Facebook apps can still target nearly your entire friend list via "taggable friends" | security report brings change, but weaknesses remain
https://ift.tt/2GzDPxY
Submitted March 29, 2018 at 11:16PM by nkrva
via reddit https://ift.tt/2urAwUA
https://ift.tt/2GzDPxY
Submitted March 29, 2018 at 11:16PM by nkrva
via reddit https://ift.tt/2urAwUA
The Tyee
EXCLUSIVE: Facebook Closes Security Flaws Found By The Tyee | The Tyee
Tyee “White Hat” security report brings change, but weaknesses remain.
Retrieving sensitive information through browser extensions and context menu clickjacking
https://ift.tt/2pQalS5
Submitted March 30, 2018 at 12:24AM by xPaul
via reddit https://ift.tt/2pLxE0f
https://ift.tt/2pQalS5
Submitted March 30, 2018 at 12:24AM by xPaul
via reddit https://ift.tt/2pLxE0f
harleo.me
Exploiting Browser Extensions & Context Menus - harleo.me
We all know them, we all use them everyday — context menus. These are the handy little windows when right clicking on content, which enables you to select a ...
Google Chromebooks are a hit with security experts, and it's not by accident
https://ift.tt/2GAxp1K
Submitted March 30, 2018 at 12:35AM by DJRWolf
via reddit http://bit.ly/2GhBj05
https://ift.tt/2GAxp1K
Submitted March 30, 2018 at 12:35AM by DJRWolf
via reddit http://bit.ly/2GhBj05
CNET
How Chromebooks became the go-to laptops for security experts
Chrome OS has provided one of the most robust cases of “usable security” available. Here’s the design philosophy from Google that led to that.
Hajime Botnet Makes a Comeback With Massive Scan for MikroTik Routers
http://bit.ly/2uDFez1
Submitted March 30, 2018 at 12:34AM by Iot_Security
via reddit http://bit.ly/2Gjdq8v
http://bit.ly/2uDFez1
Submitted March 30, 2018 at 12:34AM by Iot_Security
via reddit http://bit.ly/2Gjdq8v
BleepingComputer
Hajime Botnet Makes a Comeback With Massive Scan for MikroTik Routers
If you've been following the infosec Twitter community for the last few days, you couldn't ignore the constant talk about the massive scans currently taking place online, carried out by a Hajime IoT botnet looking to mass-infect unpatched MikroTik devices.
Hackers hit 911 system, emergency dispatch affected
https://ift.tt/2pOWsUW
Submitted March 30, 2018 at 12:02AM by Horus_Sirius
via reddit https://ift.tt/2Gk2yTv
https://ift.tt/2pOWsUW
Submitted March 30, 2018 at 12:02AM by Horus_Sirius
via reddit https://ift.tt/2Gk2yTv
TSecurity Portal
Hackers hit 911 system, emergency dispatch affected
Has anyone used Lavabit's new email service? Any info on it?
Lavabit got owned by the FBI a few years back. Now they are back with their own encryption technology and email offering, but it costs money. Has anyone used them? Are they trustworthy this time?
Submitted March 30, 2018 at 02:04AM by ozrainforest
via reddit http://bit.ly/2pQpRNP
Lavabit got owned by the FBI a few years back. Now they are back with their own encryption technology and email offering, but it costs money. Has anyone used them? Are they trustworthy this time?
Submitted March 30, 2018 at 02:04AM by ozrainforest
via reddit http://bit.ly/2pQpRNP
reddit
Has anyone used Lavabit's new email service? Any info... • r/security
Lavabit got owned by the FBI a few years back. Now they are back with their own encryption technology and email offering, but it costs money. Has...
How Homebrew invites users to get pwned (PrivEsc)
http://bit.ly/2pRHUDp
Submitted March 30, 2018 at 02:27AM by n00py
via reddit http://bit.ly/2pQ9JvD
http://bit.ly/2pRHUDp
Submitted March 30, 2018 at 02:27AM by n00py
via reddit http://bit.ly/2pQ9JvD
Applehelpwriter
how Homebrew invites users to get pwned
Popular macOS package manager Homebrew is a great way to easily install and manage 3rd party software. As their own tag line goes, “Homebrew installs the stuff you need that Apple didn’t.R…
Risk Controls and Financial Management at Veterans Affairs
https://www.youtube.com/watch?v=5SzB_Td6EiI
Submitted March 30, 2018 at 03:12AM by samson_78
via reddit https://ift.tt/2pPfudV
https://www.youtube.com/watch?v=5SzB_Td6EiI
Submitted March 30, 2018 at 03:12AM by samson_78
via reddit https://ift.tt/2pPfudV
YouTube
Risk Controls and Financial Management at Veterans Affairs
Risk Controls and Financial Management at Veterans Affairs Dr. Paul Tabbits Program Executive officer for Financial Management Business Transformation at Vet...
New Cyber Security Style Guide helps bridge the communication gap
http://bit.ly/2J0lvMZ
Submitted March 30, 2018 at 02:36AM by samson_78
via reddit http://bit.ly/2pTQyB4
http://bit.ly/2J0lvMZ
Submitted March 30, 2018 at 02:36AM by samson_78
via reddit http://bit.ly/2pTQyB4
CSO Online
New Cyber Security Style Guide helps bridge the communication gap
Poor communication is a security flaw. Time to patch.
