Security In 5: Episode 239 - Firefox 60 Makes A Push For Enterprise Deployments
https://ift.tt/2IshW1c
Submitted May 16, 2018 at 06:35PM by BinaryBlog
via reddit https://ift.tt/2INJ0LR
https://ift.tt/2IshW1c
Submitted May 16, 2018 at 06:35PM by BinaryBlog
via reddit https://ift.tt/2INJ0LR
Libsyn
Security In Five Podcast: Episode 239 - Firefox 60 Makes A Push For Enterprise Deployments
Mozilla is making sure that Firefox is a valid option for full browser switching. The big gap with the top browsers, outside of Internet Explorer/Edge, is in the large Enterprise deployments and controlling the configurations on thousands of computers. The…
Attackers Use UPnP to Sidestep DDoS Defenses | Threatpost
https://ift.tt/2IJ3NQF
Submitted May 16, 2018 at 07:23PM by whitehattracker
via reddit https://ift.tt/2Kwv31V
https://ift.tt/2IJ3NQF
Submitted May 16, 2018 at 07:23PM by whitehattracker
via reddit https://ift.tt/2Kwv31V
Threatpost | The first stop for security news
Attackers Use UPnP to Sidestep DDoS Defenses
Universal Plug and Play networking protocols have never been a friend of security researchers. On Monday, Imperva gave the InfoSec community another reason to dislike UPnP.In a proof-of-concept Di
"I too like to live dangerously", Accidentally Finding RCE in Signal Desktop via HTML Injection in Quoted Replies (CVE-2018-11101)
https://ift.tt/2rNVjx4
Submitted May 16, 2018 at 07:37PM by mandatoryprogrammer
via reddit https://ift.tt/2k2k5WZ
https://ift.tt/2rNVjx4
Submitted May 16, 2018 at 07:37PM by mandatoryprogrammer
via reddit https://ift.tt/2k2k5WZ
Thehackerblog
"I too like to live dangerously", Accidentally Finding RCE in Signal Desktop via HTML Injection in Quoted Replies | The Hacker…
Remote Code Execution in Signal Desktop via HTML Injection (XSS) in Quoted Replies (CVE-2018-11101).
US Judge Ordered Google to Hand Over Emails Stored On Foreign Servers to FBI
https://ift.tt/2jWny6T
Submitted May 16, 2018 at 09:58PM by dengorilla1
via reddit https://ift.tt/2ImrUp7
https://ift.tt/2jWny6T
Submitted May 16, 2018 at 09:58PM by dengorilla1
via reddit https://ift.tt/2ImrUp7
The Hacker News
US Judge Ordered Google to Hand Over Emails Stored On Foreign Servers to FBI
US Judge Thomas Rueter Ordered Google To Hand Over Email Data Stored On Its Foreign Servers to FBI
A decision for my future. Your help means everything to me at this moment!
https://twitter.com/BaraSec/status/996758212870275075
Submitted May 16, 2018 at 09:56PM by BaraSec
via reddit https://ift.tt/2rOr4WT
https://twitter.com/BaraSec/status/996758212870275075
Submitted May 16, 2018 at 09:56PM by BaraSec
via reddit https://ift.tt/2rOr4WT
Twitter
Bara Abraham
Note: would like to have an InfoSec career in an abroad country someday. I have the following choices now: 1. Intern as sys/net admin/cloud computing, and not get paid for toooo long. 2. Intern in programming and start getting paid after 2-4 months max. Retweet…
A detailed look at bugs in the Class_Terminate method of VBScript that allow code execution and have been seen in the wild.
https://ift.tt/2wItjRv
Submitted May 15, 2018 at 09:32PM by FloodleSnot
via reddit https://ift.tt/2Io0mzo
https://ift.tt/2wItjRv
Submitted May 15, 2018 at 09:32PM by FloodleSnot
via reddit https://ift.tt/2Io0mzo
Hacker Breaches Securus, the Company That Helps Cops Track Phones Across the US
https://ift.tt/2k21QRh
Submitted May 16, 2018 at 10:55PM by speckz
via reddit https://ift.tt/2IpqFkJ
https://ift.tt/2k21QRh
Submitted May 16, 2018 at 10:55PM by speckz
via reddit https://ift.tt/2IpqFkJ
Motherboard
Hacker Breaches Securus, the Company That Helps Cops Track Phones Across the US
A hacker has provided Motherboard with the login details for a company that buys phone location data from major telecom companies and then sells it to law enforcement.
