Daily Security News
PacketStorm
Trickbot Targets Major Cell Provider Users To Siphon PINs- Facebook Opens Portal Gizmo To Pwn2Own Exploit Fest
- Hong Kong ISPs Oppose Any Government Plans To Restrict Internet
- US Hack Attack Hobbles Iran's Ability To Target Oil Tankers
- North Korean State Hackers Target Retired Diplomats And Military Officials
- French Cybercops Dismantle Pirate Computer Network
- Undersea Cable To China Threatened By National Security Worries
- The Final Season Of Mr. Robot Starts In October
- German Cartel Office To Take Facebook Case To Highest Court
- Apple Patches iPhone Jailbreaking Bug
- Data Breach Of Hostinger Exposes 14 Million Users
- Hacktivism Activity And Chatter Has Markedly Dropped Since 2016
The Register
- Whoa, bot wars: As cybercrooks add more AI to their arsenal, the goodies will have to too
- Consumer ransomware insurance? You could be painting a target on us all for avaricious crims
- Charmin'. Garmin admits customers' full credit card data nicked from South African web store
- From PowerShell to auditing: Expand your cybersecurity know-how at SANS London 2019
- From pen-test to penitentiary: Infosec duo cuffed after physically breaking into courthouse during IT security assessment
- Snoops can bypass iOS 13 lock screen to eyeball your address book. Apple hasn't fix it yet. Valid flaw? You decide
- Those fake spying cell towers in Washington DC? Ex-intel staffers claim they're Israeli
- Eco-activists arrested by Brit cops after threatening to close Heathrow with drones
- Mystery database left open turns out to be at heart of a huge Groupon ticket fraud ring
- Watch live today: How to make your voice heard – and keep your staff safe from hackers
- Infosec prophet Bruce Schneier (peace be upon him) is only as famous as half of Salt-N-Pepa
- D-Link, Comba network gear leave passwords open for potentially whole world to see
Reddit - NetSec
- Command and Control via SYN packets new
- Reversing HackEx - An android game - Reverse Engineering new
- GitHub - chinarulezzz/pixload: Image Payload Creating/Injecting tools new
- How two dead users allowed remote crash of any instagram android user
- Luke — HackTheBox Writeup
- Hack The Box - Luke Write-up
- Hack The Box - Luke Write-up by 0xRick
- Hack The Box: Luke - writeup by Khaotic
- Requests-Racer: A Python Library for Exploiting Concurrency-Related Vulnerabilities in Web Applications
- Curryfinger – Find the Server Behind the CDN through SNI & Host header spoofing
- VyAPI - The Modern Cloud-Based Vulnerable Hybrid Android App
- Things You Should Know About Database Caching
Bleeping Computer
- Microsoft Edge Gets a new Extensions Menu, Here's How to Enable It new
- Tor's Bug Bash Fund Raises $86K to Fix Critical Issues new
- Window 10 1903 OOB Update Released to to Fix USB Microphones
- Nemty Ransomware Update Lets It Kill Processes and Services
- Microsoft Releases Workaround for Windows 10 Audio Issues in Games
- iOS 13 Passcode Bypass Lets You View Contacts on Locked Devices
- InnfiRAT Malware Steals Litecoin And Bitcoin Wallet Information
- New Fake 'Eva Richter' Resume Spam Aims to Destroy Files
- Destructive Ordinypt Malware Hitting Germany in New Spam Campaign
- The Week in Ransomware - September 13th 2019 - Exploit Kits
- North Korean Hackers Behind WannaCry and Sony Hack Sanctioned by USA
- Suspected Hacker Arrested for Stealing and Selling Unreleased Music
Threat Wire
Exploits
Packet Storm Exploits
- Piwigo 2.9.5 Cross Site Request Forgery / Cross Site Scripting
- phpMyAdmin 4.9.0.1 Cross Site Request Forgery
- Dolibarr ERP-CRM 10.0.1 Cross Site Scripting
- Folder Lock 7.7.9 Denial Of Service
- FTPShell Client 6.74 Buffer Overflow
- LimeSurvey 3.17.13 Cross Site Scripting
- Generic Zip Slip Traversal
- Opencart 2.3.0.2 Pre-Auth Remote Command Execution