Reversing a macOS Kernel Extension
https://ift.tt/2GEudlI
Submitted March 30, 2018 at 03:18AM by TechLord2
via reddit https://ift.tt/2Giy8VS
https://ift.tt/2GEudlI
Submitted March 30, 2018 at 03:18AM by TechLord2
via reddit https://ift.tt/2Giy8VS
reddit
Reversing a macOS Kernel Extension • r/netsec
1 points and 0 comments so far on reddit
Under Armour says 150 million MyFitnessPal accounts compromised in data breach
http://bit.ly/2IhFzJB
Submitted March 30, 2018 at 04:32AM by thgirwp
via reddit https://ift.tt/2J3KwH6
http://bit.ly/2IhFzJB
Submitted March 30, 2018 at 04:32AM by thgirwp
via reddit https://ift.tt/2J3KwH6
The Verge
Under Armour says 150 million MyFitnessPal accounts compromised in data breach
Hackers obtained user names, email addresses, and hashed passwords
Facebook logs calls and text messages (on Android)
https://ift.tt/2GUKdNT
Submitted March 30, 2018 at 04:56AM by volci
via reddit https://ift.tt/2pPHpKH
https://ift.tt/2GUKdNT
Submitted March 30, 2018 at 04:56AM by volci
via reddit https://ift.tt/2pPHpKH
FlowingData
Facebook logs calls and text messages
Woo. Woo. Alex Hern reporting for The Guardian: In at least one previous version of the Messenger app, Facebook only told users that the setting would enable them to “send and receive SMS in …
texts including the Department of defense IP address?
https://ift.tt/2GnakA0
Submitted March 30, 2018 at 06:42AM by SOPhoto
via reddit https://ift.tt/2E9y05i
https://ift.tt/2GnakA0
Submitted March 30, 2018 at 06:42AM by SOPhoto
via reddit https://ift.tt/2E9y05i
Detect Password Spraying With Windows Event Log Correlation
https://ift.tt/2E6VJ5Y
Submitted March 30, 2018 at 08:44AM by Mufassa810
via reddit https://ift.tt/2J0SYXD
https://ift.tt/2E6VJ5Y
Submitted March 30, 2018 at 08:44AM by Mufassa810
via reddit https://ift.tt/2J0SYXD
My Fitness Pal has had a data breach.
https://ift.tt/2pPtEvK
Submitted March 30, 2018 at 09:39AM by damontoo
via reddit https://ift.tt/2Ig5gKs
https://ift.tt/2pPtEvK
Submitted March 30, 2018 at 09:39AM by damontoo
via reddit https://ift.tt/2Ig5gKs
reddit
My Fitness Pal has had a data breach. • r/netsec
1 points and 2 comments so far on reddit
Under Armour Says 150 Million MyFitnessPal Accounts Were Hacked
https://ift.tt/2H068Uc
Submitted March 30, 2018 at 10:55AM by Horus_Sirius
via reddit https://ift.tt/2E7aupo
https://ift.tt/2H068Uc
Submitted March 30, 2018 at 10:55AM by Horus_Sirius
via reddit https://ift.tt/2E7aupo
TSecurity Portal
Under Armour Says 150 Million MyFitnessPal Accounts Were Hacked
Safety and Security Products
https://ift.tt/2Ii2Ril
Submitted March 30, 2018 at 12:11PM by Sonikgps
via reddit https://ift.tt/2pSd7qI
https://ift.tt/2Ii2Ril
Submitted March 30, 2018 at 12:11PM by Sonikgps
via reddit https://ift.tt/2pSd7qI
reddit
Safety and Security Products • r/security
1 points and 0 comments so far on reddit
#TotalMeltdown OOB patches available now (Win7/2008R2) CVE-2018-1038
http://bit.ly/2pSTfTx
Submitted March 30, 2018 at 02:27PM by shark0der
via reddit https://ift.tt/2E6mBDj
http://bit.ly/2pSTfTx
Submitted March 30, 2018 at 02:27PM by shark0der
via reddit https://ift.tt/2E6mBDj
reddit
#TotalMeltdown OOB patches available now (Win7/2008R2)... • r/netsec
1 points and 0 comments so far on reddit
Week 13 in Information Security, 2018
https://ift.tt/2IgFmq2
Submitted March 30, 2018 at 03:10PM by undercomm
via reddit https://ift.tt/2GIy1T6
https://ift.tt/2IgFmq2
Submitted March 30, 2018 at 03:10PM by undercomm
via reddit https://ift.tt/2GIy1T6
Malgregator
InfoSec Week 13, 2018
The city of Atlanta government has become the victim of a ransomware attack. The ransomware message demanding a payment of $6,800 to...
Data Breach Report: March 2018
https://ift.tt/2GVMqss
Submitted March 30, 2018 at 05:08PM by Uminekoshi
via reddit https://ift.tt/2E4ICCk
https://ift.tt/2GVMqss
Submitted March 30, 2018 at 05:08PM by Uminekoshi
via reddit https://ift.tt/2E4ICCk
Nehemiah Security
Data Breach Report: March 2018 - Nehemiah Security
Review some of the biggest data breaches that occurred in March 2018. Read the full report here.
Exploring Cobalt Strike’s ExternalC2 Framework
https://ift.tt/2uxCpiF
Submitted March 30, 2018 at 05:32PM by xpnsecurity
via reddit https://ift.tt/2GkacS1
https://ift.tt/2uxCpiF
Submitted March 30, 2018 at 05:32PM by xpnsecurity
via reddit https://ift.tt/2GkacS1
XPN InfoSec Blog
Exploring Cobalt Strike's ExternalC2 framework
As many testers will know, achieving C2 communication can sometimes be a pain. Whether because of egress firewall rules or process restrictions, the simple days of reverse shells and reverse HTTP C2 channels are quickly coming to an end. OK, maybe I exaggerated…