Daily Security News
PacketStorm
Critical Flaw Revealed In Facebook Fizz TLS Project- Researchers Find 36 New Security Flaws In LTE Protocol
- FEMA Leaks Bank Details For 2.3 Million Survivors
- Mueller Report Is Just The Start Of A New Russia Showdown
- Hackers Take Down Safari, VMware, And Oracle At Pwn2Own
- Early Cambridge Analytica Fears Revealed
- FB Stored Hundreds Of Millions Of Passwords Unprotected
- Critical Flaw Lets Hackers Control Lifesaving Devices Implanted Inside Patients
- Facial Recognition Takes Off At Airports. Privacy Experts Want It Grounded.
- Korea Spycam Porn: 1,600 Fall Victim And Four Men Arrested
- Cisco Patches High Severity Flaws In IP Phones
- U.S. Top Court Jeopardizes Google Settlement In Privacy Case
The Register
- Geiger counters are so last summer. Lasers can detect radioactive material too, y'know new
- Slack slings crypto-keys at big biz, union gets worked over, VPN owners probed, trolls trouble vets, and more
- Uncle Sam's disaster agency FEMA creates disaster of its own: 2.3 million survivors' personal records spilled
- Security storm brewing for Oracle Java-powered smart cards: More than a dirty dozen flaws found, fixes... er, any fixes?
- Hey, what's Mandarin for 'WTF is going on?' Nokia phones caught spewing device IDs to China, software blunder blamed
- Don't have a heart attack but your implanted defibrillator can be hacked over the air (by someone who really wants you dead)
- 'Sharing of user data is routine, yet far from transparent' is not what you want to hear about medical apps. But 2019 is gonna 2019
- Let's spin Facebook's Wheel of Misfortune! Clack-clack-clack... clack... You've won '100s of millions of passwords stored in plaintext'
- Kaspersky Lab takes bite out of Apple in Russia over borked parental controls app
- Live Regcast: Ex-CISO and coal-face engineer Scott King shares his advice on becoming a pragmatic security leader
- Brit Police Federation cops to ransomware attack on HQ systems
- New phisherman's friends and a few old favourites slither out of WatchGuard's Security Report
Reddit - NetSec
- Top five application security pitfalls to avoid | SC Media new
- Paranoid Habits. Security Tips new
- Disclosure of Origin IP of The Exploits Trading Platform 0day.today new
- Peer to peer VPN Nodes Program new
- Beagle: Accelerating incident response with graphs new
- fridump3: A universal memory dumper using Frida for Python 3
- A New Age of Warfare: How Internet Mercenaries Do Battle for Authoritarian Governments
- Hack The Box - Frolic Write-up by 0xRick
- Researchers reveal high-risk vulnerabilities in Chrome for Android
- VStarCam - An Investigative Security Journey - Part 2
- Endlessh: an SSH Tarpit
- This Spyware Data Leak Is So Bad We Can't Even Tell You About It
Threat Wire
Exploits
Packet Storm Exploits
- WordPress Themes Open Redirection 2019/03/22
- Matri4Web Matrimony Web Script SQL Injection
- Inout Article Base CMS SQL Injection
- Meeplace Business Review Script SQL Injection
- snap seccomp TIOCSTI Blacklist Circumvention
- Netartmedia Vlog System SQL Injection
- NSS Netscape Certificate Sequences CERT_DecodeCertPackage() Crash
- JFrog Artifactory Administrator Authentication Bypass
- DVD X Player 5.5.3 Buffer Overflow
- Bootstrapy CMS SQL Injection
- Rails 5.2.1 Arbitrary File Content Disclosure
- Placeto CMS Alpha 4 SQL Injection
Exploit-DB Webapps
- [webapps] MyBB Upcoming Events Plugin 1.32 - Cross-Site Scripting
- [webapps] Gila CMS 1.9.1 - Cross-Site Scripting
- [webapps] eNdonesia Portal 8.7 - Multiple Vulnerabilities
- [webapps] Netartmedia Event Portal 2.0 - 'Email' SQL Injection
- [webapps] Netartmedia PHP Mall 4.1 - SQL Injection
- [webapps] Netartmedia Real Estate Portal 5.0 - SQL Injection
- [webapps] TheCarProject 2 - Multiple SQL Injection
- [webapps] Laundry CMS - Multiple Vulnerabilities
- [webapps] CMS Made Simple Showtime2 Module 3.6.2 - (Authenticated) Arbitrary File Upload
- [webapps] NetData 1.13.0 - HTML Injection
- [webapps] ICE HRM 23.0 - Multiple Vulnerabilities
- [webapps] Vembu Storegrid Web Interface 4.4.0 - Multiple Vulnerabilities
Exploit-DB Local and Privilege Escalation
- [local] Advanced Host Monitor 11.92 beta - Local Buffer Overflow
- [local] Microsoft Windows MSHTML Engine - "Edit" Remote Code Execution
- [local] NetSetMan 4.7.1 - Local Buffer Overflow (SEH Unicode)
- [local] Sony Playstation 4 (PS4) < 6.20 - WebKit Code Execution (PoC)
- [local] Anyburn 4.3 x86 - 'Copy disc to image file' Buffer Overflow (Unicode) (SEH)
- [local] FreeBSD - Intel SYSRET Privilege Escalation (Metasploit)
- [local] STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation (2)
- [local] Cisco WebEx Meetings < 33.6.6 / < 33.9.1 - Privilege Escalation
- [local] WinRAR 5.61 - Path Traversal
- [local] RealTerm Serial Terminal 2.0.0.70 - 'Echo Port' Buffer Overflow (SEH)
- [local] Memu Play 6.0.7 - Privilege Escalation
- [local] MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 - Local Privilege Escalation
Exploit-DB DoS
- [dos] WinMPG Video Convert 9.3.5 - Denial of Service
- [dos] WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 - Denial of Service
- [dos] Core FTP Server FTP / SFTP Server v2 Build 674 - 'SIZE' Directory Traversal
- [dos] Core FTP Server FTP / SFTP Server v2 Build 674 - 'MDTM' Directory Traversal
- [dos] Microsoft Windows - '.reg' File / Dialog Box Message Spoofing
- [dos] Core FTP 2.0 build 653 - 'PBSZ' Denial of Service (PoC)
- [dos] Linux Kernel 4.4 (Ubuntu 16.04) - 'snd_timer_user_ccallback()' Kernel Pointer Leak
- [dos] Android - binder Use-After-Free via racy Initialization of ->allow_user_free
- [dos] Linux < 4.20.14 - Virtual Address 0 is Mappable via Privileged write() to /proc/*/mem
- [dos] Android - getpidcon() Usage in Hardware binder ServiceManager Permits ACL Bypass
- [dos] FileZilla 3.40.0 - 'Local search' / 'Local site' Denial of Service (PoC)
- [dos] Microsoft Edge Chakra 1.11.4 - Read Permission via Type Confusion
Exploit-DB Shellcode
- [shellcode] Linux/x86 - MMX-XOR Encoder / Decoder execve(/bin/sh) Shellcode (44 bytes)
- [shellcode] Linux/x86 - Polymorphic execve(/bin/sh) Shellcode (63 bytes)
- [shellcode] Linux/x86 - INSERTION Encoder / Decoder execve(/bin/sh) Shellcode (88 bytes)
- [shellcode] Linux/x86 - XOR Encoder / Decoder execve(/bin/sh) Shellcode (45 bytes)
