Fusee Gelee: A Tegra X1 early bootrom context exploit
https://ift.tt/2K75mpy
Submitted April 23, 2018 at 09:26PM by P1n3tr335
via reddit https://ift.tt/2JkiCG2
https://ift.tt/2K75mpy
Submitted April 23, 2018 at 09:26PM by P1n3tr335
via reddit https://ift.tt/2JkiCG2
GitHub
reswitched/fusee-launcher
fusee-launcher - ReSwitched's work-in-progress launcher for one of the Tegra X1 bootROM exploits
Mikrotik security vulnerabilities (>= 6.29) - Winbox password disclosure + RCE
https://ift.tt/2vJ6sok
Submitted April 24, 2018 at 12:10AM by _Ki_
via reddit https://ift.tt/2HJF7qB
https://ift.tt/2vJ6sok
Submitted April 24, 2018 at 12:10AM by _Ki_
via reddit https://ift.tt/2HJF7qB
reddit
New Mikrotik security vulnerability (>= 6.29) -... • r/networking
Source: https://forum.mikrotik.com/viewtopic.php?f=21&t=133533 > We have discovered a new RouterOS vulnerability affecting all RouterOS versions...
Independent Study Validates DJI Data Security Practices
https://ift.tt/2vzVm4I
Submitted April 23, 2018 at 11:52PM by EvanConover
via reddit https://ift.tt/2qTlLpv
https://ift.tt/2vzVm4I
Submitted April 23, 2018 at 11:52PM by EvanConover
via reddit https://ift.tt/2qTlLpv
DJI NEWS
Independent Study Validates DJI Data Security Practices
Abusing MySQL LOCAL INFILE to read client files
https://ift.tt/2qVXG0r
Submitted April 23, 2018 at 07:04PM by bmaia
via reddit https://ift.tt/2HJ4Yiw
https://ift.tt/2qVXG0r
Submitted April 23, 2018 at 07:04PM by bmaia
via reddit https://ift.tt/2HJ4Yiw
w00tsec.blogspot.co.uk
Abusing MySQL LOCAL INFILE to read client files
Recently, I was playing the VolgaCTF 2018 CTF with my teammates from TheGoonies and we came across an interesting Web challenge that we di...
IAM Key Rolling - Basic noscript to roll access keys in AWS - Feedback welcome
https://ift.tt/2qTexko
Submitted April 24, 2018 at 12:55AM by dvnv
via reddit https://ift.tt/2Hlq2MB
https://ift.tt/2qTexko
Submitted April 24, 2018 at 12:55AM by dvnv
via reddit https://ift.tt/2Hlq2MB
GitHub
dvnvtaylor/aws-iam-keyRolling
aws-iam-keyRolling - The focus of this project is on the programmatic "rolling" of AWS IAM access keys. This involves creating new keys to replace previous ones, on a regular basis. This ...
Irony: rt.com has a "share to Telegram" button on articles...but Telegram is banned in Russia
https://imgur.com/90h8GfXSeen from this story: https://www.rt.com/news/424848-assange-twitter-back-ecuador
Submitted April 24, 2018 at 01:46AM by volci
via reddit https://ift.tt/2KbBFDQ
https://imgur.com/90h8GfXSeen from this story: https://www.rt.com/news/424848-assange-twitter-back-ecuador
Submitted April 24, 2018 at 01:46AM by volci
via reddit https://ift.tt/2KbBFDQ
RT International
Assange Twitter account back tweeting as #ReconnectJulian campaign takes over — RT World News
Julian Assange’s Twitter account is active again, four weeks after Ecuador cut off his internet access. The account is being managed by a campaign calling for him to be reconnected.
Running system commands through Nvidia signed binaries
https://ift.tt/2Jlhths
Submitted April 24, 2018 at 02:42AM by TechLord2
via reddit https://ift.tt/2K88pO9
https://ift.tt/2Jlhths
Submitted April 24, 2018 at 02:42AM by TechLord2
via reddit https://ift.tt/2K88pO9
sysadminconcombre.blogspot.co.uk
Running system commands through Nvidia signed binaries
A while ago, when working on PowerMemory, I discovered a hidden account configured by Nvidia on one of my computers ( https://twitter.com/p...
