Kaspersky Labs published a technical analysis of a new malware, Silence that is aimed at attacking financial institutions. After uploading the loader of this malware to Intezer Analyze™, we have found a possible connection through code reuse to the loader…

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens. - ustayready/CredSniper

Microsoft DDE Exploit Unless you’ve been living under a rock for the past few weeks, you’ll most certainly know about the Microsoft DDE exploit and how it can be abused to weaponise a W…

Beau Bullock & Michael Felch // Source: https://chrome.google.com/webstore/detail/google-calendar-by-google/gmbgaklkmjakoegficnlkhebmhkjfich Overview Google Calendar is one of the many features provided to those who sign up for a Google account along with…

Race conditions are a severe but prevalent vulnerability type. Learn how to both exploit and protect against race conditions.

LKM Linux rootkit. Contribute to f0rb1dd3n/Reptile development by creating an account on GitHub.

Deception as Part of Enterprise Security Architecture

It seems that there is no limit to human ingenuity when it comes to working around limitations within one's environment. For example, imagine you genuinely wanted to run a device requiring mains power in the centre of your inflatable pool - you're flat out…

The Internet has become the world’s largest information exchange. Given a phone number, email address, license plate, LinkedIn Profile, Instagram user...

While bug hunting on LegalRobot, I discovered a privilege escalation bug in Meteor by abusing JavaScript's weak types.

Acaba de ser descubierta una nueva vulnerabilidad crítica en Tor Browser que filtra las direcciones IP reales de los usuarios

La nueva Ley de Enjuiciamiento Criminal permite que se cometan pequeños delitos para poder castigar otros delitos mayores.

El guardia civil Angel-Pablo Avilés y la Agencia Española de Protección de Datos se unen para enseñar a padres y colegios cómo proteger a los menores de los peligros de Internet

La AEPD sanciona a Google por tratar sin consentimiento datos personales recogidos a través de redes WiFi abiertas en España

santander. La Escuela de Ciberseguridad y Hacking Ético 'Ciberalisal', puesta en marcha por el IES Alisal de Santander, ha sido la ganadora del Premio ENISE a la mejor iniciativa

Information Security Blog

El kernel Linux no es invulnerable como algunos creen. A pesar de que GNU/Linux es un sistema operativo bastante seguro, eso no quiere decir que lo sea al

The announcement of Amazon Key, a smart lock and security camera that lets couriers into your home, spawned our new series called "Please don't buy this."

Positive Technologies plans to demonstrate at the next Black Hat conference how to hack over USB into Intel Management Engine of most CPUs since 2008.