6 buckets of a security bug (for product security teams)
http://bit.ly/2INBgd2
Submitted April 27, 2019 at 10:50PM by nibblesec
via reddit http://bit.ly/2IJWrwN
http://bit.ly/2INBgd2
Submitted April 27, 2019 at 10:50PM by nibblesec
via reddit http://bit.ly/2IJWrwN
reddit
r/netsec - 6 buckets of a security bug (for product security teams)
0 votes and 0 comments so far on Reddit
How to build a passive IMSI catcher
http://bit.ly/2WcgYwW
Submitted April 28, 2019 at 03:41AM by fo0bat
via reddit http://bit.ly/2XPeq8v
http://bit.ly/2WcgYwW
Submitted April 28, 2019 at 03:41AM by fo0bat
via reddit http://bit.ly/2XPeq8v
Harrison's Sandbox
Building a Passive IMSI Catcher
This post walks through the processes of building a passive IMSI catcher. The purpose of this post is to be educational - to highlight the ease of which these devices can be built, and to practically show how privacy is already being compromised today.
AutoMacTC: Automating Mac Forensic Triage | CrowdStrike
http://bit.ly/2UHPazc
Submitted April 28, 2019 at 02:23PM by digicat
via reddit http://bit.ly/2PyzCww
http://bit.ly/2UHPazc
Submitted April 28, 2019 at 02:23PM by digicat
via reddit http://bit.ly/2PyzCww
Crowdstrike
AutoMacTC: Automating Mac Forensic Triage | CrowdStrike
CrowdStrike introduces AutoMacTC, a new tool for automating Mac forensic triage. Learn how AutoMacTC works and how it amplifies your incident response efforts.
The inception bar: a new phishing method
http://bit.ly/2voHFTo
Submitted April 28, 2019 at 02:23PM by _vavkamil_
via reddit http://bit.ly/2voqXDP
http://bit.ly/2voHFTo
Submitted April 28, 2019 at 02:23PM by _vavkamil_
via reddit http://bit.ly/2voqXDP
jameshfisher.com
The inception bar: a new phishing method
Welcome to HSBC, the world’s seventh-largest bank! Of course, the page you’re reading isn’t actually hosted on hsbc.com; it’s hosted on jameshfisher.com. But when you visit this site on Chrome for mobile, and scroll a little way, the page is able to display…
Call for Papers @ Camp++, a security camp in a 19th century fort @ Komárom, Hungary
http://bit.ly/2VvP3uJ
Submitted April 28, 2019 at 04:18PM by dn3t
via reddit http://bit.ly/2GOBQVP
http://bit.ly/2VvP3uJ
Submitted April 28, 2019 at 04:18PM by dn3t
via reddit http://bit.ly/2GOBQVP
reddit
r/netsec - Call for Papers @ Camp++, a security camp in a 19th century fort @ Komárom, Hungary
0 votes and 0 comments so far on Reddit
GitHub - jrentenaar/Office-365-Extractor: The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
http://bit.ly/2DBc1Xq
Submitted April 28, 2019 at 02:05PM by Bobbygehim
via reddit http://bit.ly/2XQzoDZ
http://bit.ly/2DBc1Xq
Submitted April 28, 2019 at 02:05PM by Bobbygehim
via reddit http://bit.ly/2XQzoDZ
GitHub
jrentenaar/Office-365-Extractor
The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL) - jrentenaar/Office-365-Extractor
