Windows Defender Unrar Vulnerability (SYSTEM RCE)
https://ift.tt/2GAGgNE
Submitted April 04, 2018 at 10:34PM by overflowingInt
via reddit https://ift.tt/2q5idjv
https://ift.tt/2GAGgNE
Submitted April 04, 2018 at 10:34PM by overflowingInt
via reddit https://ift.tt/2q5idjv
OpenSSH 7.7 (2018-04-03): ssh(1)/sshd(8): Drop compatibility support for some very old SSH implementations, released in or before 2001
https://ift.tt/2GDro0I
Submitted April 04, 2018 at 10:28PM by Mcnst
via reddit https://ift.tt/2q5v1ql
https://ift.tt/2GDro0I
Submitted April 04, 2018 at 10:28PM by Mcnst
via reddit https://ift.tt/2q5v1ql
Cisco Smart Install Remote Code Execution
https://ift.tt/2H9SXAd
Submitted April 04, 2018 at 10:22PM by overflowingInt
via reddit https://ift.tt/2GDwF8U
https://ift.tt/2H9SXAd
Submitted April 04, 2018 at 10:22PM by overflowingInt
via reddit https://ift.tt/2GDwF8U
Embedi
Cisco Smart Install Remote Code Execution
Introduction Application: Cisco IOS, Cisco IOS-XE Vendor: Cisco Bugs: Stack-based buffer overflow [CWE-20], [CWE-121] Risk: Critical; AV:N/AC:L/Au:N/C:C/I:C/A:C (10.0) A stack-based buffer overflow vulnerability was found in Smart Install Client code. This…
"Attacking an FTP Client: MGETting more than you bargained for"
https://ift.tt/2GxmCSE
Submitted April 04, 2018 at 10:43PM by root_trainingwheels
via reddit https://ift.tt/2HdzeQ4
https://ift.tt/2GxmCSE
Submitted April 04, 2018 at 10:43PM by root_trainingwheels
via reddit https://ift.tt/2HdzeQ4
snyk.io
Snyk - Attacking an FTP Client: MGETting more than you bargained for
Snyk identified and responsibly disclosed a directory traversal vulnerability found in FTP clients that connect to malicious servers. This post contains the full details of the vulnerability and what you can do to avoid it.
Intel won't ever patch Spectre variant 2 flaw in chips
https://ift.tt/2uHKBNi
Submitted April 05, 2018 at 12:32AM by hightechbridge
via reddit https://ift.tt/2q5iKlw
https://ift.tt/2uHKBNi
Submitted April 05, 2018 at 12:32AM by hightechbridge
via reddit https://ift.tt/2q5iKlw
ZDNet
Intel: We now won't ever patch Spectre variant 2 flaw in these chips | ZDNet
A handful of CPU families that Intel was due to patch will now forever remain vulnerable.
Three Cybersecurity Lessons From Atlanta
https://ift.tt/2GzoI4B
Submitted April 05, 2018 at 01:53AM by punkthesystem
via reddit https://ift.tt/2qacBE6
https://ift.tt/2GzoI4B
Submitted April 05, 2018 at 01:53AM by punkthesystem
via reddit https://ift.tt/2qacBE6
Lawfare
Three Cybersecurity Lessons From Atlanta
Learning from a ransomeware attack in Georgia.
Facebook: 87 million may be affected by Cambridge Analytic
https://ift.tt/2uMi0GL
Submitted April 05, 2018 at 03:13AM by Bastet1
via reddit https://ift.tt/2GBdIaY
https://ift.tt/2uMi0GL
Submitted April 05, 2018 at 03:13AM by Bastet1
via reddit https://ift.tt/2GBdIaY
Business Insider
Facebook drops a bombshell and says most of its 2 billion users may have had their personal data scraped
Facebook has updated its estimate on the number of users affected by the leak of data to Cambridge Analytica. The new estimate is 74% bigger than the prior one.
