FBI: Cyber-Fraud Losses Rise to Reach $1.4B | Threatpost
https://ift.tt/2rt9uaN
Submitted May 08, 2018 at 09:24PM by LindseyOD123
via reddit https://ift.tt/2HZlmfF
https://ift.tt/2rt9uaN
Submitted May 08, 2018 at 09:24PM by LindseyOD123
via reddit https://ift.tt/2HZlmfF
Threatpost | The first stop for security news
FBI: Cyber-Fraud Losses Rise to Reach $1.4B
About 301,580 consumers reported cyber-fraud and malware attacks to the FBI's Internet Crime Complaint Center (IC3) last year – with reported losses exceeding a whopping $1.4 billion.The year's
Clickjacking Google YOLO
https://ift.tt/2JX9RC2
Submitted May 08, 2018 at 09:14PM by albinowax
via reddit https://ift.tt/2rumqNJ
https://ift.tt/2JX9RC2
Submitted May 08, 2018 at 09:14PM by albinowax
via reddit https://ift.tt/2rumqNJ
XSS Jigsaw
Google YOLO
Buttons are everywhere. Elevator buttons, machinery buttons, and even "Nuclear Button" that sits on the President's office desk. But are you always sure the button you push really performs what you want it to do? is a HTML element that lets a web page embed
GNU Wget (1.7 thru 1.19.4) Cookie Injection [CVE-2018-0494]
https://ift.tt/2KH1WtP
Submitted May 08, 2018 at 10:29PM by xBytez
via reddit https://ift.tt/2IqRpoe
https://ift.tt/2KH1WtP
Submitted May 08, 2018 at 10:29PM by xBytez
via reddit https://ift.tt/2IqRpoe
seclists.org
Full Disclosure: GNU Wget Cookie Injection [CVE-2018-0494]
"Equi-Facts": Equifax Clarifies the Numbers for Its Massive Breach | Threatpost
https://ift.tt/2HYFVsW
Submitted May 08, 2018 at 10:43PM by LindseyOD123
via reddit https://ift.tt/2rskTI3
https://ift.tt/2HYFVsW
Submitted May 08, 2018 at 10:43PM by LindseyOD123
via reddit https://ift.tt/2rskTI3
Threatpost | The first stop for security news
“Equi-Facts”: Equifax Clarifies the Numbers for Its Massive Breach
The number of affected U.S. consumers from the infamous 2017 Equifax data breach now totals about 147.9 million, and the breach has touched almost every adult in the U.S., with more than 45% of the po
Adobe Patches Critical Bugs In Flash Player, Creative Cloud | Threatpost
https://ift.tt/2HYA9r6
Submitted May 08, 2018 at 10:38PM by LindseyOD123
via reddit https://ift.tt/2HZ5F8n
https://ift.tt/2HYA9r6
Submitted May 08, 2018 at 10:38PM by LindseyOD123
via reddit https://ift.tt/2HZ5F8n
Threatpost | The first stop for security news
Adobe Patches Critical Bugs In Flash Player, Creative Cloud
Adobe has fixed several critical vulnerabilities – including a critical code execution bug in Adobe Flash Player – as part of its regularly scheduled May Security Bulletin, on Tuesday.In all,
SynAttack Ransomware Now Using Process Doppelgänging
https://ift.tt/2rskFRd
Submitted May 08, 2018 at 10:28PM by coldsystem
via reddit https://ift.tt/2HZ5FFp
https://ift.tt/2rskFRd
Submitted May 08, 2018 at 10:28PM by coldsystem
via reddit https://ift.tt/2HZ5FFp
OSRadar
SynAttack Ransomware Now Using Process Doppelgänging - OSRadar
Ransomware is one of the most heinous pieces of software floating in the cyber world. They attack a computer, encrypts its files and asks for ransom in the change of decryption of the file. SynAttack is one of such ransomware. Recently, an improved edition…
Asus Control Center – An Information Disclosure and a database connection Clear-Text password leakage Vulnerability
https://ift.tt/2FV8Ecc
Submitted May 08, 2018 at 10:27PM by SymbianSyMoh
via reddit https://ift.tt/2rtOyjP
https://ift.tt/2FV8Ecc
Submitted May 08, 2018 at 10:27PM by SymbianSyMoh
via reddit https://ift.tt/2rtOyjP
The US Is Unprepared for Election-Related Hacking in 2018
https://ift.tt/2jHXZJa
Submitted May 08, 2018 at 10:16PM by volci
via reddit https://ift.tt/2K54Rvj
https://ift.tt/2jHXZJa
Submitted May 08, 2018 at 10:16PM by volci
via reddit https://ift.tt/2K54Rvj
reddit
The US Is Unprepared for Election-Related Hacking in 2018 • r/security
1 points and 0 comments so far on reddit
NTLMv1 Multitool - Modifies NTLMv1/NTLMv1-ESS/MSCHAPv2 Hashes so they can be cracked with DES Mode 14000 in Hashcat
https://ift.tt/2FDRfUZ
Submitted May 08, 2018 at 10:58PM by TechLord2
via reddit https://ift.tt/2K0rSzt
https://ift.tt/2FDRfUZ
Submitted May 08, 2018 at 10:58PM by TechLord2
via reddit https://ift.tt/2K0rSzt
GitHub
evilmog/ntlmv1-multi
ntlmv1-multi - NTLMv1 Multitool
Any options like #VeraCrypt that don't require a GUI?
