WPHunter: A Wordpress Vulnerability Scanner v0.1 Beta
http://ift.tt/2HW8oLr
Submitted March 22, 2018 at 07:20AM by TechLord2
via reddit http://ift.tt/2GSvsLu
http://ift.tt/2HW8oLr
Submitted March 22, 2018 at 07:20AM by TechLord2
via reddit http://ift.tt/2GSvsLu
reddit
WPHunter: A Wordpress Vulnerability Scanner v0.1 Beta • r/netsec
2 points and 0 comments so far on reddit
TrickBot Banking Trojan Adapts with New Module
http://ift.tt/2ucWFG2
Submitted March 22, 2018 at 07:14AM by TechLord2
via reddit http://ift.tt/2G39YdF
http://ift.tt/2ucWFG2
Submitted March 22, 2018 at 07:14AM by TechLord2
via reddit http://ift.tt/2G39YdF
Webroot Threat Blog
TrickBot Banking Trojan Adapts with New Module | Webroot
TrickBot’s authors release new module, showing possible attempt to create an extortionary monetization scheme for the group.
WPSeku - Wordpress Security Scanner To Scan Remote WordPress Installations [Full Sources]
http://ift.tt/2os7r8i
Submitted March 22, 2018 at 07:13AM by TechLord2
via reddit http://ift.tt/2HUczqX
http://ift.tt/2os7r8i
Submitted March 22, 2018 at 07:13AM by TechLord2
via reddit http://ift.tt/2HUczqX
GitHub
m4ll0k/WPSeku
WPSeku - Wordpress Security Scanner . Contribute to m4ll0k/WPSeku development by creating an account on GitHub.
Visual Studio Code silently fixed a remote code execution vulnerability
http://ift.tt/2FOWOkq
Submitted March 22, 2018 at 08:20AM by CodeColorist
via reddit http://ift.tt/2DLL7sS
http://ift.tt/2FOWOkq
Submitted March 22, 2018 at 08:20AM by CodeColorist
via reddit http://ift.tt/2DLL7sS
Medium
Visual Studio Code has silently fixed a remote code execution vulnerability
This blog was written few weeks ago, since VSCode has been upgraded for a while, I made this public.
how to back door a nano ledger by a 15 year old kid
http://ift.tt/2puVDjV
Submitted March 22, 2018 at 11:12AM by gottathrowthisawayaw
via reddit http://ift.tt/2pv206X
http://ift.tt/2puVDjV
Submitted March 22, 2018 at 11:12AM by gottathrowthisawayaw
via reddit http://ift.tt/2pv206X
GitHub
saleemrashid/ledger-mcu-backdoor
ledger-mcu-backdoor - Proof of concept for Ledger MCU exploit
Threat Intelligence aggregation and analysis
Hi community, I'm looking for a threat intelligence platform with the following requirements:opensourcefreecan aggregate different feedsa new threat feed from API/email can be addedlightweightSo far I've found MISP and GOSINT; I'm going to test them during next couple of weeks. Are there any good tools other than those two? If you have experience with MISP/GOSINT, could you please share your impression? I know a little about such type of software, so my requirements are not a 'must have' but 'I'd like to have'. Thank you.
Submitted March 22, 2018 at 01:34PM by siniysv
via reddit http://ift.tt/2FSs8Tn
Hi community, I'm looking for a threat intelligence platform with the following requirements:opensourcefreecan aggregate different feedsa new threat feed from API/email can be addedlightweightSo far I've found MISP and GOSINT; I'm going to test them during next couple of weeks. Are there any good tools other than those two? If you have experience with MISP/GOSINT, could you please share your impression? I know a little about such type of software, so my requirements are not a 'must have' but 'I'd like to have'. Thank you.
Submitted March 22, 2018 at 01:34PM by siniysv
via reddit http://ift.tt/2FSs8Tn
reddit
Threat Intelligence aggregation and analysis • r/security
Hi community, I'm looking for a threat intelligence platform with the following requirements: * opensource * free * can aggregate different...
Important: 4 ways to prevent websites from exploiting your computer in digital coin mining
http://ift.tt/2HWWX69
Submitted March 22, 2018 at 02:15PM by Freetecharena
via reddit http://ift.tt/2ufsRZG
http://ift.tt/2HWWX69
Submitted March 22, 2018 at 02:15PM by Freetecharena
via reddit http://ift.tt/2ufsRZG
FreeTechArena
Important: 4 ways to prevent websites from exploiting your computer in digital coin mining
Whether you're learning first, some famous sites such as movies and other similar services are taking advantage of their computer-based visitors to the Bitcoin mining through noscripts that you see
You Could Be An Ethereum (ETH) Millionaire Before Coinbase Fixed This Bug
http://ift.tt/2FVVekU
Submitted March 22, 2018 at 04:04PM by RossPeili
via reddit http://ift.tt/2GQypMP
http://ift.tt/2FVVekU
Submitted March 22, 2018 at 04:04PM by RossPeili
via reddit http://ift.tt/2GQypMP
Oracletimes
You Could Be An Ethereum (ETH) Millionaire Before Coinbase Fixed This Bug | Oracle Times
Should you salt everything in your database?