- [shellcode] Linux/x86 - iptables -F Shellcode (43 bytes)
- [shellcode] Linux/x86 - NOT Encoder / Decoder - execve(/bin/sh) Shellcode (44 bytes)
- [shellcode] Linux/x64 - Kill All Processes Shellcode (11 bytes)
- [shellcode] macOS - Bind (4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (123 bytes)
- [shellcode] macOS - Reverse (127.0.0.1:4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (103 bytes)
- [shellcode] macOS - execve(/bin/sh) + Null-Free Shellcode (31 bytes)
- [shellcode] macOS - Bind (4444/TCP) Shell (/bin/sh) + IPv6 Shellcode (129 bytes)
- [shellcode] macOS - Reverse (::1:4444/TCP) Shell (/bin/sh) +IPv6 Shellcode (119 bytes)
Exploit-DB Papers
- [papers] Flexpaper <= 2.3.6 Remote Code Execution Whitepaper
- [papers] File transfer skills in the red team post penetration test
- [papers] Crypto Wallet Local Storage Attack
- [papers] Protecting Windows Privilege Accounts
- [papers] WordPress 5.0 - Remote Code Execution
- [papers] The Ultimate Guide For Subdomain Takeover with Practical
Exploit-DB Remote
- [remote] Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass) new
- [remote] BMC Patrol Agent - Privilege Escalation Code Execution Execution (Metasploit)
- [remote] Mail Carrier 2.5.1 - 'MAIL FROM' Buffer Overflow
- [remote] FTPGetter Standard 5.97.0.177 - Remote Code Execution
- [remote] Apache UNO / LibreOffice Version: 6.1.2 / OpenOffice 4.1.6 API - Remote Code Execution
- [remote] elFinder PHP Connector < 2.1.48 - exiftran Command Injection (Metasploit)
- [remote] Apache Tika-server < 1.18 - Command Injection
- [remote] QNAP TS-431 QTS < 4.2.2 - Remote Command Execution (Metasploit)
- [remote] Imperva SecureSphere 13.x - 'PWS' Command Injection (Metasploit)
- [remote] Drupal < 8.5.11 / < 8.6.10 - RESTful Web Services unserialize() Remote Command Execution (Metasploit)
- [remote] Alcatel-Lucent (Nokia) GPON I-240W-Q - Buffer Overflow
- [remote] Nuuo Central Management - Authenticated SQL Server SQL Injection (Metasploit)
Hak5
Vulnerabilities
Security Focus Vulnerabilities
- More rss feeds from SecurityFocus new
- Bugtraq: [SECURITY] [DSA 4268-1] openjdk-8 security update new
- Bugtraq: [SECURITY] [DSA 4267-1] kamailio security update new
- Bugtraq: [CVE-2018-12584] Heap overflow vulnerability in reSIProcate through 1.10.2 new
- Bugtraq: [SECURITY] [DSA 4269-1] postgresql-9.6 security update new
- Vuln: ImageMagick CVE-2019-9956 Stack Buffer Overflow Vulnerability
- Vuln: Tesla Unspecified Arbitrary Code Execution Vulnerability
- Vuln: Signal CVE-2019-9970 Homograph Domain Spoofing Vulnerability
- Vuln: Python urllib CVE-2019-9948 Security Bypass Vulnerability
- Vuln: Opencontainers runc CVE-2019-5736 Local Command Execution Vulnerability
- Vuln: Oracle Java SE CVE-2019-2426 Information Disclosure Vulnerability
- Vuln: PuTTY Multiple Security Vulnerabilities
Bugtraq
- Atlassian - Confluence Security Advisory - 2019-03-20 new
- [SYSS-2018-036]: ABUS Secvest Remote Control - Denial of Service - Uncontrolled Resource Consumption (CWE-400) new
- [SYSS-2018-035]: ABUS Secvest Remote Control - Missing Encryption of Sensitive Data (CWE-311) new
- [SYSS-2018-034]: ABUS Secvest - Rolling Code - Predictable from Observable State (CWE-341) new
- [SECURITY] [DSA 4417-1] firefox-esr security update new
- [SECURITY] [DSA 4416-1] wireshark security update new
- [SECURITY] [DSA 4415-1] passenger security update new
- [SECURITY] [DSA 4414-1] libapache2-mod-auth-mellon security update new
- [slackware-security] mozilla-firefox (SSA:2019-081-01) new
- [SECURITY] [DSA 4413-1] ntfs-3g security update
- March 2019 Sourcetree Advisory - Multiple Remote Code Execution Vulnerabilities
- [SECURITY] [DSA 4412-1] drupal7 security update
Full Disclosure
- Re: YOP Poll 6.0.2 - Reflected XSS (WordPress Plugin)
- Re: WP Live Chat Support 8.0.17 - Reflected XSS (WordPress Plugin)
- Re: wpGoogleMaps 7.10.41 - Reflected XSS (WordPress Plugin)
- Re: NextScripts: Social Networks Auto-Poster 4.2.7 - Reflected XSS (WordPress Plugin)
- Re: KingComposer 2.7.6 - Reflected XSS (WordPress Plugin)
- Re: Give 2.3.0 - Reflected XSS (WordPress Plugin)
- Re: Font_Organizer 2.1.1 - Reflected XSS (WordPress Plugin)
- CVE-2018-17057: phar deserialization in TCPDF might lead to RCE
- [SE-2019-01] Java Card vulnerabilities
- CVE-2018-19971: JFrog Artifactory Pro SAML SSO signature validation error
- 2FA & macOS Disk Encryption Bypass in Abine Blur 7.24* [CVE-2019-6481]
- Re: WordPress Plugin GraceMedia Media Player 1.0 - Local File Inclusion
Tools
CyberPunk nowhere.net
- NSA Software Reverse Engineering Framework: Ghidra
- Semi-Automated Network Penetration Testing Framework: Legion
- Graphical User Interface for Metasploit Meterpreter and Session Handler: Kage
- Automated Dynamic Application Penetration Testing: ADAPT
- Scalable Fuzzing Infrastructure: ClusterFuzz
- Target Reconnaissance Framework: Pown Recon
- Post-Exploitation Framework for Linux Written in Bash: Orc
- Securely and Anonymously Send and Receive Files: OnionShare
- Flexible and Powerful Reverse Proxy: Modlishka
- A Framework for Secure and Scalable Network Traffic Analysis: Netcap
- Phishing Campaign Toolkit: King Phisher
Reversing/I like ASM
Reddit - Reverse Engineering
- I started making an API for Nintendo Switch JoyCon support. This is my progress so far. new
- We Want to Buy Your Bad Traffic
- Introduction to analysing Go binaries
- Playing with NSA’s Ghidra
- Analysis of .Net Stealer GrandSteal
- mXtract - Memory Extractor & Analyzer
- VStarCam - An Investigative Security Journey - Part 2
- Hacking Microcontroller Firmware through a USB
- /r/ReverseEngineering's Weekly Questions Thread
- An extension to load Ghidra scripts written in Scala
- ReactOS: Xbox Port, it is almost there, lets finish it with help of Google (GSOC 2019)
- Karta – Matching Open Sources in Binaries
Reddit - Exploit Dev
- Buffer Overflow Practical Examples - ret2libc
- RCE on Steam Client via buffer overflow in Server Info
- Glibc Heap Exploitation Basics : ptmalloc2 internals (Part 3) : The Main Arena
- ropemporium split32 exercise - system address confusion
- Finding and exploiting CVE-2018–7445 (unauthenticated RCE in MikroTik’s RouterOS SMB)
- Azeria-labs: ARM heap exploitation series
- Ghidra [NSA RE Toolkit] Public Release
- Is it worth learning exploit development in this day and age?