I love using VeraCrypt on various desktop systems I have.I'd like to be able to use it (or something like it) on headless devices - but it seems it requires a GUI to setup and run.What tools like it exist that are usable via the commandline?
Submitted May 08, 2018 at 11:02PM by volci
via reddit https://ift.tt/2FUWJv3
I love using VeraCrypt on various desktop systems I have.I'd like to be able to use it (or something like it) on headless devices - but it seems it requires a GUI to setup and run.What tools like it exist that are usable via the commandline?
Submitted May 08, 2018 at 11:02PM by volci
via reddit https://ift.tt/2FUWJv3
veracrypt.io
VeraCrypt - Free Open source disk encryption with strong security for the Paranoid
VeraCrypt is free open-source disk encryption software for Windows, Mac OS X and Linux. In case an attacker forces you to reveal the password, VeraCrypt provides plausible deniability. In contrast to file encryption, data encryption performed by VeraCrypt…
[Analysis + How-to] OffensiveSplunk vs Grep: Utilising Splunk on the Red Team!
https://ift.tt/2wkKLLz
Submitted May 08, 2018 at 11:59PM by vysec
via reddit https://ift.tt/2I1cjea
https://ift.tt/2wkKLLz
Submitted May 08, 2018 at 11:59PM by vysec
via reddit https://ift.tt/2I1cjea
Vincent Yiu
OffensiveSplunk vs. Grep
TLDR; Using Splunk for Offensive security data analysis has advantages over the traditional Grep when trifling through and analysing data. Why Splunk and not ELK? ELK is a fantastic open source project, and made even easier thanks to the HELK project by Cyb3rward0g.…
Hiding Metasploit Shellcode to Evade Windows Defender
https://ift.tt/2HMiKlv
Submitted May 09, 2018 at 12:27AM by PeterG45
via reddit https://ift.tt/2FW0f88
https://ift.tt/2HMiKlv
Submitted May 09, 2018 at 12:27AM by PeterG45
via reddit https://ift.tt/2FW0f88
Rapid7 Blog
Hiding Metasploit Shellcode to Evade Windows Defender
Being on the offensive side in the security field, I personally have a lot of respect for the researchers and engineers in the antivirus industry, and the companies dedicated to investing so much in them. If malware development is a cat-and-mouse game, then…
GDI Data-Only Attack from Win32k TypeIsolation Resurrected Again in Windows 10 RS3
https://ift.tt/2Ii1nZ1
Submitted May 09, 2018 at 12:26AM by PeterG45
via reddit https://ift.tt/2Iptky0
https://ift.tt/2Ii1nZ1
Submitted May 09, 2018 at 12:26AM by PeterG45
via reddit https://ift.tt/2Iptky0
reddit
GDI Data-Only Attack from Win32k TypeIsolation... • r/netsec
2 points and 0 comments so far on reddit
Android Things 1.0 launches, Google promises 3 years of updates for every device
https://ift.tt/2I1YKY3
Submitted May 09, 2018 at 12:48AM by DJRWolf
via reddit https://ift.tt/2rrmL4E
https://ift.tt/2I1YKY3
Submitted May 09, 2018 at 12:48AM by DJRWolf
via reddit https://ift.tt/2rrmL4E
Ars Technica
Android Things 1.0 launches, Google promises 3 years of updates for every device
Google's solution to IoT security is to do all the updates itself, for free.