I'm in my first tech job as the sole back-end developer, and my (non-coding) boss is super super nervous about GDPR. He's wanting me to salt not only passwords in the database but also email addresses.Is there any reason that you'd not salt all personally identifiable information?
Submitted March 22, 2018 at 04:27PM by ShetlandJames
via reddit http://ift.tt/2DM7nTu
I'm in my first tech job as the sole back-end developer, and my (non-coding) boss is super super nervous about GDPR. He's wanting me to salt not only passwords in the database but also email addresses.Is there any reason that you'd not salt all personally identifiable information?
Submitted March 22, 2018 at 04:27PM by ShetlandJames
via reddit http://ift.tt/2DM7nTu
reddit
Should you salt everything in your database? • r/security
I'm in my first tech job as the sole back-end developer, and my (non-coding) boss is super super nervous about GDPR. He's wanting me to salt not...
Hashtopolis distributed hashcat wrapper 0.5.0 released
http://ift.tt/2FZSmPY
Submitted March 22, 2018 at 04:17PM by s3inlc
via reddit http://ift.tt/2ufKk4c
http://ift.tt/2FZSmPY
Submitted March 22, 2018 at 04:17PM by s3inlc
via reddit http://ift.tt/2ufKk4c
GitHub
s3inlc/hashtopolis
hashtopolis - A Hashcat wrapper for distributed hashcracking
Application layer DDoS attacks nearly doubled in Q4, reports Imperva
http://ift.tt/2HWSOPD
Submitted March 22, 2018 at 06:53PM by whitehattracker
via reddit http://ift.tt/2GeKfTa
http://ift.tt/2HWSOPD
Submitted March 22, 2018 at 06:53PM by whitehattracker
via reddit http://ift.tt/2GeKfTa
Blog | Imperva
Q4 2017 Global DDoS Threat Landscape Report – Blog | Imperva
Read our Global DDoS Threat Landscape Report: a statistical analysis of 5,055 network and application layer DDoS attacks mitigated by Imperva Incapsula services during Q4 2017.
Security In 5: Episode 200 - The Department Of Homeland Security InfoSec Department Is Just Like Yours
http://ift.tt/2pzVoDt
Submitted March 22, 2018 at 06:34PM by BinaryBlog
via reddit http://ift.tt/2GgKNaW
http://ift.tt/2pzVoDt
Submitted March 22, 2018 at 06:34PM by BinaryBlog
via reddit http://ift.tt/2GgKNaW
Libsyn
Security In Five Podcast: Episode 200 - The Department Of Homeland Security InfoSec Department Is Just Like Yours
The annual security report for the Department of Homeland Security was released and the results are shocking. The US Government agencies have the problems, same gaps and challenges as you do. The report is a great read and provides good insight to how they…
Application layer DDoS attacks nearly doubled in Q4, reports Imperva
http://ift.tt/2HWSOPD
Submitted March 22, 2018 at 06:53PM by whitehattracker
via reddit http://ift.tt/2pyyZGF
http://ift.tt/2HWSOPD
Submitted March 22, 2018 at 06:53PM by whitehattracker
via reddit http://ift.tt/2pyyZGF
Blog | Imperva
Q4 2017 Global DDoS Threat Landscape Report – Blog | Imperva
Read our Global DDoS Threat Landscape Report: a statistical analysis of 5,055 network and application layer DDoS attacks mitigated by Imperva Incapsula services during Q4 2017.
Ransomware Takes Open-Source Path, Encrypts With GNU Privacy Guard
http://ift.tt/2ICsjjE
Submitted March 21, 2018 at 10:45PM by TechLord2
via reddit http://ift.tt/2HUXEwD
http://ift.tt/2ICsjjE
Submitted March 21, 2018 at 10:45PM by TechLord2
via reddit http://ift.tt/2HUXEwD
McAfee Blogs
Ransomware Takes Open-Source Path, Encrypts With GNU Privacy Guard | McAfee Blogs
McAfee Labs has recently observed a new variant of ransomware that relies on the open-source program GNU Privacy Guard (GnuPG) to encrypt data. GnuPG is a hybrid-encryption software program that uses a combination of conventional symmetric-key cryptography…
CVE-2018-7273 - PoC
http://ift.tt/2G57jjF
Submitted March 22, 2018 at 07:01PM by gdraperi
via reddit http://ift.tt/2pxdzde
http://ift.tt/2G57jjF
Submitted March 22, 2018 at 07:01PM by gdraperi
via reddit http://ift.tt/2pxdzde
remoteawesomethoughts.blogspot.co.uk
CVE-2018-7273 - PoC
tl;dr I came recently across this article https://xorl.wordpress.com/2018/03/18/cve-2018-7273-linux-kernel-floppy-information-leak/ rega...