HackTheBox Write-up Irked
http://bit.ly/2PCSPNB
Submitted April 29, 2019 at 12:08AM by Eta-Meson
via reddit http://bit.ly/2WaZTn7
http://bit.ly/2PCSPNB
Submitted April 29, 2019 at 12:08AM by Eta-Meson
via reddit http://bit.ly/2WaZTn7
Medium
HackTheBox Write-up Irked
This is the write-up of the Machine IRKED from HackTheBox
SSTI in Confluence Server via Widget Connector (and Recon for Bug Bounties)
http://bit.ly/2DCwefs
Submitted April 28, 2019 at 11:43PM by nibblesec
via reddit http://bit.ly/2WbwJ7x
http://bit.ly/2DCwefs
Submitted April 28, 2019 at 11:43PM by nibblesec
via reddit http://bit.ly/2WbwJ7x
Medium
How I hacked 50+ Companies in 6 hrs
Long story short, I have created my Hackerone/Bugcrowd profiles a way back in 2016 but I have never reported a bug there. I have never…
The only PowerShell Command you will ever need to find out who did what in Active Directory
http://bit.ly/2DBba96
Submitted April 29, 2019 at 06:26AM by yukon-corne1ius
via reddit http://bit.ly/2UNlPDo
http://bit.ly/2DBba96
Submitted April 29, 2019 at 06:26AM by yukon-corne1ius
via reddit http://bit.ly/2UNlPDo
reddit
r/sysadmin - The only PowerShell Command you will ever need to find out who did what in Active Directory
1,797 votes and 115 comments so far on Reddit
SpamTitan Email Security Now Includes Sandboxing and DMARC Authentication
http://bit.ly/2LbAb0V
Submitted April 29, 2019 at 03:19PM by askdjgfczx
via reddit http://bit.ly/2VFFI3X
http://bit.ly/2LbAb0V
Submitted April 29, 2019 at 03:19PM by askdjgfczx
via reddit http://bit.ly/2VFFI3X
WebTitan
SpamTitan Email Security Now Includes Sandboxing and DMARC Authentication - WebTitan
TitanHQ has announced its award-winning email security solution is now even better. Sandboxing and DMARC email authentication have now been added to better protect users from email threats.
Could use some third party opinion about carrer change
http://bit.ly/2XPsleI
Submitted April 29, 2019 at 05:34PM by show_me_sth_new
via reddit http://bit.ly/2LcJPQN
http://bit.ly/2XPsleI
Submitted April 29, 2019 at 05:34PM by show_me_sth_new
via reddit http://bit.ly/2LcJPQN
reddit
r/AskNetsec - Could use some third party opinion about carrer change
0 votes and 3 comments so far on Reddit
Community Health Systems Data Breach Settlement Agreed
http://bit.ly/2ILzMQR
Submitted April 29, 2019 at 05:14PM by asad1234ry
via reddit http://bit.ly/2V4LOem
http://bit.ly/2ILzMQR
Submitted April 29, 2019 at 05:14PM by asad1234ry
via reddit http://bit.ly/2V4LOem
Compliance Junction
Community Health Systems Data Breach Settlement Agreed - Compliance Junction
Facebook Twitter Google+ LinkedIn Patients of Community Health Systems’ (CHS), who had their protected health information (PHI) illegally obtains in a hacking attack in 2014 have been offered compensation in relation to the violation of [...]