- ROP-ing on Aarch64
- Windows Exploit Development 101
- Exploiting overflows on MIPS processors is complicated by the separate caches for instructions and data
- Exploiting the Magellan bug on 64-bit Chrome Desktop - Exodus Intelligence
Reddit - REGames
- Do people here actually reverse engineer servers without server files?
- Need pointers
- Help on writing a decrypter (ECB)
- How to find botton functions in a Game Window?
- Reviving a dead game called "Arctic Combat"
- Simple online games to start Server-Side Emulation
- Please help us resurrect "Wizardry Online" !
- Trying to reverse-engineer a VSTi (virtual instrument), but got stuck...
- Trying to extract the voxel data from Hexplore
- Anybody interested in making a bot?
- Tutorial: Advanced Key-Press Tracing and Handling in Unity Games with Cheat Engine
- Reverse Engineering the game Hovorun
StackExchange - ReverseEngineering
- Error while using confuserex unpack tools new
- Stop currently running Ida Script mid execution new
- Get document sent to printer? new
- Getting a full trace (every line) from ollydbg new
- how to get address of PE section to jump in while backdooring PE binary new
- Please decode one small PHP file (PHP 5.6, IC9)
- How to load symbols from a symbol server in Ghidra?
- IDA Pro - Remote debugging suse enterpris server 10 (glibc2_10 required)
- Android how can i hook native exported functions from a shared library *.so?
- decompiled android application with only one class
- Lipo alternate for linux
- Reverse engineer a closed source application that connects to sql server [on hold]
Metasploit Minute
Malware/APT
Reddit - Malware
- can a hacker monitor my PC if i'm offline new
- What can you do against a ''PowerShell/TrojanDownloader.Agent.DV'' new
- Is there any viruses that changes the location of folders and files new
- Can someone help me to understand the latest update to Emotet please as I am struggling new
- Bite the malware shark back (Whitehat Foundation Series)
- A .cmd archive made my windows 10 update itself, and installed a bunch of things
- How to transmit ransomware
- something very weird is happening and i was wondering what might be happening
- A binary grep written in Rust.
- Chafer backdoor analysis
- I think my phone got hacked but Im not sur
- Is there a way to monitor what happens inside a virtual machine from the outside during analysis?
Unit42
- New Python-based payload MechaFlounder used by Chafer
- Farseer: Previously Unknown Malware Family bolsters the Chinese armoury
- Multiple ArtraDownloader Variants Used by BITTER to Target Pakistan
- Unit 42 Vulnerability Research Team Discovers 23 New Vulnerabilities February 2019 Disclosures – Adobe and Microsoft
- New BabyShark Malware Targets U.S. National Security Think Tanks
- Shifting in the Wind: WINDSHIFT Attacks Target Middle Eastern Governments
- Threat Brief: Understanding Domain Generation Algorithms (DGA)
- menuPass Playbook and IOCs
- Tracking OceanLotus’ new Downloader, KerrDown
- Mac Malware Steals Cryptocurrency Exchanges’ Cookies
- Russian Language Malspam Pushing Redaman Banking Malware
- DarkHydrus delivers new Trojan that can use Google Drive for C2 communications
FireEye Threat Research
- APT39: An Iranian Cyber Espionage Group Focused on Personal Information
- Bypassing Network Restrictions Through RDP Tunneling
- Cryptocurrency and Blockchain Networks: Facing New Security Paradigms
- A Nasty Trick: From Credential Theft Malware to Business Disruption
- Global DNS Hijacking Campaign: DNS Record Manipulation at Scale
- Digging Up the Past: Windows Registry Forensics Revisited
- OVERRULED: Containing a Potentially Destructive Adversary
- What are Deep Neural Networks Learning About Malware?
- FLARE Script Series: Automating Objective-C Code Analysis with Emulation
- Obfuscated Command Line Detection Using Machine Learning
Crypto
Reddit - Crypto
- GPA can't import PGP public key: "No keys were found." new
- Can someone ELI5 "state" in cryptography? new
- On the S-Box of Streebog and Kuznyechik new
- Designing my Own Key Derivation with Chacha20 new
- Code-based crypto resources new
- How to read and learn Bruce Schneier's Applied Cryptography?
- Make your business into your smartphone
- Roast my handwritten password manager
- How to crack LFSR with known plain text attack?
- Multiple encryption
- I’m in an encryption source 8 weeks have gone by and I couldn’t tell you whar is a key is.