A bunch of Red Pills: VMware Bugs Leading to Guest to Host VMWare Virtual Machine Escapes
https://ift.tt/2HP3mUm
Submitted April 24, 2018 at 02:38AM by TechLord2
via reddit https://ift.tt/2KaH7qs
https://ift.tt/2HP3mUm
Submitted April 24, 2018 at 02:38AM by TechLord2
via reddit https://ift.tt/2KaH7qs
Keen Security Lab Blog
A bunch of Red Pills: VMware Escapes
BackgroundVMware is one of the leaders in virtualization nowadays. They offer VMware ESXi for cloud, and VMware Workstation and Fusion for Desktops (Windows, Linux, macOS).The technology is very well
Vulnerability Disclosure: Fusée Gelée
https://ift.tt/2qUo2Ql
Submitted April 24, 2018 at 03:01AM by EvanConover
via reddit https://ift.tt/2K9k1QR
https://ift.tt/2qUo2Ql
Submitted April 24, 2018 at 03:01AM by EvanConover
via reddit https://ift.tt/2K9k1QR
The state of patch management: You may have missed it because the events happened in extreme slow motion, but the software industry got something right. Software updates are no longer the disruptive horror show they once were.
https://ift.tt/2JiBpSa
Submitted April 24, 2018 at 03:27AM by yourbasicgeek
via reddit https://ift.tt/2HKtMXr
https://ift.tt/2JiBpSa
Submitted April 24, 2018 at 03:27AM by yourbasicgeek
via reddit https://ift.tt/2HKtMXr
In Cybersecurity Industry, Calls For Veto Of Georgia Hacking Bill
https://ift.tt/2HkDnF3
Submitted April 24, 2018 at 03:45AM by manderso7
via reddit https://ift.tt/2vES3tk
https://ift.tt/2HkDnF3
Submitted April 24, 2018 at 03:45AM by manderso7
via reddit https://ift.tt/2vES3tk
90.1 FM WABE
In Cybersecurity Industry, Calls For Veto Of Georgia Hacking Bill | 90.1 FM WABE
A group of cybersecurity specialists, computer scientists, business owners, academics and students are calling on Gov. Nathan Deal to veto a bill that woul
Securing Tomorrow's Information through Post-quantum Cryptography (4 pg PDF, NIST, Feb '18)
https://ift.tt/2HlcBfP
Submitted April 24, 2018 at 04:39AM by ThreshingBee
via reddit https://ift.tt/2qVeftw
https://ift.tt/2HlcBfP
Submitted April 24, 2018 at 04:39AM by ThreshingBee
via reddit https://ift.tt/2qVeftw
duck duck go extension vs https everywhere?
duck duck go's extension forces https on all websites, just like https everywhere. am i correct in assuming that they do the same thing at the same level of success, or is there one that does a better a job?
Submitted April 24, 2018 at 06:47AM by BlakeTrombone
via reddit https://ift.tt/2HpWXf2
duck duck go's extension forces https on all websites, just like https everywhere. am i correct in assuming that they do the same thing at the same level of success, or is there one that does a better a job?
Submitted April 24, 2018 at 06:47AM by BlakeTrombone
via reddit https://ift.tt/2HpWXf2
Reddit
reddit: the front page of the internet
r/security: A friendly and professional place for discussing computer security.