- Microsoft DirectWrite sfac_GetSbitBitmap Out-Of-Bounds Read
- Microsoft DirectWrite SplicePixel Invalid Read
- eWON Flexy 13.0 Authentication Bypass
- OpenEdx Ironwood.1 Cross Site Scripting
Exploit-DB Webapps
- [webapps] Ticket-Booking 1.4 - Authentication Bypass
- [webapps] College-Management-System 1.2 - Authentication Bypass
- [webapps] Dolibarr ERP-CRM 10.0.1 - 'User-Agent' Cross-Site Scripting
- [webapps] phpMyAdmin 4.9.0.1 - Cross-Site Request Forgery
- [webapps] LimeSurvey 3.17.13 - Cross-Site Scripting
- [webapps] AVCON6 systems management platform - OGNL Remote Command Execution
- [webapps] eWON Flexy - Authentication Bypass
- [webapps] WordPress Plugin Photo Gallery 1.5.34 - SQL Injection
- [webapps] WordPress Plugin Photo Gallery 1.5.34 - Cross-Site Scripting
- [webapps] WordPress Plugin Photo Gallery 1.5.34 - Cross-Site Scripting (2)
- [webapps] WordPress 5.2.3 - Cross-Site Host Modification
- [webapps] Dolibarr ERP-CRM 10.0.1 - 'elemid' SQL Injection
Exploit-DB Local and Privilege Escalation
- [local] Windows 10 - UAC Protection Bypass Via Windows Store (WSReset.exe) (Metasploit)
- [local] Windows 10 - UAC Protection Bypass Via Windows Store (WSReset.exe) and Registry (Metasploit)
- [local] ktsuss 1.4 - suid Privilege Escalation (Metasploit)
- [local] ptrace - Sudo Token Privilege Escalation (Metasploit)
- [local] ChaosPro 2.0 - SEH Buffer Overflow
- [local] ChaosPro 2.1 - SEH Buffer Overflow
- [local] ChaosPro 3.1 - SEH Buffer Overflow
- [local] Kaseya VSA agent 9.5 - Privilege Escalation
- [local] Canon PRINT 2.5.5 - Information Disclosure
- [local] Exim 4.87 / 4.91 - Local Privilege Escalation (Metasploit)
- [local] Windows 10 - SET_REPARSE_POINT_EX Mount Point Security Feature Bypass
- [local] Microsoft Windows Text Services Framework MSCTF - Multiple Vulnerabilities
Exploit-DB DoS
- [dos] Folder Lock 7.7.9 - Denial of Service
- [dos] Microsoft DirectWrite - Invalid Read in SplicePixel While Processing OTF Fonts
- [dos] Microsoft DirectWrite - Out-of-Bounds Read in sfac_GetSbitBitmap While Processing TTF Fonts
- [dos] Asus Precision TouchPad 11.0.0.25 - Denial of Service
- [dos] VX Search Enterprise 10.4.16 - 'User-Agent' Denial of Service
- [dos] SQL Server Password Changer 1.90 - Denial of Service
- [dos] Easy MP3 Downloader 4.7.8.8 - 'Unlock Code' Denial of Service
- [dos] Webkit JSC: JIT - Uninitialized Variable Access in ArgumentsEliminationPhase::transform
- [dos] Outlook Password Recovery 2.10 - Denial of Service
- [dos] RAR Password Recovery 1.80 - 'User Name and Registration Code' Denial of Service
- [dos] GetGo Download Manager 6.2.2.3300 - Denial of Service
- [dos] NSKeyedUnarchiver - Info Leak in Decoding SGBigUTF8String
Exploit-DB Shellcode
- [shellcode] Linux/ARM64 - Bind (4444/TCP) Shell (/bin/sh) + IPv6 Shellcode (176 bytes)
- [shellcode] Linux/ARM64 - execve("/bin/sh", NULL, NULL) Shellcode (40 Bytes)
- [shellcode] Linux/ARM64 - Bind (4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (164 bytes)
- [shellcode] Linux/ARM64 - Reverse (127.0.0.1:4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (128 bytes)
- [shellcode] Linux/ARM64 - Reverse (::1:4444/TCP) Shell (/bin/sh) +IPv6 Shellcode (140 bytes)
- [shellcode] Linux/ARM64 - execve("/bin/sh", ["/bin/sh"], NULL) Shellcode (48 Bytes)
- [shellcode] Linux/ARM64 - Read /etc/passwd Shellcode (120 Bytes)
- [shellcode] Linux/ARM64 - Egghunter (PWN!PWN!) + execve("/bin/sh", NULL, NULL) + mprotect() Shellcode (88 Bytes)
- [shellcode] Linux/ARM64 - mmap() + read() stager + execve("/bin/sh", NULL, NULL) Shellcode (60 Bytes)
- [shellcode] Linux/ARM64 - Jump Back Shellcode + execve("/bin/sh", NULL, NULL) Shellcode (8 Bytes)
- [shellcode] Linux/x86 - execve(/bin/sh) using JMP-CALL-POP Shellcode (21 bytes)
- [shellcode] Linux/x86 - Chmod + Execute (/usr/bin/wget http://192.168.1.93//x) + Hide Output Shellcode (129 bytes)