- Coursera Stanford Cryptography I Review
StackExchange - Crypto
- Encrypted hash vs hashed encryption new
- How to multiply two Public Keys in Elliptic Curve in Go new
- About Cocks IBE new
- Prove that two commitments are commitments to the same value new
- Is it possible to build a CPA Secure encryption scheme which remains secure even when the encryption of secret key is given? new
- When extending the domain of a fixed-length MAC, why do we have to include the message length in each block? new
- Why the definition in $epsilon$-differential privacy is multiplicative rather than additive？ new
- great probability offorgery [on hold] new
- Wrong Values when Converting to GF(3^3) [on hold] new
- Does secp256k1 have any known weaknesses? new
- Why Public Key has Two Parts in my Secure Messaging Client similar to Signal new
- Application of High-level Mathematics to Hashing [on hold] new
Podcasts
Security Weekly
- Iris, DomainTools – Paul’s Security Weekly #598
- Android Q, Sirens, & Korean Hotels – Paul’s Security Weekly #598
- Marcus Carey, Tribe of Hackers – Paul’s Security Weekly #598
- Endgame, Virsec, & SCYTHE – Enterprise Security Weekly #130
- NexDefense, 42Crunch, & ExtraHop – Enterprise Security Weekly #130
- PuTTY, 2FA, & GrandCrab With VMRay – Hack Naked News #211
- DARPA, Yelp, & FBI – Application Security Weekly #54
- Jamie Duncan, Red Hat – Application Security Weekly #54
- Intersection of Development & Security, Signal Sciences – Business Security Weekly #121
- Leadership Articles – Business Security Weekly #121
- Evolution of Zero Trust, Edgewise – Paul’s Security Weekly #597
- Malware Sandboxing, VMRay – Paul’s Security Weekly #597
Risky.Biz
- Risky Business #535 -- Stop giving Cloudflare money
- Risky Business #534 -- Manning back in clink, automotive industry under attack
- Risky Business #533 -- Ghidra release, NSA discontinues metadata program and more
- Risky Biz Soap Box: PRODUCT LAUNCH: Backstory by Alphabet's Chronicle
- Risky Business #532 -- A big week of research and tech news
- Risky Business #531 -- Australia's political parties targeted, the Witt indictment and more
- Risky Business #530 -- UAE's Project Raven, Bezosgate and more
- Risky Biz Soap Box: Polyswarm builds a marketplace for AV engines
- Risky Business #529 -- Special guest Rob Joyce, NSA
- Risky Business #528 -- Huawei dinged, epic FaceTime and Exchange bugs
- Risky Business #527 -- Featuring Alex Stamos, The Grugq, Susan Hennessey, Brian Krebs, Kelly Shortridge and Bobby Chesney
- Risky Business #526 -- Huawei arrest in Poland, DPRK SWIFT hack conviction, more from the El Chapo trial
The CyberWire
- Ryuk ransomware relationship revelations — Research Saturday
- Finland’s data protection authority investigates suspicious smartphone activity. GitHub repos are leaking keys. Cardiac devices can be hacked.
- Russian APTs target EU governments. FIN7 is back. Google and Facebook scammed.
- Norsk Hydro recovers from LockerGoga infection. Cyber conflict, cyber deterrence, and an economic case for security. EU out of compliance with GDPR? Big Tech in…
- LockerGoga hits Norse Hydro. Mirai botnet malware gets an update. The DHS is concerned about cybersecurity.
- Online content and terrorism. Huawei’s shifting strategy. Venezuela’s grid failure is explicable by corruption and incompetence--no hacking or sabotage required. Gnostiplayers are back. AI and…
- ThinkPHP exploit from Asia-Pacific region goes global — Research Saturday
- Terror, announced and celebrated online. JavaScript sniffer afflicts e-commerce sites. Cryptojacking in the cloud. Perspectives on regulation, thoughts on a pervasive IoT. China’s IP protection…
- Election security and influence operations. Hacking the Fleet. Undersea cable competition. 5G worries. Calls to rein in Big Tech. UN report outlines North Korean cyber…
- Venezuela power blackout updates. Social media and social control. Trojanized games. Free decryptor out for ransomware strain. Ads on Facebook. A look at 30 years…
- Allegations and information operations. Iridium group may have compromised Citrix. Sino-American trade and security conflicts continue. Fashions in trolling.
- Job-seeker exposes banking network to Lazurus Group — Research Saturday
Threat Intel
Reddit - Onions
- Qubes Tor onion services will no longer be maintained new
- Does Dark OS still exist? new
- Humanipulator new
- Tor: What You Need to Know
- cant configure Tor with OBFS4 bridge
- Ebook library links?
- Saw this on debian wiki
- Ipgmail on ios
- What are the large indexes for tor?
- DO YOU KNOW ??
- Free talk Fridays - What's on your mind?
- first time user
Reddit - Pwned
- We Want to Buy Your Bad Traffic new
- A post I made about .gov.uk domains got picked up by New Scientist, Here is the article...Published today.
- mXtract - Memory Extractor & Analyzer
- Need advice in creative ways to get my instagram account deleted
- Aluminium plant Norsk Hyrdo hit by severe cyber attack
- Round 4 — Hacker Puts 26 Million New Accounts Up For Sale On Dark Web
- Collaboration Required, dataset of .gov.uk domains
- Girl leaves her laptop into IT support. Then talks sh*t about them on a messenger app, "where the guys can see it on her laptop"
- I was playing around in grayhatwarfare.com, stumbled into this, and now I am wondering who is pwned?
- Italian high school wiki subpage vandalized to display possible bomb threat against the Internet Archive
- U.S. Cyber Command operation disrupted Internet access of Russian troll factory on day of 2018 midterms
- Salesperson sending me a list of exposed passwords for my domain?
HaveIBeenPwned
- ShareThis - 40,960,499 breached accounts
- Dubsmash - 161,749,950 breached accounts
- MyFitnessPal - 143,606,147 breached accounts
- MyHeritage - 91,991,358 breached accounts
- EyeEm - 19,611,022 breached accounts
- devkitPro - 1,508 breached accounts
- Collection #1 (unverified) - 772,904,991 breached accounts
- FaceUP - 87,633 breached accounts
- Dangdang - 4,848,734 breached accounts
- BannerBit - 213,415 breached accounts
- BlankMediaGames - 7,633,234 breached accounts
- GoldSilver - 242,715 breached accounts
Privacy/VPNs
Reddit - Privacy
- Why is Mozilla permanently recording general browsing behavior changes and overall usage patterns of their users? new
- Privacy Conscious Location History? new
- Android MicroG and Apps like Uber new
- Security of Firefox multi-account containers vs. software compartmentalization? new
- Is there a privacy focused VPS hosting? new
- =========== 9 Character Passwords are Dead =========== new
- Is my own domain mail address secure? new
- Company I signed up for over email called up my neighbors to ask about me. new
- Reddit having no "hide profile/post history" option new
- Any good open-source hiking app? (Like ViewRanger, that can read GPX files?) new
- Private and open source portfolio new
- HMD admits the Nokia 7 Plus was sending personal data to China new
Reddit - VPN
- the secretive VPN from sweden and its ISP's server locations and companies behind it. new
- I’m looking for a VPN that’s good for gaming and can work in universities new
- Mullvad with Sprint LTE new
- Online shopping and passwords new
- SoftEther and Daloradius new
- How to force a process to use a specific interface (such as WireGuard VPN) in (Arch) Linux new
- Protection at the router level and individual devices. Or o ly at router or devices? new
- Why do some VPNs work with Netflix and some don't? new
- How Do They Know I'm Using a VPN? new
- New to VPN new
- Self-host your very own strongSwan IKEv2/IPsec state-of-the-art VPN server for iOS and macOS new
- Can i split tunnel one program on my computer?
Help Wanted
Reddit - AskNetSec
- social engineering phonecall new
- Alternative for IBM AppScan new
- Sky high Report - Data Encryption At Rest new
- I might have fucked up... new
- Length of eLearnSecurity's PTP Course new
- Anyone utilizing Falcon as EDR in their environment? new
- Mutillidae 2 Installation Help new
- We Want to Buy Your Bad Traffic new
- What's the best way to get started on HTB? new
- Is there a good firewall for non-rooted Android phones? new
- WordPress - What are your recommendations for security?
