WhatsApp empieza a cruzar datos con Facebook tras su caída: ahora la cuenta de mensajería aparece dentro de la red social.

Researchers from Positive Technologies — a provider of enterprise security solutions — have found a way to disable the Intel Management Engine (ME), a much-hated component of Intel CPUs.

Security researchers have discovered two flaws that affect the extension systems embedded in today's browsers, such as Firefox, Safari, and all the Chromium-related offshoots, such as Chrome, Opera, and others.

Last month, a number of users started posting on South Korean sites screenshots of suspicious SMS messages phishing texts (also known as smishing) to lure them into clicking on shortened URLs. For example, the following message asks the user to click on the…

Tonight my brain decided, instead of sleeping (why even bother trying, right?), to start a new short adventure in the Bluetooth Low Energy world. I’m a happy Crafty vaporizer owner and as I discovered

When Simon blogged about the risks of JavaScript a few weeks back, he mentioned that we've begun to see JIT vulnerabilities in submissions to the ZDI program and as part of Pwn2Own. Today, I'll expand on his blog post by covering a vulnerability in Webkit…

By @dronesec and @breenmachine   This a project my friend drone <@dronesec> and I have been poking at for quite some time and are glad to finally be releasing. As the title implies, we&#…

This blog covers Cross-Site Scripting (XSS) vulnerability from a different perspective. Generally, XSS is when the application takes user supplied JavaScript and displays it without...

Microsoft ha lanzado un parche con fallos para Windows 7 que buscaba arreglar un fallo introducido en un parche anterior.

En Securízame nos gusta escucharos y poder cubrir todas las necesidades profesionales que se os presentan. Muchos de vosotros, tras asistir a otros cursos

Ocurrió a comienzos de este año. El personal de la Universidad de Manchester se encontraba limpiando un cuarto donde se almacenaban documentos cuando hallaron un montón de correspondencia. Estaban ante una colección inédita de cartas del famoso matemático…

La base de datos incluye también contraseñas.

Presentations from BSides Manchester 2017 - 17/08/2017

Ever fantasized about playing with docker misconfigurations, privilege escalation, etc. within a container? Download this VM, pull out your pentest hats and get started :) We have 2 Modes: HARD: This

tl;dr: this is not an audit and I take no responsibility for your backups, but I
had a quick look at the crypto and I think I'm going to use restic for my
personal backups.

I keep hearing good things
[http://jpmens.net/2017/08/22/my-backup-software-of-choice…

Earlier this month (August 2017) Troy Hunt founder of the website Have I been pwned? [0] released over 319 million plaintext passwords [1...

Last week I was contacted by someone alerting me to the presence of a spam list. A big one. That's a bit of a relative term though because whilst I've loaded "big" spam lists into Have I been pwned (HIBP) before, the largest to date has been a mere 393m records…