Georgia Governor Nathan Deal has vetoed SB 315, the awful computer crime bill that would have threatened independent security research
https://ift.tt/2I3Rhrr
Submitted May 09, 2018 at 02:02AM by wouldshouldcouldhave
via reddit https://ift.tt/2I04NAf
https://ift.tt/2I3Rhrr
Submitted May 09, 2018 at 02:02AM by wouldshouldcouldhave
via reddit https://ift.tt/2I04NAf
gov.georgia.gov
Deal issues 2018 veto statements | Governor Nathan Deal Office of the Governor
Veto Number 1 - HB 354
Spurious #DB exceptions with the "POP SS" instruction (CVE-2018-8897)
https://ift.tt/2I6TgLu
Submitted May 09, 2018 at 01:42AM by 0xNemi
via reddit https://ift.tt/2wuUaQy
https://ift.tt/2I6TgLu
Submitted May 09, 2018 at 01:42AM by 0xNemi
via reddit https://ift.tt/2wuUaQy
www.triplefault.io
Spurious #DB exceptions with the "POP SS" instruction (CVE-2018-8897)
A blog about general reverse engineering, security research, poking around Windows internals, and messing with the Intel x86/AMD64 architecture.
May Patch Tuesday Fixes Two Bugs Under Active Attack | Threatpost
https://ift.tt/2rs98lA
Submitted May 09, 2018 at 02:18AM by LindseyOD123
via reddit https://ift.tt/2wuqoMa
https://ift.tt/2rs98lA
Submitted May 09, 2018 at 02:18AM by LindseyOD123
via reddit https://ift.tt/2wuqoMa
Threatpost | The first stop for security news
May Patch Tuesday Fixes Two Bugs Under Active Attack
Microsoft's May Patch Tuesday fixes include two critical remote code-execution vulnerabilities, both of which are under active attack.The most serious of the two is tied to a Windows 10 VBScript e
Sierra Wireless Patches Critical Vulns in Range of Wireless Routers | Threatpost
https://ift.tt/2jHcpcv
Submitted May 09, 2018 at 02:03AM by LindseyOD123
via reddit https://ift.tt/2KL7kw5
https://ift.tt/2jHcpcv
Submitted May 09, 2018 at 02:03AM by LindseyOD123
via reddit https://ift.tt/2KL7kw5
Threatpost | The first stop for security news
Sierra Wireless Patches Critical Vulns in Hundreds of Thousands of Wireless Routers
Sierra Wireless has patched two critical vulnerabilities for its range of wireless gateways that would leave the enterprise devices helpless to an array of remote threats, including the charms of the
Kuik: a simple yet annoying piece of adware
https://ift.tt/2ryaESC
Submitted May 09, 2018 at 02:52AM by EvanConover
via reddit https://ift.tt/2rsWEdl
https://ift.tt/2ryaESC
Submitted May 09, 2018 at 02:52AM by EvanConover
via reddit https://ift.tt/2rsWEdl
Malwarebytes Labs
Kuik: a simple yet annoying piece of adware - Malwarebytes Labs
Kuik adware, which forces affected machines to join a domain controller, is using this unusual technique to push Google Chrome extensions and coin miner applications. In this blog, we'll provide technical analysis of the adware and custom removal instructions.
Privilege Escalation Through AWS IAM Instance Profile Role
https://ift.tt/2FXkNNx
Submitted May 09, 2018 at 05:33AM by gauravphoenix
via reddit https://ift.tt/2K4wUec
https://ift.tt/2FXkNNx
Submitted May 09, 2018 at 05:33AM by gauravphoenix
via reddit https://ift.tt/2K4wUec
blog.redlock.io
RedTalk: Privilege Escalation Through IAM Instance Profile Role
In our new series, RedTalk, RedLock's CTO Gaurav Kumar explores what can happen during a privilege escalation attack to users with privileged AWS IAM account policies.
Xen Security Advisory CVE-2018-8897
https://ift.tt/2rvKoYH
Submitted May 09, 2018 at 05:09AM by Zolmeister1
via reddit https://ift.tt/2K6cz8e
https://ift.tt/2rvKoYH
Submitted May 09, 2018 at 05:09AM by Zolmeister1
via reddit https://ift.tt/2K6cz8e
reddit
r/netsec - Xen Security Advisory CVE-2018-8897
1 votes and 0 so far on reddit