- Cellphone Logging
Reddit - Netsec Students
- Grayhatwarfare just published the list with the top keywords requested. This should give you some ideas new
- Visualizing Network & Bandwidth activity on your device. new
- Securinets Prequels 2k19- International CTF Challenges new
- Shady offer from Large Company new
- Prep for SANS SEC 401 Security Essentials new
- How do I go about reporting a vulnerability? new
- Anyone interested in this?
- Know what SecurityOnion is for and an overview of the tools bundled in the distribution.
- Suspicious POST requests to my home Apache2 server
- Looking to identify security holes in our environment.
- Anyone take the GCIH Recently? Been seeing labs in practice test, was wondering if I should prepare for those.
- Should I see return traffic?
Stackoverflow - Security
- <security:frame-options policy="DENY"/> is not working new
- NET Core JWT - How to handle Validate Authentication in Micro Service new
- Organizing a secure channel between a Web app and a Native app new
- Login Name and Password are same new
- How to add certificate of a website to Pycharm or my System? [duplicate] new
- Is this adware on user's machine? [on hold] new
- How to get data from JWT token and keep requesting it on Client? .Net Core new
- IIS 10 removing 'Location' header new
- ElectronJS: What's the safest way to load user's local files in the DOM (<video src="C:...">)? new
- Adding Google AdMob as gradle dependency for a new React Native app flags app as malware
- How to download file through a proxy-like service?
- Exploiting system calls in assembly
Stack Exchange
- Can a process be DoSed by interfering with its compare-exchange loops? new
- Database of all known hacking methods new
- Is it possible to build an ASiC container out of a file and its timestamp token? new
- How safe are Truecrypt-file containers? new
- Are there any known examples of companies who were successfully breached using POODLE, BEAST or SWEET32? new
- In Need of Splunk Usecases [on hold] new
- As a security professional how do you keep yourself on programming? [on hold] new
- Phishing/Spam using old MX record for direct sending which is circumventing Mimecast new
- Transactional replication through VPN, do I need to encrypt connection? new
- Is VPN a likely access point through which to deploy a ransomware payload? new
- Why isn't this XSS working? new
- I just can't use some tools in Kali new
Locks/Social Engineering
Reddit - Lockpicking
- Buying padlocks to make same day shipping minimum. new
- Only knowing how tensioning and false set works is definitely not enough to open this lock. Now I need to learn about binding order. (It's… new
- What kind of lock is this? new
- Abus 83/45 picked! A long time trying! new
- Does Pacific Lock sell direct via their website? new
- American 1100 picked and gutted, racing against my dying camera battery. new
- American 1100 picked for first time new
- Picked my first lock using horrible paper clip tools new
- What is a good beginers lockpick set? new
- It's not nearly as heavy as the name implies -- DOM ix 10kg pick and gut new
- Lock Box raked open in seconds. new
- Boom! 3ks open. (You can tell it’s open by the notch in the upper body btw;)) new
Reddit - Social Engineering
- Hunting the Con Queen of Hollywood: Who's the "Crazy Evil Genius" Behind a Global Racket? new
- What Are The Signs Someone Is Lying To You? 11 Clear Indicators new
- Man stole $122m from Facebook and Google by sending them random bills, which the companies dutifully paid new
- Fifty years of the internet - what has humanity learned? new
- Best way to get into an 18+ club at 16-17?
- How do I get free things?
- Why Magicians Who Admit to Magic Not Being Real, Are More Interesting
- How can I stop reading people and social situations
- Why Magicians Who Admit to Magic Not Being Real, Are More Interesting
- How To Be a Good Leader At Work: 20 Key Factors You Should Know
- Is Tagthesponsor social Engineering?
- Why Magicians Who Admit to Magic Not Being Real, Are More Interesting
Security Blogs
Security Bloggers Network
- What Application Developers Need To Know About TLS Early Data (0RTT) new
- BSS: Dow Jones, TurboTax, and Indane data breaches new
- FEMA Improperly Shared 2.3 Million Hurricane Survivors’ PII with Contractor new
- Cyber Criminals Increasingly Attack the Human Layer When Targeting Businesses new
- VPN Leaks: Knowing, Understanding and Preventing new
- AI-based Fuzzing Could Change Security new
- Cybersecurity: Collegiate Hackathon Helping Advance Students, Industries new
- Facebook Passwords Exposed, Android Q Privacy, Microsoft Office Targeted new
- Verifications.io Data Breach, Capsizing a Ship with a Cyberattack, World’s Most Dangerous Malware new
- Security Requires Immutability: Avoid Dynamic Environments with Change Management new
- Where Next for Smart Cities? new
- BSides San Francisco 2019, Reed Loden’s ‘Opening Remarks’ new
ThreatPost
- Spycams Secretly Live-Streamed 1,600 Motel Guests
- Firefox and Edge Fall to Hackers on Day Two of Pwn2Own
- Google Play Touts Certs in Quest For Enterprise Security
- Critical DoS Bug Bubbles Up in Facebook Fizz TLS 1.3 Project
- Analysis: Drone Tech Creates New Type of Blended Threat
- Medtronic Defibrillators Have Critical Flaws, Warns DHS
- WordPress Plugin Patched After Zero Day Discovered
- Hackers Take Down Safari, VMware and Oracle at Pwn2Own
- Facebook Stored Passwords in Plain Text For Years
- MyPillow and Amerisleep Targeted in Magecart Group Attacks
- Cisco Patches High-Severity Flaws in IP Phones
- Mac-Focused Malvertising Campaign Abuses Google Firebase DBs
ISC SANS
- "VelvetSweatshop" Maldocs: Shellcode Analysis, (Mon, Mar 25th) new
- ISC Stormcast For Monday, March 25th 2019 https://isc.sans.edu/podcastdetail.html?id=6424, (Sun, Mar 24th) new
- Decoding QR Codes with Python, (Sun, Mar 24th) new
- "VelvetSweatshop" Maldocs, (Sat, Mar 23rd)
- Introduction to analysing Go binaries, (Fri, Mar 22nd)
- ISC Stormcast For Thursday, March 21st 2019 https://isc.sans.edu/podcastdetail.html?id=6422, (Thu, Mar 21st)
- New Wave of Extortion Emails: Central Intelligence Agency Case, (Thu, Mar 21st)
