SysAdmin 24x7
@sysadmin24x7
4.34K subscribers
41 photos
2 videos
8 files
6.02K links
Noticias y alertas de seguridad informática.
Chat y contacto:
t.me/sysadmin24x7chat
Download Telegram
About
Blog
Apps
Platform
Join
SysAdmin 24x7
4.34K subscribers
SysAdmin 24x7
[INFORME] Como desplegar un sistema de mensajería instantánea seguro.

https://t.co/CFUkPBx6Vg
126 views
SysAdmin 24x7
Escaping VMWare hypervisor
https://t.co/qpKKPpEDRr
#hypervisor #vulnerability
Zero Day Initiative
VMware Escapology – How to Houdini the Hypervisor
Recently at the DerbyCon conference in Louisville, KY, Jasiel and I
presented “VMware Escapology: How to Houdini The Hypervisor.” My colleague
Abdul-Aziz Hariri has blogged about VMware escapes in the past.
Unfortunately, circumstances prevented Abdul…
133 views
SysAdmin 24x7
Hackers Hijack Ongoing Email Conversations to Insert Malicious Documents - by @campuscodi
https://t.co/4ivtla94mf
BleepingComputer
Hackers Hijack Ongoing Email Conversations to Insert Malicious Documents
A group of hackers is using a sophisticated technique of hijacking ongoing email conversations to insert malicious documents that appear to be coming from a legitimate source and infect other targets participating in the same conversational thread.
137 views
SysAdmin 24x7
SysAdmin 24x7:
DFIR: Documento sobre como detectar las técnicas de ataque de robo de credenciales mediante el uso de herramientas disponibles en Internet. El PDF muestra cómo actúa Microsoft Advanced Threat Analytics (ATA). Muy interesante el escenario de ataques.

https://t.co/RyHVeKMrG2
Microsoft
TechNet ATA Suspicious Activity Playbook
This was updated to include the new ATA v1.8 capabilitiesThis article will walk through the credential theft attack techniques by using readily available research tools on the Internet.  At each point of the attack we will show how Microsoft’s Advanced Threat…
158 views
SysAdmin 24x7
Rusia usó drones para ‘hackear’ los móviles de la OTAN en Europa del Este
https://t.co/ABa6J1SPWY
#ciberespionaje #ciberseguridad
TICbeat
Rusia usó drones para ‘hackear’ los móviles de la OTAN en Europa...
Los soldados de la OTAN desplegados en las fronteras con Rusia han sufrido diversos y muy numerosos ataques de origen ruso para comprometer sus teléfonos y... #ciberespionaje #ciberseguridad #drones
171 views
SysAdmin 24x7
https://nakedsecurity.sophos.com/2017/10/06/update-your-androids-the-october-patches-are-out/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+nakedsecurity+%28Naked+Security+-+Sophos%29
Naked Security
Update your Androids, the October patches are out
It’s time to give Android’s Media Framework some TLC
160 views
SysAdmin 24x7
Grave #ciberataque ruso a EEUU: roban documentos altamente secretos a la NSA
https://t.co/hjsx7koqYM
El Confidencial
Grave ciberataque ruso a EEUU: roban documentos altamente secretos a la NSA
Ciberseguridad: Grave ciberataque ruso a EEUU: roban documentos altamente secretos a la NSA. Noticias de Tecnología. Este gravísimo ataque podría haber ayudado a los piratas a infiltrarse en los sistemas del país americano sin ser vistos.
182 views
SysAdmin 24x7
#Apple Allows Uber to Use a Powerful Feature that Lets it Record iPhone Screen.
https://t.co/T0dSsQmJgC
#TheHackerNews
The Hacker News
Apple Allows Uber to Use a Powerful Feature that Lets it Record iPhone Screen
Researcher reveals Apple allowed Uber app to use a powerful screen-recording API that lets it record users' iPhone screen
192 views
SysAdmin 24x7
Some Motherboards Plagued by BIOS Firmware Implementation Flaws
https://www.bleepingcomputer.com/news/security/some-motherboards-plagued-by-bios-firmware-implementation-flaws/
BleepingComputer
Some Motherboards Plagued by BIOS Firmware Implementation Flaws
Alex Matrosov, a security researcher for Cylance, has discovered several flaws in how some motherboard vendors implemented Intel's UEFI BIOS firmware into their products.
