🕴 Cybersecurity Team Holiday Guide: 2019 Gag Gift Edition 🕴
📖 Read
via "Dark Reading: ".
Make your favorite security experts laugh with these affordable holiday gifts.📖 Read
via "Dark Reading: ".
Dark Reading
Cybersecurity Team Holiday Guide: 2019 Gag Gift Edition
Make your favorite security experts laugh with these affordable holiday gifts.
❌ Authorities Break Up Imminent Monitor Spyware Organization ❌
📖 Read
via "Threatpost".
The infrastructure behind a remote access tool (RAT) allowing full remote takeover of a victim machine has been dismantled.📖 Read
via "Threatpost".
Threat Post
Authorities Break Up Imminent Monitor Spyware Organization
The infrastructure behind a remote access tool (RAT) allowing full remote takeover of a victim machine has been dismantled.
🛠 SQLMAP - Automatic SQL Injection Tool 1.3.12 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
SQLMAP - Automatic SQL Injection Tool 1.3.12 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 I2P 0.9.44 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties. This is the source code release version.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
I2P 0.9.44 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Microsoft Fixes Flaw Threatening Azure Accounts 🕴
📖 Read
via "Dark Reading: ".
Researchers detail a bug they found in some of Microsoft's OAuth 2.0 applications.📖 Read
via "Dark Reading: ".
Dark Reading
Cloud Security recent news | Dark Reading
Explore the latest news and expert commentary on Cloud Security, brought to you by the editors of Dark Reading
❌ Microsoft OAuth Flaw Opens Azure Accounts to Takeover ❌
📖 Read
via "Threatpost".
The Microsoft applications are vulnerable to an OAuth authentication flaw that could enable Azure account takeover.📖 Read
via "Threatpost".
Threat Post
Microsoft OAuth Flaw Opens Azure Accounts to Takeover
Some Microsoft applications are vulnerable to an OAuth authentication flaw that could enable Azure account takeover.
🕴 Poll Results: Security Pros Make The (Hypothetically) Ultimate Data Decision 🕴
📖 Read
via "Dark Reading: ".
What if you could protect only one category of your organization's data?📖 Read
via "Dark Reading: ".
Dark Reading
Poll Results: Security Pros Make The (Hypothetically) Ultimate Data Decision
What if you could protect only one category of your organization's data?
🕴 StrandHogg Vulnerability Affects All Versions of Android 🕴
📖 Read
via "Dark Reading: ".
The bug enables malware to pose as any legitimate Android app, letting attackers track messages, photos, credentials, and phone conversations.📖 Read
via "Dark Reading: ".
Dark Reading
StrandHogg Vulnerability Affects All Versions of Android
The bug enables malware to pose as any legitimate Android app, letting attackers track messages, photos, credentials, and phone conversations.
🕴 DHS to Require Federal Agencies Set Vulnerability Disclosure Policies 🕴
📖 Read
via "Dark Reading: ".
The Cybersecurity and Infrastructure Security Agency (CISA) publishes a draft document mandating a vulnerability disclosure policy and a strategy for handling reports of security weaknesses.📖 Read
via "Dark Reading: ".
Dark Reading
DHS to Require Federal Agencies to Set Vulnerability Disclosure Policies
The Cybersecurity and Infrastructure Security Agency (CISA) publishes a draft document mandating a vulnerability disclosure policy and a strategy for handling reports of security weaknesses.
🕴 Kali Linux Gets New Desktop Environment & Undercover Theme 🕴
📖 Read
via "Dark Reading: ".
Updates to pen-testing platform are designed to improve performance and user interface, says Offensive Security, maintainer of the open source project.📖 Read
via "Dark Reading: ".
Dark Reading
Kali Linux Gets New Desktop Environment & Undercover Theme
Updates to pen-testing platform are designed to improve performance and user interface, says Offensive Security, maintainer of the open source project.
⚠ Ad fraud: Fake local news sites are rolling in the dough ⚠
📖 Read
via "Naked Security".
"forbesbusinessinsider.com?" Names like that sound close enough to real news domains to pass, but bots are the only ones visiting.📖 Read
via "Naked Security".
Naked Security
Ad fraud: Fake local news sites are rolling in the dough
“forbesbusinessinsider.com?” Names like that sound close enough to real news domains to pass, but bots are the only ones visiting.
⚠ IM RAT spy tool seller raided, busted, kicked offline ⚠
📖 Read
via "Naked Security".
The spyware gave complete control of victimized computers, sold for as little as$25, and was bought by 14,500 hackers worldwide.📖 Read
via "Naked Security".
Naked Security
IM RAT spy tool seller raided, busted, kicked offline
The spyware gave complete control of victimized computers, sold for as little as$25, and was bought by 14,500 hackers worldwide.
⚠ Mixcloud user accounts up for sale on dark web ⚠
📖 Read
via "Naked Security".
A hacker is ransoming account data stolen from music streaming service Mixcloud, according to reports.📖 Read
via "Naked Security".
Naked Security
Mixcloud user accounts up for sale on dark web
A hacker is ransoming account data stolen from music streaming service Mixcloud, according to reports.
⚠ SMS company exposes millions of text messages, credentials online ⚠
📖 Read
via "Naked Security".
Researchers at VpnMentor claim that the TrueDialog data leak exposure could have compromised tens of millions of people.📖 Read
via "Naked Security".
Naked Security
SMS company exposes millions of text messages, credentials online
Researchers at VpnMentor claim that the TrueDialog data leak exposure could have compromised tens of millions of people.
❌ ‘StrandHogg’ Vulnerability Allows Malware to Pose as Legitimate Android Apps ❌
📖 Read
via "Threatpost".
The flaw can allow hackers to take over typical device functions like sending messages and taking photos because users think malicious activity is a mobile app they use regularly.📖 Read
via "Threatpost".
Threat Post
‘StrandHogg’ Vulnerability Allows Malware to Pose as Legitimate Android Apps
The flaw can allow hackers to take over typical device functions like sending messages and taking photos because users think malicious activity is a mobile app they use regularly.
❌ Supply Chain Account Takeover: How Criminals Exploit Third-Party Access ❌
📖 Read
via "Threatpost".
It’s important for businesses of all sizes to not only view their suppliers’ attack surface as their own but also extend some of their security protections.📖 Read
via "Threatpost".
Threat Post
Supply Chain Account Takeover: How Criminals Exploit Third-Party Access
It’s important for businesses of all sizes to not only view their suppliers’ attack surface as their own but also extend some of their security protections.
🔐 New Android bug targets banking apps on Google Play store 🔐
📖 Read
via "Security on TechRepublic".
Labeled "StrandHogg," the vulnerability discovered by the mobile security vendor Promon could give hackers access to users' photos, contacts, phone logs, and more.📖 Read
via "Security on TechRepublic".
TechRepublic
New Android bug targets banking apps on Google Play store
Labeled "StrandHogg," the vulnerability discovered by the mobile security vendor Promon could give hackers access to users' photos, contacts, phone logs, and more.
ATENTION‼ New - CVE-2019-12503
📖 Read
via "National Vulnerability Database".
Due to unencrypted and unauthenticated data communication, the wireless barcode scanner Inateck BCST-60 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In this way, an attacker can remotely take control over the victim's computer that is operated with an affected receiver of this device.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-12394
📖 Read
via "National Vulnerability Database".
Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication.📖 Read
via "National Vulnerability Database".