Exploit-DB Remote
- [remote] Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass) new
- [remote] LibreNMS - Collectd Command Injection (Metasploit)
- [remote] October CMS - Upload Protection Bypass Code Execution (Metasploit)
- [remote] Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Remote Code Execution
- [remote] FusionPBX 4.4.8 - Remote Code Execution
- [remote] AwindInc SNMP Service - Command Injection (Metasploit)
- [remote] Cisco UCS Director - default scpuser password (Metasploit)
- [remote] Cisco Data Center Network Manager - Unauthenticated Remote Code Execution (Metasploit)
- [remote] Cisco RV110W/RV130(W)/RV215W Routers Management Interface - Remote Command Execution (Metasploit)
- [remote] Cisco Email Security Appliance (IronPort) C160 - 'Host' Header Injection
- [remote] IntelBras TELEFONE IP TIP200/200 LITE 60.61.75.15 - Arbitrary File Read
- [remote] LibreOffice < 6.2.6 Macro - Python Code Execution (Metasploit)
Hak5
Vulnerabilities
Security Focus Vulnerabilities
- More rss feeds from SecurityFocus
- Bugtraq: [SECURITY] [DSA 4269-1] postgresql-9.6 security update
- Bugtraq: [SECURITY] [DSA 4268-1] openjdk-8 security update
- Bugtraq: [SECURITY] [DSA 4267-1] kamailio security update
- Bugtraq: [CVE-2018-12584] Heap overflow vulnerability in reSIProcate through 1.10.2
- Vuln: LibreOffice Remote Code Execution and Unauthorized Access Vulnerabilities
- Vuln: Jenkins Credentials Binding Plugin CVE-2019-1010241 Information Disclosure Vulnerability
- Vuln: Qualcomm Components CVE-2019-2307 Integer Underflow Vulnerability
- Vuln: FreeBSD CVE-2019-5604 Out of Bounds Read Denial of Service Vulnerability
- Vuln: KDE KAuth CVE-2017-8422 Local Privilege Escalation Vulnerability
- Vuln: Exim CVE-2019-13917 Privilege Escalation Vulnerability
- Vuln: GNU Binutils 'libiberty' CVE-2019-14250 Integer Overflow Vulnerability
Bugtraq
- [slackware-security] mozilla-thunderbird (SSA:2019-254-02)
- [slackware-security] openssl (SSA:2019-254-03)
- [slackware-security] curl (SSA:2019-254-01)
- [CVE-2019-12516] SlickQuiz for Wordpress 1.3.7.1 "/wp-admin/admin.php?page=slickquiz-*" Multiple Authenticated SQL Injections
- [CVE-2019-12517] SlickQuiz for Wordpress 1.3.7.1 "/wp-admin/admin.php?page=slickquiz" Multiple Stored XSS
- [SECURITY] [DSA 4521-1] docker.io security update
- Dabman & Imperial (i&d) Web Radio Devices - Undocumented Telnet Backdoor & Command Execution Vulnerability
- NtFileSins v2.1 Windows NTFS Privileged File Access Enumeration Tool
- [SECURITY] [DSA 4520-1] trafficserver security update
- [SECURITY] [DSA 4519-1] libreoffice security update
- NtFileSins / Windows NTFS Privileged File Access Enumeration Tool
- [SECURITY] [DSA 4518-1] ghostscript security update
Full Disclosure
- Insecure tmpdir() use in dbtoepub.rb in docbook / xslt10-stylesheets
- Piwigo - Version 2.9.5 [CVE-2019-13363, CVE-2019-13364 ]
- FTPShell client 6.74 - Local Buffer Overflow (SEH)
- phpMyAdmin 4.9.0.1 - Cross-Site Request Forgery
- SEC Consult SA-20190912-0 :: Stored and reflected XSS vulnerabilities in LimeSurvey
- [CVE-2019-12516] SlickQuiz for Wordpress 1.3.7.1 "/wp-admin/admin.php?page=slickquiz-*" Multiple Authenticated SQL Injections
- [CVE-2019-12517] SlickQuiz for Wordpress 1.3.7.1 "/wp-admin/admin.php?page=slickquiz" Multiple Stored XSS
- Multiple Reflected Cross-site Scripting Vulnerabilities in OpenEdx version Ironwood.1
- NtFileSins v2.1 / Windows NTFS Privileged File Access Enumeration Tool
- CVE-2018-18809 Path traversal in Tibco JasperSoft
- Core FTP LE Version 2.2, build 1935 - Local Buffer Overflow (SEH Unicode)
- CA20190904-01: Security Notice for CA Common Services Distributed Intelligence Architecture (DIA)
Tools
CyberPunk nowhere.net
Packet Storm Tools
- Wireshark Analyzer 3.0.4