DBLeaks - Find out if your email credentials have been leaked!, password is sent to your email !
https://dbleaks.net/
Submitted March 23, 2018 at 12:24AM by jodevsa
via reddit http://ift.tt/2HVLC69
https://dbleaks.net/
Submitted March 23, 2018 at 12:24AM by jodevsa
via reddit http://ift.tt/2HVLC69
reddit
DBLeaks - Find out if your email credentials have... • r/security
1 points and 0 comments so far on reddit
Hackers 'led warplanes to Syrian hospital' after targeting British surgeon's computer
http://ift.tt/2GK9LgF
Submitted March 23, 2018 at 12:13AM by EvanConover
via reddit http://ift.tt/2pwKI9v
http://ift.tt/2GK9LgF
Submitted March 23, 2018 at 12:13AM by EvanConover
via reddit http://ift.tt/2pwKI9v
The Telegraph
British surgeon who helped Syrian operations 'hacked' to reveal secret hospital to bombers
A British surgeon who helped carry out operations in Aleppo fears that the hacking of his computer led to a hospital being bombed by suspected Russian warplanes.
DDoS attacks are growing: What can businesses do?
http://ift.tt/2FUE9rz
Submitted March 22, 2018 at 11:56PM by EvanConover
via reddit http://ift.tt/2DMAR3X
http://ift.tt/2FUE9rz
Submitted March 22, 2018 at 11:56PM by EvanConover
via reddit http://ift.tt/2DMAR3X
Malwarebytes Labs
DDoS attacks are growing: What can businesses do? - Malwarebytes Labs
How do DDoS attacks work? And how do we protect our organizations from the growing size and number of attacks?
Sandbox awareness via user behaviour
http://ift.tt/2HVDkv5
Submitted March 23, 2018 at 02:06AM by nervium7331
via reddit http://ift.tt/2DNdl6w
http://ift.tt/2HVDkv5
Submitted March 23, 2018 at 02:06AM by nervium7331
via reddit http://ift.tt/2DNdl6w
GitLab
prisma / Sandbox awareness via user behaviour
A technique to evade sandboxes by identifying real user behavior in a short and reliable way.
Sandbox awareness via user behaviour
http://ift.tt/2HVDkv5
Submitted March 23, 2018 at 02:06AM by nervium7331
via reddit http://ift.tt/2DNdl6w
http://ift.tt/2HVDkv5
Submitted March 23, 2018 at 02:06AM by nervium7331
via reddit http://ift.tt/2DNdl6w
GitLab
prisma / Sandbox awareness via user behaviour
A technique to evade sandboxes by identifying real user behavior in a short and reliable way.
What subreddit would be interested in this suspicious disc someone gave me with possibly unknown malware in the image files and maybe some other documents? Is there a malware research section somewhere? Thanks for any input.
The disc contains a bunch of weird conspiracy stuff on it and I presume it is just bait to get the users to run the malware laden files. I haven't done any looking into how the malware works or is installed, but I assume it to be so because of how Windows 10 reacts to opening some of the files. Explorer.exe and the photo viewer app crashing with strange errors and such. The way the guy was talking sounded half like he wanted me to look at the files on a throwaway machine, half that the information needed to get out to the public, but it was suspicious because it was supposed to contain some "revealing" stuff about the US govt.The strange effects do not occur with every app used to open the files, just some of the defaults in Windows 10. I tried it with XP and nothing happens unlike in W10. I doubt anything would be as highly damaging as Conficker, Stuxnet, Duqu 2.0, or Flame, but there is no telling. The guy hinted at court cases.EDIT: I think its nearly 200MB in total.
Submitted March 23, 2018 at 03:42AM by PseudoSecuritay
via reddit http://ift.tt/2DLQad5
The disc contains a bunch of weird conspiracy stuff on it and I presume it is just bait to get the users to run the malware laden files. I haven't done any looking into how the malware works or is installed, but I assume it to be so because of how Windows 10 reacts to opening some of the files. Explorer.exe and the photo viewer app crashing with strange errors and such. The way the guy was talking sounded half like he wanted me to look at the files on a throwaway machine, half that the information needed to get out to the public, but it was suspicious because it was supposed to contain some "revealing" stuff about the US govt.The strange effects do not occur with every app used to open the files, just some of the defaults in Windows 10. I tried it with XP and nothing happens unlike in W10. I doubt anything would be as highly damaging as Conficker, Stuxnet, Duqu 2.0, or Flame, but there is no telling. The guy hinted at court cases.EDIT: I think its nearly 200MB in total.
Submitted March 23, 2018 at 03:42AM by PseudoSecuritay
via reddit http://ift.tt/2DLQad5
reddit
What subreddit would be interested in this suspicious... • r/security
The disc contains a bunch of weird conspiracy stuff on it and I presume it is just bait to get the users to run the malware laden files. I...