La CIA trabaja desde 2009 en un programa llamado ExpressLane diseñado específicamente para espiar a otras agencias enlace como la NSA, el FBI y el DHS

Raspberry Pi Firewall and Intrusion Detection System: Maybe you think "Why should I protect my pivate network? I've got no critical information on my computer, no sensitive data". Are your emails really public? Don't you have some photos you don't want to…

Boletín de noticias de seguridad informática unaaldia, ofrecido por Hispasec

Si quieres actualizar gratis a Windows 10, queda poco tiempo para ello. A partir de 2018, no será posible. Recomendamos actualizar lo antes posible.

Microsoft ha parcheado una vulnerabilidad en Windows 10 que permitía robar contraseñas, pero no en Windows 7.

Kaspersky Labs published a technical analysis of a new malware, Silence that is aimed at attacking financial institutions. After uploading the loader of this malware to Intezer Analyze™, we have found a possible connection through code reuse to the loader…

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens. - ustayready/CredSniper

Microsoft DDE Exploit Unless you’ve been living under a rock for the past few weeks, you’ll most certainly know about the Microsoft DDE exploit and how it can be abused to weaponise a W…

Beau Bullock & Michael Felch // Source: https://chrome.google.com/webstore/detail/google-calendar-by-google/gmbgaklkmjakoegficnlkhebmhkjfich Overview Google Calendar is one of the many features provided to those who sign up for a Google account along with…

Race conditions are a severe but prevalent vulnerability type. Learn how to both exploit and protect against race conditions.

LKM Linux rootkit. Contribute to f0rb1dd3n/Reptile development by creating an account on GitHub.

Deception as Part of Enterprise Security Architecture

It seems that there is no limit to human ingenuity when it comes to working around limitations within one's environment. For example, imagine you genuinely wanted to run a device requiring mains power in the centre of your inflatable pool - you're flat out…

The Internet has become the world’s largest information exchange. Given a phone number, email address, license plate, LinkedIn Profile, Instagram user...

While bug hunting on LegalRobot, I discovered a privilege escalation bug in Meteor by abusing JavaScript's weak types.

Acaba de ser descubierta una nueva vulnerabilidad crítica en Tor Browser que filtra las direcciones IP reales de los usuarios

La nueva Ley de Enjuiciamiento Criminal permite que se cometan pequeños delitos para poder castigar otros delitos mayores.

El guardia civil Angel-Pablo Avilés y la Agencia Española de Protección de Datos se unen para enseñar a padres y colegios cómo proteger a los menores de los peligros de Internet

La AEPD sanciona a Google por tratar sin consentimiento datos personales recogidos a través de redes WiFi abiertas en España