Exclusive OR (XOR), cryptography's exclusive logical operation
https://ift.tt/2Ku5DSB
Submitted May 17, 2018 at 12:57AM by haris3301
via reddit https://ift.tt/2ImQVk3
https://ift.tt/2Ku5DSB
Submitted May 17, 2018 at 12:57AM by haris3301
via reddit https://ift.tt/2ImQVk3
Linkedin
Exclusive OR (XOR), cryptography's exclusive logical operation
Cryptography is a vast subject, from symmetric cryptography which includes stream and block ciphers, to asymmetric cryptography and finally a large
Apple TV Gen3 (Model# A1469) Security Patches?
Does anyone know if the Apple TV Gen 3 (Model# A1469) is still receiving security patches? I found the list of devices from Apple that determines the length of time before a device becomes vintage or obsolete, but it’s still unclear whether or not it’s receiving patches? It seems as though it’s been awhile since the last update was rolled out. Any info is appreciated. Thanks in advance!
Submitted May 17, 2018 at 04:06AM by pearlescentq
via reddit https://ift.tt/2IlHyB3
Does anyone know if the Apple TV Gen 3 (Model# A1469) is still receiving security patches? I found the list of devices from Apple that determines the length of time before a device becomes vintage or obsolete, but it’s still unclear whether or not it’s receiving patches? It seems as though it’s been awhile since the last update was rolled out. Any info is appreciated. Thanks in advance!
Submitted May 17, 2018 at 04:06AM by pearlescentq
via reddit https://ift.tt/2IlHyB3
reddit
r/security - Apple TV Gen3 (Model# A1469) Security Patches?
1 votes and 0 so far on reddit
RIG EK Still Makes Waves, This Time with a Stealthy Backdoor | Threatpost
https://ift.tt/2IoizwQ
Submitted May 17, 2018 at 03:13AM by LindseyOD123
via reddit https://ift.tt/2IqRxoz
https://ift.tt/2IoizwQ
Submitted May 17, 2018 at 03:13AM by LindseyOD123
via reddit https://ift.tt/2IqRxoz
Threatpost | The first stop for security news
RIG EK Still Makes Waves, This Time with a Stealthy Backdoor
Exploit kit activity has been declining since the latter half of 2016, but the RIG EK seems to buck the trend. It's been involved in ongoing activity involving a wide range of crimeware payloads; and
Critical Linux Flaw Opens the Door to Full Root Access | Threatpost
https://ift.tt/2GpEyhc
Submitted May 17, 2018 at 03:12AM by LindseyOD123
via reddit https://ift.tt/2L3SyAG
https://ift.tt/2GpEyhc
Submitted May 17, 2018 at 03:12AM by LindseyOD123
via reddit https://ift.tt/2L3SyAG
Threatpost | The first stop for security news
Critical Linux Flaw Opens the Door to Full Root Access
Red Hat has patched a vulnerability affecting the DHCP client packages that shipped with Red Hat Enterprise Linux 6 and 7. A successful exploit could give an attacker root access and full control over
CloudScraper: Tool to scrape targets in search of cloud resources. AWS, Azure, Digital Ocean.
