SSLLabs.com can't connect to browser's with enforced TLS 1.3
https://ift.tt/2z8ViYi
Submitted October 28, 2018 at 04:06PM by rediii123
via reddit https://ift.tt/2JjRfNq
https://ift.tt/2z8ViYi
Submitted October 28, 2018 at 04:06PM by rediii123
via reddit https://ift.tt/2JjRfNq
Filtering NSFW Content While Running a Wall of Sheep in the Wild
https://ift.tt/2qaWnLa
Submitted October 28, 2018 at 06:01PM by xenexfor
via reddit https://ift.tt/2qeOioP
https://ift.tt/2qaWnLa
Submitted October 28, 2018 at 06:01PM by xenexfor
via reddit https://ift.tt/2qeOioP
/dev/random
Post-BruCON Experience - Running a Wall of Sheep in the Wild | /dev/random
The use of a Wall of Sheep is nice to raise the security awareness of your audience. A Wall of Sheep is a tool used to demonstrate what can happen when users connect to a wild network without a minimum level of security. The non-encrypted traffic is analyzed…
IBM Acquiring RedHat.
https://ift.tt/2ObUSWA
Submitted October 29, 2018 at 02:24AM by sastdast
via reddit https://ift.tt/2Q3rrry
https://ift.tt/2ObUSWA
Submitted October 29, 2018 at 02:24AM by sastdast
via reddit https://ift.tt/2Q3rrry
CNBC
IBM to acquire Red Hat in deal valued at $34 billion
The acquisition is by far IBM's largest deal ever, and third-biggest in the history of U.S. tech.
Systemd has a remotely exploitable bug in its DHCPv6 client
https://ift.tt/2CMl9bQ
Submitted October 29, 2018 at 03:47AM by xrna
via reddit https://ift.tt/2qfN1xT
https://ift.tt/2CMl9bQ
Submitted October 29, 2018 at 03:47AM by xrna
via reddit https://ift.tt/2qfN1xT
Erratasec
Systemd is bad parsing and should feel bad
Systemd has a remotely exploitable bug in it's DHCPv6 client. That means anybody on the local network can send you a packet and take control...
Three C-Words of Web App Security: Part 2 – CSRF
https://ift.tt/2PuKBtg
Submitted October 29, 2018 at 01:55PM by CyberBullets
via reddit https://ift.tt/2PZgLu1
https://ift.tt/2PuKBtg
Submitted October 29, 2018 at 01:55PM by CyberBullets
via reddit https://ift.tt/2PZgLu1
Fuxploider - File upload vulnerability scanner and exploitation tool
https://ift.tt/2uIkxkx
Submitted October 29, 2018 at 05:19PM by n1ghtw1sh
via reddit https://ift.tt/2SqeMQZ
https://ift.tt/2uIkxkx
Submitted October 29, 2018 at 05:19PM by n1ghtw1sh
via reddit https://ift.tt/2SqeMQZ
GitHub
almandin/fuxploider
File upload vulnerability scanner and exploitation tool. - almandin/fuxploider
New Android banking family found on Google Play with over 10,000 installs
https://ift.tt/2zeBzGE
Submitted October 29, 2018 at 06:38PM by lukasstefanko
via reddit https://ift.tt/2SsLqBu
https://ift.tt/2zeBzGE
Submitted October 29, 2018 at 06:38PM by lukasstefanko
via reddit https://ift.tt/2SsLqBu
Lukas Stefanko
Android banking malware found on Google Play with over 10,000 installs targets Brazil - Lukas Stefanko
New Android malware banking family was recently found targeting users from Brazil. Trojans are distributed not only through Google Play store but also on Facebook through promoted ads.
Malware sample library
https://ift.tt/2EHUEXR
Submitted October 29, 2018 at 09:03PM by mstfknn
via reddit https://ift.tt/2qiZAbG
https://ift.tt/2EHUEXR
Submitted October 29, 2018 at 09:03PM by mstfknn
via reddit https://ift.tt/2qiZAbG
GitHub
mstfknn/malware-sample-library
Malware sample library. Contribute to mstfknn/malware-sample-library development by creating an account on GitHub.
Attacking Google Authenticator
https://ift.tt/2CL3KjQ
Submitted October 29, 2018 at 09:00PM by westondeboer
via reddit https://ift.tt/2CNLRRG
https://ift.tt/2CL3KjQ
Submitted October 29, 2018 at 09:00PM by westondeboer
via reddit https://ift.tt/2CNLRRG
reddit
r/netsec - Attacking Google Authenticator
3 votes and 0 comments so far on Reddit
Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments
https://ift.tt/2SrDdxq
Submitted October 29, 2018 at 08:58PM by EvanConover
via reddit https://ift.tt/2qibWk4
https://ift.tt/2SrDdxq
Submitted October 29, 2018 at 08:58PM by EvanConover
via reddit https://ift.tt/2qibWk4
Trendmicro
Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments - TrendLabs Security Intelligence Blog
Cybercriminals make use of old file types in brand-new ways in spam attachments, proving that they are regularly experimenting to evade spam filters.
