2 points and 0 comments so far on reddit

In this open edition of the Exploring Information Security podcast, I sit down with Micah Hoffman, Kerby Plessas, and Josh Huff to discuss Open Source INTelligence (OSINT). Micah Hoffman ( @WebBreacher ) is a SANS instructor who will be teaching a brand…

VPN leaks users’ IPs via WebRTC. I’ve tested seventy VPN providers and 16 of them leaks users’ IPs via WebRTC (23%)

rtl-entropy - An entropy generator using SDR peripherals, including rtl-sdr and BladeRF

Charles Web Debugging Proxy - Official Site

A team of academics from four US universities have discovered a new side-channel attack that takes advantage of the speculative execution feature in modern processors to recover data from users' CPUs.

63,2% of internet users are using Google Chrome as their internet browser. And the latest updates that Google has made on Chrome make sure, that any website that has no security layer (SSL certificate) will be marked as insecure.

“If your friend was put in charge of measuring cyber risk at their company, what advice would you give them?”

DISCLAIMER

63,2% of internet users are using Google Chrome as their internet browser. And the latest updates that Google has made on Chrome make sure, that any website that has no security layer (SSL certificate) will be marked as insecure.

Facebook has no concern about your privacy, that's a proven fact. They want to gather as much information about your private life the better because that allows higher prices to advertisers to better 'customize' ads you see.  If you aren't ready to dump Facebook…

We uncovered a new Android malware that can surreptitiously use the infected device's computing power to mine Monero: HiddenMiner. This Monero-mining Android app’s self-protection and persistence mechanisms include hiding itself from the unwitting user and…

Introduction Cyber attacks from the Lazarus Group, a threat actor associated with North Korea, has not slowed down and their malware toolset continues to evolve. A few months ago, we published a general research of the Lazarus Group and the Blockbuster campaign…

How many external websites, applications and (sub)domains does your company have? Compare free application discovery service by Shodan and ImmuniWeb® Discovery.

Did you think Meltdown was bad? Unprivileged applications being able to read kernel memory at speeds possibly as high as megabytes per seco...

Recently, I've witnessed a couple of incidents which have caused me to question some pretty fundamental security basics with our local Aussie telcos, specifically Telstra and Optus. It began with a visit to the local Telstra store earlier this month to upgrade…

QuantLoader is a Trojan downloader that has been used in campaigns serving a range of malware, including ransomware, Banking Trojans, and RATs. In this post, we'll take a high-level look at the campaign flow, as well as a deep dive into how the malware executes.

It was in my first corporate role, at a bank, when I first became a cybersecurity threat to myself. I had just come from a meeting with a…

After nearly two years in development and countless hours of testing, we’re pleased to announce the stable release of Qubes OS 4.0! Major changes in version 4.0 Version 4.0 includes several funda...