There is no cloud
https://ift.tt/2HMm0MP
Submitted April 24, 2018 at 07:29AM by shughes_ua
via reddit https://ift.tt/2Hlr5wd
https://ift.tt/2HMm0MP
Submitted April 24, 2018 at 07:29AM by shughes_ua
via reddit https://ift.tt/2Hlr5wd
reddit
There is no cloud • r/security
9 points and 0 comments so far on reddit
UK Teen Who Hacked CIA Director Sentenced To 2 Years In Prison
https://ift.tt/2Hm6ZBU
Submitted April 24, 2018 at 11:14AM by Horus_Sirius
via reddit https://ift.tt/2qVeiW9
https://ift.tt/2Hm6ZBU
Submitted April 24, 2018 at 11:14AM by Horus_Sirius
via reddit https://ift.tt/2qVeiW9
TSecurity Portal
UK Teen Who Hacked CIA Director Sentenced To 2 Years In Prison
Yahoo mega-breach hacker faces nearly 8 years in prison
https://ift.tt/2Fc3wjr
Submitted April 24, 2018 at 11:42AM by Horus_Sirius
via reddit https://ift.tt/2K9s8Nt
https://ift.tt/2Fc3wjr
Submitted April 24, 2018 at 11:42AM by Horus_Sirius
via reddit https://ift.tt/2K9s8Nt
TSecurity Portal
Yahoo mega-breach hacker faces nearly 8 years in prison
.NET Deserialization to NTLM hashes
https://ift.tt/2qT6Hbj
Submitted April 24, 2018 at 12:57PM by TheRealest_Me
via reddit https://ift.tt/2vFXOGV
https://ift.tt/2qT6Hbj
Submitted April 24, 2018 at 12:57PM by TheRealest_Me
via reddit https://ift.tt/2vFXOGV
Continuous Cyber Security | UK | Digital Interruption
.NET Deserialization to NTLM hashes | Continuous Cyber Security | UK | Digital Interruption
In a recent pen test we found a deserialization vulnerability which allowed us to recover and crack NTLM hashes
Security service have trained and verified guards in basic security duties
https://ift.tt/2JiuSqD
Submitted April 24, 2018 at 01:10PM by jaijawansecurity
via reddit https://ift.tt/2qT8XiL
https://ift.tt/2JiuSqD
Submitted April 24, 2018 at 01:10PM by jaijawansecurity
via reddit https://ift.tt/2qT8XiL
Medium
Security service have trained and verified guards in basic security duties
The reputed security services ensure that each candidate coming to them for the security jobs and duty is properly trained by the ex-army…
Why is the U.S. Department of Defense Trying to Recruit a 12-Year-Old
https://ift.tt/2qTSSss
Submitted April 24, 2018 at 12:55PM by Iot_Security
via reddit https://ift.tt/2JllORD
https://ift.tt/2qTSSss
Submitted April 24, 2018 at 12:55PM by Iot_Security
via reddit https://ift.tt/2JllORD
Edgy Labs
Why is the U.S. Department of Defense Trying to Recruit a 12-Year-Old?
The U.S. Department of Defense expressed interest in the hacking talents of Reuben Paul, a 12-year-old who can tell us a lot about the state of cybersecurity. IoT devices like smartphones can be compromised and used to access other secure systems. What's…
Breaking bad to make good: Firefox CVE-2017–7843
https://ift.tt/2qSwgIN
Submitted April 24, 2018 at 01:52PM by albinowax
via reddit https://ift.tt/2FbYinG
https://ift.tt/2qSwgIN
Submitted April 24, 2018 at 01:52PM by albinowax
via reddit https://ift.tt/2FbYinG
Medium
Breaking bad to make good: Firefox CVE-2017–7843
Private Browsing Mode (PBM) is one of the most widely known and used feature in not just Firefox but any major browser. Browsers are…
Understanding business priorities is key in justifying security spend
https://ift.tt/2Hp7Bqz
Submitted April 24, 2018 at 05:00PM by Uminekoshi
via reddit https://ift.tt/2JlDlJG
https://ift.tt/2Hp7Bqz
Submitted April 24, 2018 at 05:00PM by Uminekoshi
via reddit https://ift.tt/2JlDlJG
Nehemiah Security
Understanding business priorities is key in justifying security spend - Nehemiah Security
Nehemiah Security partnered with MightyGuides to interview seven industry experts with the mission of advancing the risk management conversation among cyber professionals. Each interviewee was posed the question, “If your friend was put in charge of measuring…