- ISC Stormcast For Wednesday, March 20th 2019 https://isc.sans.edu/podcastdetail.html?id=6420, (Wed, Mar 20th)
- Using AD to find hosts that aren't in AD - fun with the [IPAddress] construct!, (Wed, Mar 20th)
- ISC Stormcast For Wednesday, March 20th 2019 https://isc.sans.edu/podcastdetail.html?id=6418, (Tue, Mar 19th)
- Wireshark 3.0.0 and Npcap: Some Remarks, (Mon, Mar 18th)
- ISC Stormcast For Monday, March 18th 2019 https://isc.sans.edu/podcastdetail.html?id=6416, (Mon, Mar 18th)
digitalmunition
- This is How Hackers Crack Passwords! new
- Inout Article Base CMS SQL Injection new
- Matri4Web Matrimony Web Script SQL Injection new
- Telegram development team implemented a new feature that allows users to delete any received message from the sender’s device new
- Androwarn – Yet Another Static Code Analyzer For Malicious Android Applications new
- Microsoft has announced the availability of Defender ATP Endpoint Security for Apple macOS new
- FIR – Fast Incident Response new
- A Small Business and Internet User’s Guide to Cyber Attacks
- Webtech – Identify Technologies Used On Websites
- Zero-day Stored XSS Vulnerability in WordPress Social Share Plug-in let Hackers to Compromise 70,000 Websites
- uHotelBooking System SQL Injection
- Xerxes – DoS Tool Enhanced
eHacking News
Wired - Security
- On the Trail of the Robocall King new
- Mueller Report Says No Collusion, Barr Raises a Million Questions new
- Kushner Used WhatsApp, a Very Bad Database Leak, and More Security News This Week
- FEMA Leaked Data From 2.3 Million Disaster Survivors
- The Mueller Report Is Here, Apple's Big Event, and More News
- The Mueller Report Is Done. Now Comes the Hard Part
- Utah Just Became a Leader in Digital Privacy
- Your Facebook Password Isn’t Safe. Neither Is Your Android Phone
- Facebook Stored Millions of Passwords in Plaintext—Change Yours Now
- Researchers Built an ‘Online Lie Detector.’ Honestly, That Could Be a Problem
- In the Face of Danger, We’re Turning to Surveillance
- An Android Vulnerability Went Unfixed for Over Five Years
Krebs on Security
- Alleged Child Porn Lord Faces US Extradition
- Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years
- Why Phone Numbers Stink As Identity Proof
- Ad Network Sizmek Probes Account Breach
- Patch Tuesday, March 2019 Edition
- Insert Skimmer + Camera Cover PIN Stealer
- MyEquifax.com Bypasses Credit Freeze PIN
- Hackers Sell Access to Bait-and-Switch Empire
- Booter Boss Interviewed in 2014 Pleads Guilty
- Crypto Mining Service Coinhive to Call it Quits
- Former Russian Cybersecurity Chief Sentenced to 22 Years in Prison
- Payroll Provider Gives Extortionists a Payday
Naked Security
- Thousands of API and cryptographic keys leaking on GitHub every day new
- Update now! WordPress hackers target Easy WP SMTP plugin new
- New ratings point to keyless cars that can stand up to relay attacks new
- Monday review – the hot 29 stories of the week new
- Facebook password crisis – what to do? [VIDEO]
- Sacked IT guy annihilates 23 of his ex-employer’s AWS servers
- BitLocker hacked? Disk encryption – and why you still need it [VIDEO]
- Microsoft Windows 7 patch warns of coming patchocalypse
- Spycam sex videos of 1,600 motel guests sold to paying subscribers
- Scammer pleads guilty to fleecing Facebook and Google of $121m
- Change your Facebook password now!
- Researcher finds new way to sniff Windows BitLocker encryption keys
Schneier on Security
- Friday Squid Blogging: New Research on Squid Camouflage
- Enigma, Typex, and Bombe Simulators
- First Look Media Shutting Down Access to Snowden NSA Archives
- Zipcar Disruption
- An Argument that Cybersecurity Is Basically Okay
- Triton
- CAs Reissue Over One Million Weak Certificates
- Friday Squid Blogging: A Squid-Related Vacation Tour in Hawaii
- I Was Cited in a Court Decision
- Upcoming Speaking Engagements
- Critical Flaw in Swiss Internet Voting System
- DARPA Is Developing an Open-Source Voting System
Linux Security
Dark Reading
- Inside Incident Response: 6 Key Tips to Keep in Mind
- Two Found Guilty in Online Dating, BEC Scheme
- Security Lessons from My Game Closet
- FIN7 Cybercrime Gang Rises Again
- Businesses Manage 9.7PB of Data but Struggle to Protect It
- Facebook Employees for Years Could See Millions of User Passwords in Plain Text
- Hacker AI vs. Enterprise AI: A New Threat
- SaaS Ecosystem Complexity Ratcheting Up Risk of Insider Threats
- Microsoft Brings Defender Security Tools to Mac
- Police Federation of England and Wales Suffers Apparent Ransomware Attack
- What the Transition to Smart Cards Can Teach the US Healthcare Industry
- Researchers Seek Out Ways to Search IPv6 Space
Securelist
Whitehat Security Blog
HITB News
- Don't have a heart attack but your implanted defibrillator can be hacked over the air
- Facebook apps logged users’ passwords in plaintext, because why not
- Over 100,000 GitHub repos have leaked API or cryptographic keys
- Police association headquarters hit by malware cyber attack
- Hands-on with the new $399 Oculus Rift S: More pixels, zero webcams, better fit
- Some Nokia 7.1 Units in Norway Caught Sending Data to China
- Mozilla launches Firefox Send for private file sharing
- A new rash of highly covert card-skimming malware infects ecommerce sites
- Microsoft open sources algorithm, hardware and source code for Azure data compression
- Addressing real cyber security risk requires a collaborative, global approach
- Two-thirds of all Android antivirus apps are frauds
- NATO takes Huawei security concerns seriously
The RISKS Digest
- Spy cameras in Seoul secretly live-streamed 1,600 hotel guests for subscribers. Then police caught on.
- Re: Security Holes Found in Big Brand Car Alarms
- Re: Is curing patients, a sustainable business model?
- Ransomware Fighter Lives in Fear for his Life
- Lookin' in my back door
- DNA and a Coincidence Lead to Arrest in 1999 Double
- Is Computer Code a Foreign Language?
- How to Check Your Hotel Room for Hidden Cameras
- Browser also fills in bad guy address with good guy address
- Aadhaar: unique numbers for all residents in India
- Why The Promise Of Electronic Health Records Has Gone Unfulfilled
- Re: The Rapid Decline Of The Natural World ...