- OpenSSL Toolkit 1.1.1d
- Wapiti Web Application Vulnerability Scanner 3.0.2
- SQLMAP - Automatic SQL Injection Tool 1.3.9
- SSLsplit 0.5.5
- Bro Network Security Monitor 2.6.4
- I2P 0.9.42
- Tinc Virtual Private Network Daemon 1.0.36
- Haveged 1.9.6
- Clam AntiVirus Toolkit 0.101.4
- TOR Virtual Network Tunneling Tool 0.4.1.5
- Haveged 1.9.5 Alpha
Reversing/I like ASM
Reddit - Reverse Engineering
- x86 reverse engineering: go poke at these 512 bytes new
- ReversingHero - Learn Reverse Engineering
- /r/ReverseEngineering's Weekly Questions Thread
- Deep Analysis of CVE-2019-8014: The Vulnerability Ignored 6 Years Ago
- SATURN -- Software Deobfuscation Framework Based on LLVM
- PDBDumpWV - Extracting information from pdb files
- XEXLoaderWV - How to sideload a pdb with symbol information
- Street Fight 30th Hacking Edition : A journey into Moo (r2con 2019) [PDF]
- findrpc: Idapython script to extract RPC interface from binaries
- RF reverse engineering has become trivial — thanks to the ‘Opensource SDR’ movement
- Plugin for integrate Frida in Binary Ninja
- Check out r/MechanicalDesign and help us grow the community! Reverse engineering and mechanical design often go hand in hand.
Reddit - Exploit Dev
- Heap Overflows and the iOS Kernel Heap
- My solution to the protostar exploit-exercises, challenge: Stack 0.
- Wargame Meetup #0: September 14, 2019
- A very deep dive into iOS Exploit chains found in the wild
- Pwny Racing - head to head CTF video podcast
- Weekly wargame
- Bug bounty
- Any good books?
- Open Source Fuzzers list (and other fuzzing tools)
- Help on buffer overflow[BEGGINER]
- New Tool for ASCII/Sub Encoded Shellcode Generation
- Python code to shellcode
Reddit - REGames
- Reversing HackEx - An android game - Reverse Engineering new
- Finding Player and Camera Position for Fly Hack - Pwn Adventure 3
- Deobfucating DYN Files
- Trying to extract the assets from an old game. Clueless how to decompile the resources (.res)
- Nitemare Unity3D part 1: shooting things
- Automated program for a browser-based unity game
- How do I disassemble Sega Saturn games?
- iOS IPA Anti-Tamper Methedology
- Request / Proposal for Symphony of the Night
- Bringing TW3 Online
- Modern NAT traversal methods for games?
- Serious Sam 2 Reversing
StackExchange - ReverseEngineering
- How to find the starting address of text section of a DLL inside a process? (64 bit) new
- injecting through APC using LdrLoadDll fails on `CiValidateImageHeader` new
- Using NAND flash dump with OOB data
- Reverse getline(cin, text)
- I don’t see the “Add entries of all procedures” option
- How to trace the differences of a software?
- Understanding operand forms
- Getting illegal access fault with error :The address 0xffdeb9f0 could not be accessed."
- Unable to start file '...' Error: 50
- Java reverse engineering tool
- x86 main preamble makes stack aligned on 32-bytes boundaries
- __declspec(property) and virtual functions [on hold]
Metasploit Minute
Malware/APT
Reddit - Malware
- Additional files for "Rootkits and Bootkits" by Matrosov and Rodionov new
- Wireshark - Malware traffic Analysis
- Dissecting an on-memory powershell post exploitation beacon encoded raw binary w/ radare2
- Google suspicious activity blocked, repedidly.
- Ryuk Related Malware Steals Confidential Military, Financial Files
- Need chrome malware samples for research purposes
- Is there somewhere I can download the ransomware sample found at https://www.virustotal.com/gui/file/cc20cae08f82e39e35ac3a7edbbbd129337b7aee0572858e02bfda88995f7146/detection
- New Emotet C2 Servers
- Email Spam and Botnet Infection Levels Quantified - ArcTitan
- Dangerous Spora Ransomware Ransomware Threat Discovered
- StringSifter is a machine learning tool that automatically ranks strings based on their relevance for malware analysis.