CoreHook: Function Intercept Framework
http://bit.ly/2VL8IUx
Submitted April 29, 2019 at 10:18PM by unknownv2
via reddit http://bit.ly/2V1wpvs
http://bit.ly/2VL8IUx
Submitted April 29, 2019 at 10:18PM by unknownv2
via reddit http://bit.ly/2V1wpvs
GitHub
unknownv2/CoreHook
A library that simplifies intercepting application function calls using managed code and the .NET Core runtime - unknownv2/CoreHook
Extract PGP secret keys from Gnuk / Nitrokey Start firmwares
http://bit.ly/2GPFCyi
Submitted April 29, 2019 at 11:50PM by r0t42
via reddit http://bit.ly/2vpdNX8
http://bit.ly/2GPFCyi
Submitted April 29, 2019 at 11:50PM by r0t42
via reddit http://bit.ly/2vpdNX8
reddit
r/crypto - Extract PGP secret keys from Gnuk / Nitrokey Start firmwares
0 votes and 1 comment so far on Reddit
modDetective - Small Python tool that analyzes the modification times of files on a system in order to investigate recent system activity
http://bit.ly/2V8WokV
Submitted April 30, 2019 at 01:54AM by kindredsec
via reddit http://bit.ly/2GJegZj
http://bit.ly/2V8WokV
Submitted April 30, 2019 at 01:54AM by kindredsec
via reddit http://bit.ly/2GJegZj
GitHub
itsKindred/modDetective
modDetective is a small Python tool that chronologizes files based on modification time in order to investigate recent system activity. - itsKindred/modDetective
12 Ways Cloud Upended IT Security (And What You Can Do About It)
http://bit.ly/2IZ9oSK
Submitted April 30, 2019 at 07:01AM by OnlyInstruction
via reddit http://bit.ly/2ZJfbSn
http://bit.ly/2IZ9oSK
Submitted April 30, 2019 at 07:01AM by OnlyInstruction
via reddit http://bit.ly/2ZJfbSn
www.fugue.co
12 Ways Cloud Upended IT Security (And What You Can Do About It)
The cloud represents the most disruptive trend in enterprise IT over the past decade, and security teams have not escaped turmoil during the transition. Here, we take a look at the ways cloud has disrupted security, with insights into how security teams can…
Unknown Data Breach Exposes 80 Million US Households
http://bit.ly/2J3m8aR
Submitted April 30, 2019 at 02:40PM by damaxoh
via reddit http://bit.ly/2IPs6ge
http://bit.ly/2J3m8aR
Submitted April 30, 2019 at 02:40PM by damaxoh
via reddit http://bit.ly/2IPs6ge
vpnMentor
Report: Unknown Data Breach Exposes 80 Million US Households
vpnMentor’s research team discovered a hack affecting 80 million American households. Known hacktivists Noam Rotem and Ran Locar discovered an unprotected ...
Breaking Widevine Content Protection (DRM) on Streaming Websites
http://bit.ly/2IQ2WOH
Submitted April 30, 2019 at 02:30PM by JustAPenTester
via reddit http://bit.ly/2ZJFKXo
http://bit.ly/2IQ2WOH
Submitted April 30, 2019 at 02:30PM by JustAPenTester
via reddit http://bit.ly/2ZJFKXo
Fidus Information Security
A Primer on Widevine and How It Can Be Abused to Download Encrypted Movies/Shows - Fidus Information Security
First things first, what is Widevine? Widevine is an encryption framework that is used for digital rights management (DRM). It’s owned by Google, but used by a huge array of content creators and streaming services, on account of it being royalty free to use…
Eight Devices, One Exploit: OEM Vulnerabilities
http://bit.ly/2XW9Pl6
Submitted April 30, 2019 at 06:43PM by chicksdigthelongrun
via reddit http://bit.ly/2GSqmRk
http://bit.ly/2XW9Pl6
Submitted April 30, 2019 at 06:43PM by chicksdigthelongrun
via reddit http://bit.ly/2GSqmRk
Medium
Eight Devices, One Exploit
OEM Vulnerabilities
Survey of AWS IAM Exploitation Techniques
http://bit.ly/2Y0lLlP
Submitted April 30, 2019 at 06:36PM by illegitimateDA
via reddit http://bit.ly/2J52JWY
http://bit.ly/2Y0lLlP
Submitted April 30, 2019 at 06:36PM by illegitimateDA
via reddit http://bit.ly/2J52JWY
reddit
r/netsec - Survey of AWS IAM Exploitation Techniques
0 votes and 0 comments so far on Reddit
Misusing TCP Timestamps for uptime calculation & host identification
http://bit.ly/2XV3JkO
Submitted April 30, 2019 at 05:46PM by pimterry
via reddit http://bit.ly/2GWZL5L
http://bit.ly/2XV3JkO
Submitted April 30, 2019 at 05:46PM by pimterry
via reddit http://bit.ly/2GWZL5L
www.scip.ch
Misusing TCP Timestamps
by Veit Hailperin