Forbes - Security
Kaspersky Blog
- Transatlantic Cable podcast, episode 83
- Who will restore encrypted corporate data? Nobody will
- Mirai goes Enterprise
- Aluminum giant Hydro hit by ransomware
- Kaspersky Lab files antitrust complaint against Apple in Russia
- Hacking smart car alarm systems
- Changes to Kaspersky Internet Security for Android and Kaspersky Safe Kids mobile apps
- Instagram accounts hijacked with fake copyright infringement notifications
- CVE-2019-0797: Zero-day exploits keep coming
- Transatlantic Cable podcast, episode 82
- Rise of the cryptojackers
- The right balance: Enabling women to pursue a career in IT
Adam Shostack & friends
Graham Cluley
- Some 2000 Facebook staff had access to millions of Facebook users’ passwords… stored in plaintext
- Google and Facebook scammed out of $123 million by man posing as hardware vendor
- Smashing Security #120: Silk Road with Deliveroo
- Hydro working hard to recover following ransomware attack
- Why real-time intelligence matters for managing third-party risk
- Aluminium plants hit by cyber-attack, global company turns to manual operations
- Google Play is flooded with hundreds of unsafe Android anti-virus products
- 53% of Britain’s most frequent porn watchers aren’t aware that they’re about to be blocked
- Myspace has lost all the music users uploaded between 2003 and 2015
- Zillow sued for $60 million after mansion listing hijacked
- Online training site says it is spamming insecure printers with adverts
- US Senators say it shouldn’t be a secret when they’ve been hacked
Rapid7
- Metasploit Wrap-Up
- How Rapid7 Takes an Artful Approach to Data Science
- Rapid7 Named a March 2019 Gartner Peer Insights Customers’ Choice for Vulnerability Assessment
- A Serial Problem: Exploitation and Exposure of Java Serialized Objects
- Buy One Device, Get Data Free: Private Information Remains on Donated Tech
- Customer Perspective: How to Build an Agile Security Program in Rapidly Changing Times
- Metasploit Wrap-Up
- Helping Kids Hack the Future: Rapid7 Supports BoSTEM Program in Pi Day Fundraiser
- Forrester Tech Tide for Detection and Response: Is 2019 the Year of Convergence?
- Utilize File Integrity Monitoring to Address Critical Compliance Needs
- Patch Tuesday - March 2019
- R7-2019-01: CircuitWerkes Sicon-8 Client-Side Authentication Read-Only Bypass (CVE-2019-5616)
Security in Mainstream Media
Google News Hacking
- Massive Citrix Data Breach Thought to be the Work of Iranian Hackers - CPO Magazine new
- What is Metasploit? And how to use this popular hacking tool - CSO Online new
- Update now! WordPress hackers target Easy WP SMTP plugin - Naked Security new
- Iran Official Claims: Netanyahu Family Phones Hacked - The Jerusalem Post new
- Elsevier Exposed User Credentials Publicly Through Misconfigured Server - Cyber Security News new
- Medtronic heart devices vulnerable to hacking: US - The Siasat Daily new
- Hackers win Tesla car for exposing system error in vehicle during hacking event - The News Minute new
- Hackers win Tesla car for exposing system error in vehicle during hacking event - The News Minute new
- Iran Official Claims: Netanyahu Family Phones Hacked - The Jerusalem Post new
- Data Breaches and Identity Theft through Hacking - The Impact and Best Practices to Meet Today's Challenges - TechRepublic new
- Latest Hacking News Podcast #246 - Cyber Security News new
- Hackers could take over some implanted defibrillators, FDA says - NBC News new
Google Cyber Security
- Think Inside the Box to Bridge the Cybersecurity Skills Gap - Security Intelligence new
- Analysis | The Cybersecurity 202: Democrats call for full Mueller report release in the name of election security - The Washington Post new
- Hiring A Cybersecurity Pro? Consider These Six Do's And Don'ts - Forbes new
- FDA issues alert on cybersecurity vulnerabilities in Medtronic devices - Medical Device Network new
- Science Minister announces funding for cyber security and screen entertainment projects in Bristol - GOV.UK new
- Qualcomm Ventures leads $18M investment in cybersecurity startup CyberX - Boston Business Journal new
- EU Said to Urge Member States to Share Intel on 5G Cyber Threats - Bloomberg new
- India Needs a Cyber Security Strategy: Cyber Patriots Task Force - DATAQUEST new
- Survey looks at cyber security incident response capabilities and priorities - Continuity Central new
- India needs a cyber security strategy - The Asian Age new
- Employee cybersecurity essentials part 1: Passwords and phishing - Help Net Security new
- What worries you the most when responding to a cybersecurity incident? - Help Net Security new
Thirsty for more
YCombinator
- Hackers Hijacked Asus Software Updates to Install Backdoors new
- Ask HN: Best way to turn a simple static website interactive with PHP? new
- Artificial Intelligence and the Future of Labor Demand [pdf] new
- Relentless Competition Drives Down Ethernet Switch Costs new
- Show HN: Wave – A private and unique messenger for iOS new
- The silent victims of the US embargo against Iran new
- How Japanese Police Turned Cyber Prank into Arresting Cases new
- Enigma, the Bombe, and Typex new
- Credder Wants to Create an Equivalent to “Rotten Tomatoes” for News new
- Junior Developer Koans new
- A Short History of Chaosnet (2018) new
- Local Variables new
Digg - Hack
Slashdot - Rights
- Mueller Report 'Summary' Delivered to US Congress new
- Facebook Now 'Vulnerable' To Government Regulators, Analysts Warn
- How The FBI Easily Retrieved Michael Cohen's Data From Both Apple and Google
- Online Petition Site Crashed By Millions of 'Cancel Brexit' Signers
- Jared & Ivanka: Couple 'Continues To Use' Private Messaging For White House Business, Top Democrat Says
- Lithuanian Pleads Guilty To Stealing $100 Million From Google, Facebook
- FEMA Data Breach Hits 2.5 Million Disaster Survivors
- Police Officers In Berlin Had To Break Up Fight Between Supporters of Two Rival YouTubers
- The US Desperately Needs a 'Fiber For All' Plan
- Devin Nunes Faces an Uphill Battle in His Lawsuit Against Twitter
- Over 100,000 GitHub Repos Have Leaked API or Cryptographic Keys
- Facebook Knew of Cambridge Analytica Data Misuse Earlier Than Reported
Reddit - Cyberpunk
Reddit - Security CTF
- steganography challenge 🙂 new
- Securinets Prequels 2k19- International CTF Challenges new
- Frolic: Hack The Box Walkthrough
- Hack The Box - Frolic write-up by epi
- Hopper Disassembler
- mXtract - Memory Extractor & Analyzer
- Can someone take a look at my Hydra syntax? (HTB lernaean spoiler)
- HackTheBox Carrier Machine
- Our local 2600 meet-up is putting on a CTF. This is an advert I made with a short little challenge on it. Have fun!