- Download sample from VirusTotal
Unit42
- Unit 42 Named Top Zero-Day Vulnerability Contributor by Microsoft
- Exploitation of Windows CVE-2019-0708 (BlueKeep): Three Ways to Write Data into the Kernel with RDP PDU
- Newly Registered Domains: Malicious Abuse by Bad Actors
- Hunting the Public Cloud for Exposed Hosts and Misconfigurations
- Rocke’in the NetFlow
- Unveiling 11 New Adversary Playbooks
- MyDoom Still Active in 2019
- Cloudy with a Chance of Entropy
- USBCreator D-Bus Privilege Escalation in Ubuntu Desktop
- Using Wireshark: Exporting Objects from a Pcap
- Tale of a Windows Error Reporting Zero-Day (CVE-2019-0863)
- The Gopher in the Room: Analysis of GoLang Malware in the Wild
FireEye Threat Research
- test-vanity-url
- Open Sourcing StringSifter
- Ransomware Protection and Containment Strategies: Practical Guidance for Endpoint Protection, Hardening, and Containment
- SharPersist: Windows Persistence Toolkit in C#
- Definitive Dossier of Devilish Debug Details – Part One: PDB Paths and Malware
- Healthcare: Research Data and PII Continuously Targeted by Multiple Threat Actors
- GAME OVER: Detecting and Stopping an APT41 Operation
- Showing Vulnerability to a Machine: Automated Prioritization of Software Vulnerabilities
- Finding Evil in Windows 10 Compressed Memory, Part Three: Automating Undocumented Structure Extraction
- Finding Evil in Windows 10 Compressed Memory, Part Two: Virtual Store Deep Dive
- Commando VM 2.0: Customization, Containers, and Kali, Oh My!
- APT41: A Dual Espionage and Cyber Crime Operation
Crypto
Reddit - Crypto
- Arbitration operations in crypto, explained new
- Does Cryptomator Allow Offline Storage? new
- Sequential PoW: Why always so complicated? Proof of Concept for a simpler system new
- Go show my RSA tool some love! new
- Code Book by Singh new
- Tool to mask actual password with master pass? new
- Is EdDSA with Blake2b as hashing function secure? new
- Is --- 5^77(mod 119) = 3 --- True?
- Walkex
- Walkex
- Made this java code for monoalphabetic substitution ciphers
- Bitcoin Question Explicitly Related to the Underlying Cryptography
StackExchange - Crypto
- BGV for three multiplication level/depth new
- Is it possible to encrypt a message stream with the same IV each time and for it to be secure? new
- Why is AES_XTS insecure for data stream encryption? new
- A5/1 Formula Question's new
- Keyspace of monoalphabetic substitution cipher new
- what are the benefits/limits of constructing AEAD using Duplex mode with ARX primitive (chacha20 for example)? new
- Is it possible to find what is the random generated key if I know the plaintext and ciphertext? [on hold] new
- Which is the best AES mode of operation? [on hold] new
- Finding repeated groups of letters in the Kasiski examination new
- Fully homomorphic encryption - modulus switching new
- Cryptography ElGamal Encryption (Plain Text Attack) [on hold] new
- Why is $S(y) = y^{2^8-2} = y^{254}$ a one-to-one function and a permutation on $GF(2^8)$ new
Podcasts
Security Weekly
- SE Village 2020 and Innocent Lives Foundation – Christopher Hadnagy – PSW #618
- Security News: August 28, 2019 – PSW #618
- Analyzing Custom Log Sources – Corey Thuen – PSW #618
- Imperva, Cofense, & VMware – ESW #151
- Respond Software, Morphisec, and Sophos – ESW #151
- AttackIQ, BlueHexagon, and Coalfire – ESW #151
- May 9, 2017 – Hack Naked News #123
- Tarun Desikan, Banyan – Startup Security Weekly #44
- August 27, 2019 – HNN #231
- Managing 3rd Party Risk, SecureLink – Tony Howlett – BSW #141
- Leadership Articles – BSW #141
- Black Hat Interviews – WhiteSource and Venafi – ASW #74
Risky.Biz
- Risky Business #555 -- Bluekeep Metasploit module released, Paige Thompson pleads not guilty and more
- Risky Biz Soap Box: MITRE ATT&CK framework is now officially everywhere
- Risky Business #554 -- Is there an iOS exploit glut?
- Risky Business #553 -- Imperva's cloud WAF gets owned hard
- Risky Biz Soap Box: Casey Ellis on "match.com for hackers"
- Risky Business #552 -- Guest host Alex Stamos on all the week's security news
- Feature Podcast: Inaction is escalatory
- Risky Business #551 -- Post Vegas edition, more news than we can handle
- Risky Business #550 -- CapitalOne owned, Hutchins sentenced, VxWorks horror-show and more!
