Lisa Forte of Red Goat Cyber Security discusses the similarity between social engineering tactics employed by Islamic State recruiters and cybercriminals.

Loccess smart lock is promoted has being a lock to be used in luggage, bicycles and lockers. Besides opening with a keypad on the bottom of the device, this smart lock is able to be opened with your smart phone using BLE. I was able to get this smart lock

This device sells for about $2 to $4 on AliExpress and is basically for tracking your keys, phone and comes with a special feature which is a button that when pressed, takes a selfie or record audio using your phone.It arrived like this:The seller announces…

(Edit: Some numbers for you people who like numbers) If you're already using bcrypt, relax, you're fine, probably. However, if you're ...

Achieving full R\W primitive with CVE-2019-0539

I love snow sports, and I also like my tunes, so purchasing the Outdoor Tech CHIPS smart headphones was a no-brainer. They fit into audio-equipped helmets and

MouseJack was publicly disclosed February 23rd 2016 and in 2017 an exploit for this vulnerability was released named JackIt.

After my in-depth post last month about unconstrained delegation, this post will discuss a different type of Kerberos delegation: resource-based constrained delegation. The content in this post is based on Elad Shamir’s Kerberos research and combined with…

24 votes and 6 comments so far on Reddit

I discovered a Facebook bug which allows me to identify whether a visitor is logged in to a specific Facebook account. It can check hundreds of identities per second.

Japan Vulnerability Notes

New malware triggers from preview pane, without the user opening the Microsoft Word document. Bromium VP Engineering unravels the threat in the blog.

Japan Vulnerability Notes

A timing attack isn't the most % exciting attack vector for a web app, but there are still enough effective cases. Here's some suggestions on preventing them.

0 votes and 0 comments so far on Reddit

Download github-wiki-auditor.py here The types of issues you see when managing a bug bounty program vary widely, but every now and then a...

I’ve had several customers come to me before a pentest and say they think they’re in a good shape because their vulnerability scan shows no critical vulnerabilities and that they’…

Unauthenticated RCE in MikroTik’s RouterOS SMB

Hey, I am SpyD3r(@TarunkantG) and in this blog, I will be discussing the bug I have found in Quora which can compromise all users on Quora due to Horizontal Privilege Escalation. I worked more than

Wardriving Wardriving was once a really popular sport, I myself loved mapping new areas with my trusty Orinco Gold Card. I’m not sure how popular it is these days but I thought I’d writ…