- Pwn a damn vulnerable programming language in this individual ctf
- You Shall Not Pass: BSides Canberra 2019 - Reversing Writeup
- XSS challanges
Reddit - Sysadmin
- Is it possible to delete a subfolder so files can empty into parent folder? new
- Do corporate iPhones need anti-virus or anti-malware software? new
- Client-server backup recommendations and suggestions new
- Mimecast 2FA outage? new
- Bizzare Outlook 365 problem new
- High amount of traffic to msft's live.net? new
- Windows Explorer Folder/File Properties Sharing, Security, DFS Tabs Missing When Off-Network new
- file management system recommendation new
- Sometimes even slight praise can make your day. new
- Users O365 account locked, can't unlock new
- How to lock / log off a user on a domain? new
- Windows 10 Upgrade Readiness Model count new
Reddit - Bitcoin
- How the Fintech Revolution Could Liberate Us new
- Wrong account Roger. Bitcoin is bitcoin! Stop the SCAM PLEASE! new
- My best investment ever #BTCFuture new
- Hal Finney new
- Bitcoin Price Analysis - Can BTC Reach $5,000 In April 2019? new
- Just bought Bitcoin for the first time! new
- Mentor Monday, March 25, 2019: Ask all your bitcoin questions! new
- Switzerlands biggest online retail company accepts payments in crypto now new
- Bitcoin resources in different lanugages? new
- Is changelly legit? new
- Coinscrum {Presents} :: The Lightning Network with Blue Wallet & BitFury :: LDN :: 02/04 :: Live Stream at youtube.com/coinscrum new
- Bitmain’s IPO Application is about to Expire new
Reddit - CryptoCurrency
- Can you just Imagine? Centralized banks can be funny at times. Thank goodness for crypto like BTC, XLM, and TCAT. new
- Daily Market Recap - 03/25 - Crypto Market Flat With Small Bouts Of Volatility, Top 10 Bulls Exhausted new
- Help build the Elrond ecosystem and be rewarded new
- Energized through IEO: VenusEnergy chooses ExMarkets LaunchPad new
- SBI Holdings Next Crypto Venture Is Manufacturing Mining Chips new
- A perfect example of what V-ID is solving with their blockchain solution new
- Nice poster in CV labs new
- Cryptomining giant Bitmain fails to go public, IPO application expires new
- SelfKey Incorporations Marketplace is live! new
- New version of Techrock warehouse encoding app released new
- No More High Extra Fees: Can the New Service-Based Blockchain Business Model Deliver? new
- Top 5 crypto hacks in 2018 new
Lobste.rs
- Cars are regulated for safety – why not information technology? new
- All InfoSec News in one Place new
- Domain-Driven Design in an event-driven Clojure application (2018) new
- An accounting object infrastructure for knowledge-based enterprise models (1999) new
- Jocko Willink on Navy Seals and Political Viewpoints new
- Maintaining qmail in 2019 new
- Apple Special Event for March 25th, 2019 new
- Choose Simple Solutions Over Flexible Ones new
- Always. Own. Your platform new
- WireGuard for NetBSD new
- watch tool rewritten in go new
- Red – terminal log analysis tools new
Hackaday
- How The Gigatron TTL Microcomputer Works new
- Magnetic Bearings Might Keep this Motor Spinning for Millennia new
- MIDI to CV The DIY Way new
- A Z80 Homebrew Console, With A Bit Of Modern Help new
- Hackaday Links: March 24, 2019 new
- Here’s The First Person To Put A Pi In The Raspberry Pi Keyboard new
- Custom LoRa Pager Designed With Care new
- A Ruined Saw Blade Becomes A Bowl new
- Grabbing the Thread: Spinlocks vs Mutexes
- Air-Breathing Rocket Engine Promises Future Space Planes
- Reverse Engineering a Telephonic Relay Device
- Get Moving with New Software from OpenBuilds
Ars Technica
- Elon Musk’s latest defense: Tesla says my tweets were kosher new
- The soldier who removed his own bladder stone, and other medical history marvels new
- Everything you need to know before Apple’s March 25 “it’s show time” event new
- Shipwreck on Nile vindicates Greek historian’s account after 2,500 years new
- Why you should steer clear of “Florida Man Challenge” new
- Good news for the 1,000mph car as Bloodhound gets a new owner new
- Don’t buy a Mercedes-AMG GT R unless you plan on taking it to the track new
- I played 11 Assassin’s Creed games in 11 years, and Odyssey made them all worth it
- Local leaders cooling to Boring Company tunnel promises
- Tesla sues Zoox over manufacturing and logistics secrets
- Liveblog: Apple unveils its TV service and more at the March 25 “It’s show time” event
- US computer science grads outperforming those in other key nations
Wired
- Simple Experiments Show How Motion Is Equivalent to Heat new
- What to Expect From Monday's Big Apple Event new
- How to Watch Apple's Event on Monday, March 25 new
- In Germany, Solar-Powered Homes Are Really Catching On new
- Can AI Be a Fair Judge in Court? Estonia Thinks So new
- Liveblog: Live Updates From Apple's March 25 Event new
- We Might Be Reaching 'Peak Indifference' on Climate Change new
- The Engine Propelling the Fastest Woman on Four Wheels new
- The Beautiful Benefits of Contemplating Doom new
- What Happens When a Jury Grapples With Perplexing Science new
- On the Trail of the Robocall King new
- A Clever New Strategy for Treating Cancer, Thanks to Darwin new
Slashdot
- Jared & Ivanka: Couple 'Continues To Use' Private Messaging For White House Business, Top Democrat Says
- Windows 10 Calculator Will Soon Be Able To Graph Math Equations
- Researchers Created Reprogrammable Molecular Algorithms For DNA Computers
- Lithuanian Pleads Guilty To Stealing $100 Million From Google, Facebook
- Insider Threats Pose the Biggest Security Risk
- FEMA Data Breach Hits 2.5 Million Disaster Survivors
- Microsoft Revived and Killed Clippy in a Single Day
- Police Officers In Berlin Had To Break Up Fight Between Supporters of Two Rival YouTubers
- Germany Urged To Champion Global Treaty To Ban 'Killer Robots'
- Dashcam Video Shows Tesla Steering Toward Lane Divider - Again
- The US Desperately Needs a 'Fiber For All' Plan
- MIT Develops Algorithm To Accelerate Neural Networks By 200x
DZone Security
- How to Screw Up Encryption new
- Five Elements of Cloud Security [Video] new
- Apache HTTP Client: Client-Side SSL Certificate new
- Compliance Ain't Easy
- What Is Cybersecurity Research Today?
- Building on Ethereum: Part 5 – Writing Tests
- Transforming Self-XSS Into Exploitable XSS
- How Does Elliptic Curve Cryptography Work?
- High Availability Router/Firewall Using OpenBSD, CARP, pfsync, and ifstated
- How to Authenticate a User Using an Authentication Filter [Video]
- Encryption and Signing
- 3 Phases of SAST: When and Why to Use SAST at Different Points in the SDLC
DZone
- Top 5 Enterprise ETL Tools new
- How to Build а Landing Page With GatsbyJS new
- How to Screw Up Encryption new
- The Top 3 Things Holding Back Your Kubernetes Strategy and How to Fix Them new
- Progressive Delivery With Jenkins X: Automatic Canary Deployments new
- When to Use the Spy Satellite new
- How to Use MySQL Transactions on Alibaba Cloud ECS or ApsaraDB for MySQL new
- Primary Methods of Approaching Unsupervised Learning new
- Difference Between Forward and sendRedirect in Servlet [Video] new
- Traffic Management With Istio (3): Traffic Comparison Analysis Based on Istio new
- Five Elements of Cloud Security [Video] new
- Are You on Track to Meet Your Data Center Resolutions? [Infographic] new
Digg Security