https://ift.tt/2rPxLZF
Submitted May 17, 2018 at 11:03AM by ok_bye_now_
via reddit https://ift.tt/2GpYTTC
https://ift.tt/2rPxLZF
Submitted May 17, 2018 at 11:03AM by ok_bye_now_
via reddit https://ift.tt/2GpYTTC
GitHub
jordanpotti/CloudScraper
CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
Best Planning & Architectural Services in Chandigarh
https://ift.tt/2rPZoRD
Submitted May 17, 2018 at 11:35AM by akdesignss
via reddit https://ift.tt/2k1JoIE
https://ift.tt/2rPZoRD
Submitted May 17, 2018 at 11:35AM by akdesignss
via reddit https://ift.tt/2k1JoIE
Akcreativatorss
Best Planning & Architectural Services in Chandigarh| AK Designs
Best Planning & Architectural Services in Chandigarh provides by AK Designs and Creativatorss. Top Interior designer have provided planning and architecture for small projects and renovations to the architecture and construction of large businesses and new…
Understanding the core of System Security
https://ift.tt/2k1MI6v
Submitted May 17, 2018 at 02:37PM by r0hi7
via reddit https://ift.tt/2KwckE1
https://ift.tt/2k1MI6v
Submitted May 17, 2018 at 02:37PM by r0hi7
via reddit https://ift.tt/2KwckE1
GitHub
r0hi7/BinExp
BinExp - Linux Binary Exploitation
Eavesdropping Devices Found in Restaurant
https://ift.tt/2rLDtf1
Submitted May 17, 2018 at 02:12PM by QCCGlobal
via reddit https://ift.tt/2k2pwFf
https://ift.tt/2rLDtf1
Submitted May 17, 2018 at 02:12PM by QCCGlobal
via reddit https://ift.tt/2k2pwFf
QCC Global
Eavesdropping Devices Found in Restaurant - QCC Global
Police investigators believe two eavesdropping devices found inside a Europort restaurant placed on the underside of a table, could be related to comparable bugging cases in 2014 that targeted financial executives and prominent lawyers. Past Devices The two…
Artists hacks multiple surveillance cameras worldwide, presents a series of landscape photographs
https://ift.tt/2GmbDuv
Submitted May 17, 2018 at 03:11PM by Iot_Security
via reddit https://ift.tt/2IsYYvK
https://ift.tt/2GmbDuv
Submitted May 17, 2018 at 03:11PM by Iot_Security
via reddit https://ift.tt/2IsYYvK
British Journal of Photography
Marcus DeSieno records the No Man's Land of surveillance cameras worldwide
Hacking into the live feed of a CCTV camera is “shockingly easy” says Marcus DeSieno, whose new book, No Man's Land, presents a series of landscape photographs captured on surveillance cameras around the world. He got the idea for the project back in 2013…
DNC Hacker Denies Russian Link, Says Attack Was His ‘Personal Project'
https://ift.tt/29648Io
Submitted May 17, 2018 at 05:26PM by dengorilla1
via reddit https://ift.tt/2Kw1WvL
https://ift.tt/29648Io
Submitted May 17, 2018 at 05:26PM by dengorilla1
via reddit https://ift.tt/2Kw1WvL
Motherboard
DNC Hacker Denies Russian Link, Says Attack Was His ‘Personal Project'
In a new blog post, Guccifer 2.0 calls Hillary Clinton “false” and Donald Trump "sincere."