Under Armour Admits 150 million MyFitnessPal Account Data Breach
https://ift.tt/2GulbUR
Submitted April 05, 2018 at 05:10AM by chull2058
via reddit https://ift.tt/2GWywZK
https://ift.tt/2GulbUR
Submitted April 05, 2018 at 05:10AM by chull2058
via reddit https://ift.tt/2GWywZK
Htbridge
Under Armour Admits 150 million MyFitnessPal Account Data Breach
Significant volume of account data leaked, although passwords were hashed...
Abusing h2 database alias
https://ift.tt/2uQp31c
Submitted April 05, 2018 at 08:57AM by mthbernardes
via reddit https://ift.tt/2JhIVNM
https://ift.tt/2uQp31c
Submitted April 05, 2018 at 08:57AM by mthbernardes
via reddit https://ift.tt/2JhIVNM
mthbernardes.github.io
Gambler - Hacking and other stuffs
Posts about hacking, coding and other stuffs
Scratching the surface of host headers in Safari
https://ift.tt/2JjCA4C
Submitted April 05, 2018 at 01:55PM by albinowax
via reddit https://ift.tt/2GC2YJ9
https://ift.tt/2JjCA4C
Submitted April 05, 2018 at 01:55PM by albinowax
via reddit https://ift.tt/2GC2YJ9
Detectify Labs
Scratching the surface of host headers in Safari
Are Telegram download crypted?
Are Telegram (Windows client) downloads crypted? Or can someone inside or outside the network detect it?
Submitted April 05, 2018 at 03:42PM by giorizzotti
via reddit https://ift.tt/2GZUN94
Are Telegram (Windows client) downloads crypted? Or can someone inside or outside the network detect it?
Submitted April 05, 2018 at 03:42PM by giorizzotti
via reddit https://ift.tt/2GZUN94
reddit
Are Telegram download crypted? • r/security
Are Telegram (Windows client) downloads crypted? Or can someone inside or outside the network detect it?
Facebook admits public data of its 2.2 billion users has been compromised
https://ift.tt/2Jjqeta
Submitted April 05, 2018 at 04:14PM by Horus_Sirius
via reddit https://ift.tt/2uNBFpN
https://ift.tt/2Jjqeta
Submitted April 05, 2018 at 04:14PM by Horus_Sirius
via reddit https://ift.tt/2uNBFpN
TSecurity Portal
Facebook admits public data of its 2.2 billion users has been compromised
Justifying Security Spend, a Response Pt 5
https://www.youtube.com/watch?v=myUq03iTTrA
Submitted April 05, 2018 at 05:40PM by Uminekoshi
via reddit https://ift.tt/2EkJvH9
https://www.youtube.com/watch?v=myUq03iTTrA
Submitted April 05, 2018 at 05:40PM by Uminekoshi
via reddit https://ift.tt/2EkJvH9
YouTube
Justifying Security Spend, a Response from Nehemiah Security: Part 5
In this video, Jerry Caponera responds to an entry in our eBook about "7 Experts on Justifying Security Spend" written by Richard Rushing. If your friend was...
Google bug bounty for security exploit that influences search results
https://ift.tt/2pIeJmN
Submitted April 05, 2018 at 05:35PM by coasaroz
via reddit https://ift.tt/2EkIxuv
https://ift.tt/2pIeJmN
Submitted April 05, 2018 at 05:35PM by coasaroz
via reddit https://ift.tt/2EkIxuv
reddit
Google bug bounty for security exploit that influences... • r/netsec
1 points and 0 comments so far on reddit
Security Services Company in Dwarka
https://ift.tt/2qa9DPF
Submitted April 05, 2018 at 06:08PM by notional123
via reddit https://ift.tt/2JiLWNQ
https://ift.tt/2qa9DPF
Submitted April 05, 2018 at 06:08PM by notional123
via reddit https://ift.tt/2JiLWNQ
Border King Security
Security Services Company in Dwarka - Border King Security
Security Services Company in Dwarka. With the critical help of experts, we offer our clients best office security administration to meet their security related prerequisites. We prepare our security watches in suchRead More...