- Risky Business #549 -- FSB contractor breached, Equifax fined, NSO Group targets cloud
- Risky Biz Soap Box: Ryan Kalember of Proofpoint on "Very Attacked People"
- Risky Business #548 -- Zoom RCE details and all the week's news
The CyberWire
- China criticizes Twitter and Facebook. Silence expands internationally. A popular Ruby library was backdoored.
- Chinese information operations on Twitter and Facebook. iOS jailbreak released. Adult websites leak information.
- ISIS claims Kabul massacre. Huawei gets a temporary break. Texas governments hit by ransomware. Hy-Vee warns of point-of-sale attack.
- Detecting dating profile fraud — Research Saturday
- ECB sustains an intrusion into a third-party-hosted service. Norman quietly mines Monero. MetaMorph appears in a stealthy phishing campaign. Information operations.
- Huawei accused of abetting domestic surveillance in Africa. Cyber gangs adapt and evolve. Prosecutors indicate they’ll add charges to “erratic.” Bluetana detects card skimmers.
- Hacking the Czech Foreign Ministry. Microsoft patches new wormable bugs. More controversial human review of AI. Insecure links, exposed databases, and a California vanity plate.
- UN Security Council looks at North Korean cybercrime. Notes on PsiXBot and BITTER APT. The state of spearphishing. Election security. A final look back at…
- A look back at Black Hat and Def Con. Sometimes failures that look like accidents are accidents. Russia wants better content suppression from Google. Notes…
- Unpacking the Malvertising Ecosystem — Research Saturday
- Voting machine security. Airliner firmware. Attribution and deterrence in cyberwar. Monitoring social media. Broadcom buys Symantec’s enterprise security business. Policing, privacy, and an IoT OS.
- Hacking in the Gulf region. Vulnerability research into airliner avionics. Phishing and ransomware move to the cloud. EU data responsibilities. US bans five Chinese companies.
Cyber Security Interviews
Threat Intel
Reddit - Onions
- Is there any privacy advantage to using the .onion Facebook page? new
- Any darkweb onion links apart from the ones in "our wiki" new
- Crawling tor hidden services in 2019 new
- Load balancing risk assessment question.
- What is a good place for finding (legal) .onions?
- http://434jslw34sb673ghlu2hflu2x4qcaikemh4c7mwjafuaeotnm4fzf3yd.onion/
- there used to be a website that only had a hash and an input bar
- Where do you store your darknet bookmarks/links
- Buying with Bitcoin
- Using CC vendors?
- Amateur Tor User with question?
- Onion financial vendor reviews
Reddit - Pwned
- Are CEH and OSCP certifications comparable ? (Part 1)
- Strengthening Cybersecurity with Artificial Intelligence
- Anyone know where to find the 2019 leaked Dubsmash usernames and passwords?
- Reddit compromised?
- Hacker site’s incriminating database published online by rival group
- Chegg.com data breach public disclosure - 35.5 million users with MD5
- Poshmark.com data breach public disclosure - 36.1 million users impacted
- StockX.com data breach public disclosure - 7.4 million users with MD5
- Poshmark.com data breach public disclosure
- Wirecard.com.br data breach impacts 4.3 million users; SHA1 hash algo used
- Misconfigured Jira instances exposed data of hundreds of Fortune 500 companies
- University record loss
HaveIBeenPwned
- Void.to - 95,431 breached accounts
- Poshmark - 36,395,491 breached accounts
- Mastercard Priceless Specials - 89,388 breached accounts
- XKCD - 561,991 breached accounts
- Coinmama - 478,824 breached accounts
- Chegg - 39,721,127 breached accounts
- Cracked.to - 749,161 breached accounts
- StockX - 6,840,339 breached accounts
- Canva - 137,272,116 breached accounts
- CafePress - 23,205,290 breached accounts
- Club Penguin Rewritten (July 2019) - 4,007,909 breached accounts
- Anime-Planet - 368,507 breached accounts
Privacy/VPNs
Reddit - Privacy
- Games to play new
- Google Fined $170 Million For Violating Kids' Privacy On YouTube new
- Lawmakers Seek Intel From Customers in Big Tech Probe new
- Snoops can bypass iOS 13 lock screen to eyeball your address book. Apple hasn't fix it yet. Valid flaw? You decide new
- How is ZorinOS in terms of privacy? new
- Managing your privacy: Email new
- These 4 Gmail alternatives put your privacy first new
- Old emails; keep or delete? new
- HP printers try to send data back to HP about your devices and what you print new
- Tracking of "giants"? (reddit, youtube etc.) new
- How to do email properly? new
- Thoughts on Using LinkedIn? new
Reddit - VPN
- If I install a VPN on my firestick will it have any affect on other devices that use my wifi new
- Activate Steam games with VPN? new
- vpn suggestion new
- A small question from a person that doesnt know much about VPN. new
- Problem with free version of Hotspot Shield new
- How to setup site to site VPN without changing the ISP modem to bridge mode?