How to use the NIST Cybersecurity Framework
https://ift.tt/2ItEU8i
Submitted May 17, 2018 at 05:40PM by celticuki
via reddit https://ift.tt/2IrWde9
https://ift.tt/2ItEU8i
Submitted May 17, 2018 at 05:40PM by celticuki
via reddit https://ift.tt/2IrWde9
E-Volvellc
How to use the NIST Cybersecurity Framework | Information Technology Governance for Executives
By Jeffrey Morgan Follow @evolvejsmorgan NIST Cybersecurity Framework Version 1.0 of the NIST Framework for Improving Critical Infrastructure Cybersecurity (CSF) celebrated its fourth birthday in February. The CSF is a "risk-based approach to managing cybersecurity…
Security In 5: Episode 240 - Internet Security Myths You Should Know About
https://ift.tt/2k6jLqg
Submitted May 17, 2018 at 06:33PM by BinaryBlog
via reddit https://ift.tt/2KxOUOt
https://ift.tt/2k6jLqg
Submitted May 17, 2018 at 06:33PM by BinaryBlog
via reddit https://ift.tt/2KxOUOt
Libsyn
Security In Five Podcast: Episode 240 - Internet Security Myths You Should Know About
The Internet is a wild and crazy place. A vast array of computers, networks, and data. There are also lots of misconceptions, misunderstandings, and myths around security. This episode goes through some of the biggest security myths on security when using…
Signal Desktop gatecrashed by web vulnerabilities
https://ift.tt/2rPJ9ns
Submitted May 17, 2018 at 08:00PM by albinowax
via reddit https://ift.tt/2Im5rbw
https://ift.tt/2rPJ9ns
Submitted May 17, 2018 at 08:00PM by albinowax
via reddit https://ift.tt/2Im5rbw
The Daily Swig | Web security digest
Signal Desktop gatecrashed by web vulnerabilities
Two classic web flaws found in privacy-focused app within a week.
Mac/BSD + Corporate Outlook/Exchange + p≡p (Pretty Easy Privacy) + GnuPG -- Is there a solution that doesn't cost €60 besides save-as, decrypt/verify?
The only thing I've found so far is gpg4o which is really expensive.I know that there is an open-source plugin for windows outlook available on GitHub called the Outlook Privacy Plugin, but it stresses that it doesn't work on any platform other than windows.Right now verification of my emails requires people to go through a PITA manual process of saving the attachments and then using the console gpg on them. That's just not a good way to get people to handle sensitive information well.My company offers a certificate, but it's shared and technically invalid. The other problem is that it's just not widely used outside of exchange, so it works fine for in-house but doesn't work well for anyone using gmail or outlook.com or yahoo mail or other sources. Also, AFAIK the certificate specifically uses S/MIME and I would really prefer PEP.Even the PEP foundation's open-source outlook plugin charges for the binary and obfuscates building the sources. I'd still try to build, except (again) it's Windows only.I'm feeling a bit like nobody wants secure email in outlook :-/note: I use a custom IMAP thunderbird client for my own email and have no issues using either PEP or s/mime with enigmail. Some messages are actually stipulated in my employment agreement to go through the corporate email. The rare cases when I need a signature or encryption and I must use my corporate mail are where the PITA happens.
Submitted May 17, 2018 at 07:51PM by skyleach
via reddit https://ift.tt/2GqD2eE
The only thing I've found so far is gpg4o which is really expensive.I know that there is an open-source plugin for windows outlook available on GitHub called the Outlook Privacy Plugin, but it stresses that it doesn't work on any platform other than windows.Right now verification of my emails requires people to go through a PITA manual process of saving the attachments and then using the console gpg on them. That's just not a good way to get people to handle sensitive information well.My company offers a certificate, but it's shared and technically invalid. The other problem is that it's just not widely used outside of exchange, so it works fine for in-house but doesn't work well for anyone using gmail or outlook.com or yahoo mail or other sources. Also, AFAIK the certificate specifically uses S/MIME and I would really prefer PEP.Even the PEP foundation's open-source outlook plugin charges for the binary and obfuscates building the sources. I'd still try to build, except (again) it's Windows only.I'm feeling a bit like nobody wants secure email in outlook :-/note: I use a custom IMAP thunderbird client for my own email and have no issues using either PEP or s/mime with enigmail. Some messages are actually stipulated in my employment agreement to go through the corporate email. The rare cases when I need a signature or encryption and I must use my corporate mail are where the PITA happens.
Submitted May 17, 2018 at 07:51PM by skyleach
via reddit https://ift.tt/2GqD2eE
www.giepa.de
Mail Encryption with gpg4o® › Giegerich & Partner GmbH
Protect your sensitive mail content - with IT-Security made in Germany Preserve the privacy of your electronic correspondence. Send ...