Security In 5: Episode 210 - Tax Season Is Approaching, That Means The Phishing Scams Are Increasing
https://ift.tt/2GXnyTG
Submitted April 05, 2018 at 06:34PM by BinaryBlog
via reddit https://ift.tt/2IvV3K6
https://ift.tt/2GXnyTG
Submitted April 05, 2018 at 06:34PM by BinaryBlog
via reddit https://ift.tt/2IvV3K6
Libsyn
Security In Five Podcast: Episode 210 - Tax Season Is Approaching, That Means The Phishing Scams Are Increasing
The tax man is coming. The date to file your United States taxes is looming closer and that means the phishing attacks are increasing. This episode goes into the different types of phishing scams, phone call scams and how to avoid them if you get them. …
A little perspective on the life of an infosec pro
https://ift.tt/2uNNMTN
Submitted April 05, 2018 at 06:33PM by slandail
via reddit https://ift.tt/2q9CIvm
https://ift.tt/2uNNMTN
Submitted April 05, 2018 at 06:33PM by slandail
via reddit https://ift.tt/2q9CIvm
Medium
The Curse of the Information Security Professional
A couple of years back, Time magazine published an article summarizing CareerCast’s research on the most/least stressful jobs.
Be Wary of Free Wi-Fi Connections. They Caused More Hacks in 2017 Than Anything Else
https://ift.tt/2q72JuE
Submitted April 05, 2018 at 08:19PM by DEAF-LAMONT
via reddit https://ift.tt/2GV1QzP
https://ift.tt/2q72JuE
Submitted April 05, 2018 at 08:19PM by DEAF-LAMONT
via reddit https://ift.tt/2GV1QzP
Inc.com
Be Wary of Free Wi-Fi Connections. They Caused More Hacks in 2017 Than Anything Else
The average cost of a breach in 2017 was $3.62 million. The most common vector of attack: Remote workers connecting to networks via public Wi-Fi hotspots.
Massachusetts can sue Equifax over data breach, judge rules
https://ift.tt/2HbUhCB
Submitted April 05, 2018 at 07:58PM by HaleRug
via reddit https://ift.tt/2GCwZol
https://ift.tt/2HbUhCB
Submitted April 05, 2018 at 07:58PM by HaleRug
via reddit https://ift.tt/2GCwZol
CNBC
Massachusetts can sue Equifax over data breach, judge rules
Massachusetts can move forward with a lawsuit accusing Equifax of failing to safeguard its databases or provide prompt notice of a breach that exposed the personal data of 147 million people, a state court judge has ruled.
Details of the Mozilla Firefox exploit used at the recent Pwn2Own contest and the patch that fixed it.
https://ift.tt/2He8Oha
Submitted April 05, 2018 at 08:25PM by RedmondSecGnome
via reddit https://ift.tt/2HaUqWG
https://ift.tt/2He8Oha
Submitted April 05, 2018 at 08:25PM by RedmondSecGnome
via reddit https://ift.tt/2HaUqWG
Zero Day Initiative
Quickly Pwned, Quickly Patched: Details of the Mozilla Pwn2Own Exploit
At our recent Pwn2Own 2018 competition, Richard Zhu (fluorescence) targeted and successfully exploited Mozilla Firefox with only one bug. After handing over the bug to Mozilla at the contest, they have promptly coordinated an update in less than 24 hours.…
Your website needs a Content Security Policy. Here's why
https://ift.tt/2IuC2HL
Submitted April 05, 2018 at 08:07PM by deblona
via reddit https://ift.tt/2Jnb5XS
https://ift.tt/2IuC2HL
Submitted April 05, 2018 at 08:07PM by deblona
via reddit https://ift.tt/2Jnb5XS