1.61K views
SysAdmin 24x7
Corregidas múltiples vulnerabilidades en Trend Micro OfficeScan
http://unaaldia.hispasec.com/2017/10/corregidas-multiples-vulnerabilidades.html
Hispasec
Corregidas múltiples vulnerabilidades en Trend Micro OfficeScan
Boletín de noticias de seguridad informática unaaldia, ofrecido por Hispasec
1.49K views
SysAdmin 24x7
http://www.sniferl4bs.com/2017/10/owasp-top-10-2017-rc1-en-castellano.html?utm_source=dlvr.it&utm_medium=twitter&utm_campaign=Feed:+snifer+(Snifer@L4b%27s)&m=1
Sniferl4Bs
OWASP Top-10 2017 RC1 en Castellano
Como saben este año se tuvo un cambio en el TOP 10 de OWASP, en el cual si uno se pone a buscar una versión en español es complicado tenerl...
1.57K views
SysAdmin 24x7
A critical vulnerability affects Siemens smart meters
http://securityaffairs.co/wordpress/63936/hacking/flaw-siemens-smart-meters.html
Security Affairs
A critical vulnerability tracked as CVE-2017-9944 affects Siemens smart meters
Siemens has just released a firmware update for the 7KT PAC1200 Siemens smart meters that addresses a critical vulnerability.
179 views
SysAdmin 24x7
Experts discovered a SYSCON Backdoor using FTP Server as C&C
http://securityaffairs.co/wordpress/63873/malware/syscon-backdoor-ftp.html
Security Affairs
Experts discovered a SYSCON Backdoor using FTP Server as C&C
Security researchers with Trend Micro discovered a backdoor dubbed SYSCON that uses an FTP server for command and control (C&C) purposes.
202 views
SysAdmin 24x7
https://www.elgrupoinformatico.com/disqus-sufre-hackeo-filtrados-datos-millones-usuarios-t39013.html/amp
El Grupo Informático
Disqus sufre un hackeo: filtrados datos de 17 millones de usuarios
Disqus es una plataforma que permite gestionar los comentarios de blogs y páginas web, de forma que se ahorran crear un sistema propio. Pues bien, ...
185 views
SysAdmin 24x7
Netgear patched a slew of security bugs this past week. Firmware updates are available:
https://t.co/qWUNhXA50n
2.55K views
SysAdmin 24x7
'Hackean' la web del mayor sindicato policial (y lleva infiltrada desde 2013)
https://t.co/7VtNvIv7ZG
El Confidencial
'Hackean' la web del mayor sindicato policial y se hacen con datos de 17.790 usuarios
Hackean la web del mayor sindicato policial y se hacen con datos de 17.790 usuarios. Noticias de Tecnología. El grupo de hackers La Nueve, vinculado a Anonymous, ha accedido a parte de la base de datos del Sindicato Unificado de Policía (SUP), el mayoritario…
169 views
SysAdmin 24x7
Curl CVE-2017-1000254 Out of Bounds Read Denial of Service #Vulnerability
https://t.co/2FOdsbya8b
Securityfocus
Curl CVE-2017-1000254 Out of Bounds Read Denial of Service Vulnerability
SecurityFocus is designed to facilitate discussion on computer security related topics, create computer security awareness, and to provide the Internet's largest and most comprehensive database of computer security knowledge and resources to the public. It…
162 views
SysAdmin 24x7
Wifite 2 - A complete re-write of Wifite (Automated Wireless Attack Tool)
https://t.co/8jWXeGGao8
KitPloit - PenTest Tools for your Security Arsenal ☣
Wifite 2 - A complete re-write of Wifite (Automated Wireless Attack Tool)
A complete re-write of wifite , a Python script for auditing wireless networks. What's new? Lots of files instead of "one big ...
168 views
SysAdmin 24x7
Cyberstalking Suspect Arrested After VPN Providers Shared Logs With the FBI
https://t.co/euipSBZFpd
yro.slashdot.org
Cyberstalking Suspect Arrested After VPN Providers Shared Logs With the FBI
An anonymous reader writes: "VPN providers often advertise their products as a method of surfing the web anonymously, claiming they never store logs of user activity," writes Bleeping Computer, "but a recent criminal case shows that at least some do store…
157 views
SysAdmin 24x7
http://blog.trendmicro.com/trendlabs-security-intelligence/dnsmasq-reality-check-remediation-practices/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Anti-MalwareBlog+%28Trendlabs+Security+Intelligence+Blog%29
Trendmicro
Dnsmasq: A Reality Check and Remediation Practices - TrendLabs Security Intelligence Blog
Dnsmasq is the de-facto tool for meeting the DNS/DHCP requirements of small servers and embedded devices. Recently, Google Security researchers identified seven vulnerabilities that can allow a remote attacker to execute code on, leak information from, or…
161 views
SysAdmin 24x7
Devilishly Clever KnockKnock Attack Tries to Break Into System Email Accounts.
https://t.co/eNBEwnRy0R
BleepingComputer
Devilishly Clever KnockKnock Attack Tries to Break Into System Email Accounts
Security researchers have spotted a new type of low-and-slow brute-force attack — which they nicknamed KnockKnock — aimed at companies with Office 365 accounts.
174 views