- VBox simple question
- Mozilla Private Network VPN gives Firefox another privacy boost
- Is X-VPN a trusted vpn?
- Looking for a VPN replacement for Mac OS Server
- Can anyone advice against making my own VPN server on a AWS EC2 instance?
- How can I make my own VPN service for personal use?
Help Wanted
Reddit - AskNetSec
- Is mobile security a good jumping point? new
- NMap to determine vulnerabilities on windows devices new
- Anyone landed a cybersecurity job with a good cybersecurity focused twitter account? new
- Android App Pentesting - Looking for guidance new
- With a CS degree and average grades, what do you think would be the best way to get into NetSec? new
- Simulating a vulnerable Windows 2012 device new
- Suggestions on reputable penetration testers in Orange County CA? new
- How do you grab a game server using lanc new
- How to make script to install software? new
- Penetration testing: Master's in Comp Sci with Cyber security or Bachelor's in Comp Sci? new
- Ive stopped getting spam all of a sudden? new
- How to enable concurrent users in windows 10, one RDP and one local, using c++? any tutorial? new
Reddit - Netsec Students
- Introduction to Networking | Network Basics for Beginners - TCP / IP new
- Wiershark - Malware traffic analysis tutorial
- Hack The Box: Luke - writeup by Khaotic
- Incident Response Guide
- Introduction to Networking | Network Basics for Beginners - Authentication
- Pentesting for n00bs: Episode 8 - Bashed (hackthebox)
- ELI5 ACME protocol
- Hack the Box cartographer walkthrough
- Remote code execution vulnerability found in Exim
- Networking course
- Where to start and what am I thinking wrong: security in a wlan of robots (first project, I only have theoretical knowledge)
- How to get past stenography puzzles on picoCTF(2018) ?
Stackoverflow - Security
- Whitelist validation of URI and $_POST global variable at the start of the script to enforce strict security new
- Access Token Security new
- How to block IP if the limit_req burst is triggered? new
- Fake Users registering in my site Laravel new
- How to secure my token cookie for my REST API new
- Is it necessary to validate input for preventing SQL injection? new
- Best Practices for Securing a SPA with JWTs new
- Can an android service get hacked because of downloading an app from Play Store from an insecure network new
- Json Ignore properties during runtime new
- Symfony 4.3 - Cannot autowire service argument that references class "SymfonyComponentSecurityCoreSecurity"
- Can apache http server request java servlet and show pages based on servlet response?
- Are Subject Alternative Names compulsory for SSL in Jetty 9.4.18
Stack Exchange
- Block access from ip which try too many request to apache server XAMPP WINDOWS new
- What are some common and advanced web server exploits? new
- Is it possible to encrypt a message stream with the same IV each time and for it to be secure? new
- What's the reason of both "Allow-Origin: *" and "Allow-Credentials: true" headers? new
- How does nirsoft PassView work? [on hold] new
- Is Aladdin eToken Pro Java 72k supported by Windows? new
- Is there a way to protect a supporting app against changing the REST endpoint? new
- why my Metasploit folder does not have wordlists folder (usr/share/)? new
- What is the difference between data owner , data custodian and system owner new
- How does MariaDB's ed25519 auth scheme work? new
- How to generate short fixed length cryptographic hashes? new
- how to make a http request in jsonp callback?
Locks/Social Engineering
Reddit - Lockpicking
- Naughty Bucket Eviction new
- Picked and Gutted the Magnum Superior. new
- How straigth is unrolled feeler gauge stock ? new
- Just picked. I was really overthinking it. new
- Primus Everest picked. Reassembly was a disaster new
- ASSA Desmo 6 Slider Picked and Gutted. Awesome lock. new
- 154 🔐 JNA SDK military box with Titan lock picked [Yugoslavia] new
- Remember that Brother post, idiots not even using the tentioner new
- A couple of questions about learning how to rekey locks new
- Just spp my dg masterlock new
- First Yale style lock I have picked, never seen a "bird" lock apart from this one new
- Just got to catch it on video now new
Reddit - Social Engineering
- 9 Effective Social Engineering Techniques
- Smoke and Mirrors - Red Teaming with Physical Penetration Testing and Social Engineering
- Consumers’ Trust in Brands Has Fallen to a New Low. Surprised? Probably Not
- 5 Techniques To Foil Scammers and Criminals
- DANGER! – WATCH AT YOUR OWN RISK! (Rumor has it that this video went viral in China. Is it part of a social engineering experiment?…
- Best Whatsapp marketing tools used for Business
- What's the hardest part about keeping a strong, positive mindset for you?