Attacking Google Authenticator
https://ift.tt/2CL3KjQ
Submitted October 29, 2018 at 09:38PM by Chris911
via reddit https://ift.tt/2SwcZKv
https://ift.tt/2CL3KjQ
Submitted October 29, 2018 at 09:38PM by Chris911
via reddit https://ift.tt/2SwcZKv
reddit
r/netsec - Attacking Google Authenticator
1 vote and 0 comments so far on Reddit
Windows Defender Antivirus can now run in a sandbox
https://ift.tt/2z7kq1B
Submitted October 30, 2018 at 01:15AM by picklednull
via reddit https://ift.tt/2zf31E6
https://ift.tt/2z7kq1B
Submitted October 30, 2018 at 01:15AM by picklednull
via reddit https://ift.tt/2zf31E6
Microsoft Security Blog
Windows Defender Antivirus can now run in a sandbox | Microsoft Security Blog
Windows Defender Antivirus has hit a new milestone: the built-in antivirus capabilities on Windows can now run within a sandbox.
Mac cryptocurrency ticker app installs backdoors
https://ift.tt/2OiLrVC
Submitted October 30, 2018 at 01:23AM by EvanConover
via reddit https://ift.tt/2ObKj5T
https://ift.tt/2OiLrVC
Submitted October 30, 2018 at 01:23AM by EvanConover
via reddit https://ift.tt/2ObKj5T
Malwarebytes
Mac cryptocurrency ticker app installs backdoors
A Mac application named CoinTicker has been found installing two different backdoors, capable of keylogging, data theft, execution of arbitrary commands, and more.
Facebook's New ID Verification System Is Intrusive
https://ift.tt/2OelmXt
Submitted October 30, 2018 at 06:02AM by lawandordercandidate
via reddit https://ift.tt/2Q5kFBB
https://ift.tt/2OelmXt
Submitted October 30, 2018 at 06:02AM by lawandordercandidate
via reddit https://ift.tt/2Q5kFBB
1000 Days of Code
Facebook's New ID Verification System Is Intrusive
I run social media for a small company that represents unions in the local area. Before, creating posts and Facebook ads have been easy. With [...]
.:: Phrack Magazine ::. Viewer Discretion Advised
https://ift.tt/2Svp6HG
Submitted October 30, 2018 at 04:03PM by _cacao
via reddit https://ift.tt/2AAJaBn
https://ift.tt/2Svp6HG
Submitted October 30, 2018 at 04:03PM by _cacao
via reddit https://ift.tt/2AAJaBn
phrack.org
.:: Phrack Magazine ::.
Phrack staff website.
Persistent GCP backdoors with Google’s Cloud Shell
https://ift.tt/2Q5Fxsw
Submitted October 30, 2018 at 08:36PM by lukeberner
via reddit https://ift.tt/2qku7WG
https://ift.tt/2Q5Fxsw
Submitted October 30, 2018 at 08:36PM by lukeberner
via reddit https://ift.tt/2qku7WG
Medium
Persistent GCP backdoors with Google’s Cloud Shell
Cloud Shell GCP Google Cloud Security
Java Deserialization — From Discovery to Reverse Shell on Limited Environments
https://ift.tt/2Dc0rDo
Submitted October 30, 2018 at 09:51PM by H3x0r1337
via reddit https://ift.tt/2OgmeLs
https://ift.tt/2Dc0rDo
Submitted October 30, 2018 at 09:51PM by H3x0r1337
via reddit https://ift.tt/2OgmeLs
Medium
Java Deserialization — From Discovery to Reverse Shell on Limited Environments
By Ahmed Sherif & Francesco Soncina
C++ Async HTTPS server built with oat++ framework and LibreSSL
https://ift.tt/2Q1P6IJ
Submitted October 31, 2018 at 12:14AM by oatpp
via reddit https://ift.tt/2OVm94O
https://ift.tt/2Q1P6IJ
Submitted October 31, 2018 at 12:14AM by oatpp
via reddit https://ift.tt/2OVm94O
GitHub
oatpp/oatpp-examples
List of example projects of how to use oat++ framework - oatpp/oatpp-examples
Google Home (in)Security: Unauthenticated Google Home API with all sorts of fun uses
https://ift.tt/2OV5MoZ
Submitted October 31, 2018 at 02:57AM by Syonyk
via reddit https://ift.tt/2EPjXaj
https://ift.tt/2OV5MoZ
Submitted October 31, 2018 at 02:57AM by Syonyk
via reddit https://ift.tt/2EPjXaj
JerryGamblin.com
Google Home (in)Security
TL;DR: An undocumented API in Google home devices is easily exploitable. This command will reboot any on your local network: nmap –open -p 8008 192.168.1.0/24 | awk ‘/is up/ {print up};…
Project Dribble: hacking Wi-Fi with cached JavaScript
https://ift.tt/2Oia0lo
Submitted October 31, 2018 at 02:25AM by rhaidiz
via reddit https://ift.tt/2zdfx7j
https://ift.tt/2Oia0lo
Submitted October 31, 2018 at 02:25AM by rhaidiz
via reddit https://ift.tt/2zdfx7j
Federico De Meo
Project Dribble: hacking Wi-Fi with cached JavaScript
@font-face { font-family: "Harry"; src: url(/fonts/hp.ttf) format("truetype"); } I’ve been meaning to work on this little project for quite some time, but life got in the way and I was always t
Isolated Networks in the Cloud – it's possible
https://ift.tt/2GXbrSH
Submitted October 31, 2018 at 09:37AM by midael
via reddit https://ift.tt/2qk6nSl
https://ift.tt/2GXbrSH
Submitted October 31, 2018 at 09:37AM by midael
via reddit https://ift.tt/2qk6nSl
Medium
Isolated Networks in the Cloud
After a recent roadmapping session, it seemed like a good idea to research network isolation in cloud environments. We chose to test AWS…