputer
DDoS Attacks Are $10 per Hour on the Dark Web
A report released today by UK threat intelligence firm Armor shines a light on the prices practiced on Dark Web markets for a wide range of cybercrime-related services.
15-Year-old Finds Flaw in Ledger Crypto Wallet
http://ift.tt/2u2q1ah
Submitted March 21, 2018 at 03:59AM by alessiodelv
via reddit http://ift.tt/2DHSjX4
http://ift.tt/2u2q1ah
Submitted March 21, 2018 at 03:59AM by alessiodelv
via reddit http://ift.tt/2DHSjX4
reddit
15-Year-old Finds Flaw in Ledger Crypto Wallet • r/security
5 points and 0 comments so far on reddit
Final Year Project Ideas
Hi all I am currently studying Computer Forensics & Security and I will be going into my final year of college next year. Just making this post as I am trying to come up with ideas for a project as early as possible so I can mess around with different noscripts and programs over the summer. I want to do my project in Python and have it be focused in the area of Computer Forensics. The project has to be complex and challenging. I want to try have a foundation planned out before I go back to college. At the moment I want to use some of the following in my project:PythonBashMalware analysisComplex vulnerabilityLinuxForensics & Security basedAny help would be appreciated I have been on Forensics Focus but none of the project ideas they have there seem appealing or are extremely vague.
Submitted March 21, 2018 at 05:39AM by Irishladdoyle
via reddit http://ift.tt/2DGdQ2s
Hi all I am currently studying Computer Forensics & Security and I will be going into my final year of college next year. Just making this post as I am trying to come up with ideas for a project as early as possible so I can mess around with different noscripts and programs over the summer. I want to do my project in Python and have it be focused in the area of Computer Forensics. The project has to be complex and challenging. I want to try have a foundation planned out before I go back to college. At the moment I want to use some of the following in my project:PythonBashMalware analysisComplex vulnerabilityLinuxForensics & Security basedAny help would be appreciated I have been on Forensics Focus but none of the project ideas they have there seem appealing or are extremely vague.
Submitted March 21, 2018 at 05:39AM by Irishladdoyle
via reddit http://ift.tt/2DGdQ2s
reddit
Final Year Project Ideas • r/security
Hi all I am currently studying Computer Forensics & Security and I will be going into my final year of college next year. Just making this post as...
Th3inspector Tool - All in one tool for Information Gathering
http://ift.tt/2HIiQ99
Submitted March 21, 2018 at 03:47AM by TechLord2
via reddit http://ift.tt/2GaoofC
http://ift.tt/2HIiQ99
Submitted March 21, 2018 at 03:47AM by TechLord2
via reddit http://ift.tt/2GaoofC
GitHub
Moham3dRiahi/Th3inspector
Th3inspector - Th3Inspector 🕵️ best tool for Information Gathering 🔎
The NSA Worked to “Track Down” Bitcoin Users, Snowden Documents Reveal
http://ift.tt/2u3QdBc
Submitted March 21, 2018 at 07:40AM by mansomer
via reddit http://ift.tt/2FVIeHT
http://ift.tt/2u3QdBc
Submitted March 21, 2018 at 07:40AM by mansomer
via reddit http://ift.tt/2FVIeHT
The Intercept
The NSA Worked to “Track Down” Bitcoin Users, Snowden Documents Reveal
A mysterious data source provided the spy agency with a wealth of information to identify bitcoin holders.
hacking your neighbour's Wi-Fi
http://ift.tt/2IENTnF
Submitted March 21, 2018 at 10:58AM by defaultnamehere
via reddit http://ift.tt/2G0s2Fv
http://ift.tt/2IENTnF
Submitted March 21, 2018 at 10:58AM by defaultnamehere
via reddit http://ift.tt/2G0s2Fv
mango.pdf.zone
Hacking your neighbour's Wi-Fi
Hacking Wi-Fi, cracking passwords, and spying on mysterious handshakes is an easy game for babies.
What does your home network setup looks like?
Looking at products like the bitdefender box, I wonder what are people doing to secure their home networks? What does your setup look like?
Submitted March 21, 2018 at 01:32PM by gaijinboricua
via reddit http://ift.tt/2puMSpt
Looking at products like the bitdefender box, I wonder what are people doing to secure their home networks? What does your setup look like?
Submitted March 21, 2018 at 01:32PM by gaijinboricua
via reddit http://ift.tt/2puMSpt
reddit
What does your home network setup looks like? • r/security
Looking at products like the bitdefender box, I wonder what are people doing to secure their home networks? What does your setup look like?
Expedia's Orbitz Says 880,000 Payment Cards Compromised in Security Breach
http://ift.tt/2IBjxlP
Submitted March 21, 2018 at 01:17PM by Horus_Sirius
via reddit http://ift.tt/2pu74rh
http://ift.tt/2IBjxlP
Submitted March 21, 2018 at 01:17PM by Horus_Sirius
via reddit http://ift.tt/2pu74rh
TSecurity Portal
Expedia's Orbitz Says 880,000 Payment Cards Compromised in Security Breach
How secure is Mobile Pay?
Just out of curiosity, how safe is Mobile pay?
I don't know much about it and have never set it up on my phone but have been thinking about it.
I have a galaxy, so it would be Samsung Pay.
I haven't heard of issues with it, but just curious.
Thanks in advance.
Submitted March 21, 2018 at 02:43PM by GreekNord
via reddit http://ift.tt/2HRIKaE
Just out of curiosity, how safe is Mobile pay?
I don't know much about it and have never set it up on my phone but have been thinking about it.
I have a galaxy, so it would be Samsung Pay.
I haven't heard of issues with it, but just curious.
Thanks in advance.
Submitted March 21, 2018 at 02:43PM by GreekNord
via reddit http://ift.tt/2HRIKaE
reddit
How secure is Mobile Pay? • r/security
Just out of curiosity, how safe is Mobile pay? I don't know much about it and have never set it up on my phone but have been thinking about it. ...
Windows Remote Assistance XXE vulnerability
http://ift.tt/2ppryla
Submitted March 21, 2018 at 02:06PM by Mempodipper
via reddit http://ift.tt/2u7RqHY
http://ift.tt/2ppryla
Submitted March 21, 2018 at 02:06PM by Mempodipper
via reddit http://ift.tt/2u7RqHY
Revealed: 8 most dangerous scams to watch for this year - and how to stay safe
http://ift.tt/2pumv34
Submitted March 21, 2018 at 02:56PM by ObjectiveNovel
via reddit http://ift.tt/2IGhWLQ
http://ift.tt/2pumv34
Submitted March 21, 2018 at 02:56PM by ObjectiveNovel
via reddit http://ift.tt/2IGhWLQ
mirror
Revealed: 8 most dangerous scams to watch for this year - and how to stay safe
The report by NatWest has warned that scammers will also try to cash in on those tying the knot this year on the back of the Royal wedding