- How Misinformation Spreads - And Why People Trust It
- I made a video on how to ask for what you want and get it
- When False Claims Are Repeated, We Start To Believe They Are True
- Best Whatsapp marketing tools used for Business
- Is Boris Johnson deliberately pushing confusion?
Security Blogs
Security Bloggers Network
- Google’s bug bounty bid to make big Android apps more secure
- What is the CCPA and Who Must Comply? The California Consumer Privacy Act Explained
- Ethical Hackers: A Business’s Best Friend?
- Attacking the Intel Secure Enclave
- Google Expands Scope of One Bug Bounty Program, Launches Another
- A Consumer’s Guide to Protecting Important Data From Ransomware
- The top reason businesses make a cyber insurance claim – Business Email Compromise
- 3 Steps to Controlling Access Inside the Network
- Securing Your Dynamic Cloud Strategy
- Russia’s Political, Legal Climate Raises Red Flags
- Emsisoft earns VB100 in August 2019 tests
- Top PayPal Scams and Protection Tips
ThreatPost
- WordPress XSS Bug Allows Drive-By Code Execution
- iPhone iOS 13 Lockscreen Bypass Flaw Exposes Contacts
- Astaroth Spy Trojan Uses Facebook, YouTube Profiles to Cover Tracks
- North Korean Spear-Phishing Attack Targets U.S. Firms
- News Wrap: IoT Radio Telnet Backdoor And ‘SimJacker’ Active Exploit
- Cybercriminals Adding Sophistication to BEC Threats
- Library-Themed University Phishing Attack Expands to Massive Scale
- California Passes Bill to Ban Police Use of Facial Recognition
- 1B Mobile Users Vulnerable to Ongoing ‘SimJacker’ Surveillance Attack
- UNICEF Leaks Personal Data of 8,000 Users via Email Blunder
- ThreatList: Apple Adware, Phishing, APT Attacks Threaten macOS Users
- Major Groupon, Ticketmaster Fraud Scheme Exposed By Insecure Database
ISC SANS
- ISC Stormcast For Monday, September 16th 2019 https://isc.sans.edu/podcastdetail.html?id=6666, (Mon, Sep 16th) new
- Rig Exploit Kit Delivering VBScript, (Thu, Sep 12th)
- ISC Stormcast For Friday, September 13th 2019 https://isc.sans.edu/podcastdetail.html?id=6664, (Fri, Sep 13th)
- Blocking Firefox DoH with Bind, (Thu, Sep 12th)
- ISC Stormcast For Thursday, September 12th 2019 https://isc.sans.edu/podcastdetail.html?id=6662, (Thu, Sep 12th)
- ISC Stormcast For Wednesday, September 11th 2019 https://isc.sans.edu/podcastdetail.html?id=6660, (Wed, Sep 11th)
- Microsoft September 2019 Patch Tuesday, (Tue, Sep 10th)
- ISC Stormcast For Tuesday, September 10th 2019 https://isc.sans.edu/podcastdetail.html?id=6658, (Tue, Sep 10th)
- ISC Stormcast For Monday, September 9th 2019 https://isc.sans.edu/podcastdetail.html?id=6656, (Mon, Sep 9th)
- Unidentified Scanning Activity, (Sat, Sep 7th)
- PowerShell Script with a builtin DLL, (Fri, Sep 6th)
- ISC Stormcast For Friday, September 6th 2019 https://isc.sans.edu/podcastdetail.html?id=6654, (Fri, Sep 6th)
digitalmunition
eHacking News
- Zwift hackers expose next generation of cycling doping new
- Hackers Exploiting a Critical Weakness In Mobile Phones to Track Location
- Russians were warned about difficulties with access to Internet pages
- Russians will be able to buy alcohol using a mobile application instead of a paper passport
- Facebook exposes 400 million user phone numbers
- Google Calendar vulnerability affects 1 billion users
- Beware: Malware Hidden Inside Online School Textbooks?
- Ransomware Attack Locks the Internet Service in Public Schools of Rockford
- ATTENTION ANDROID USERS: REMOVE THESE APPS IMMEDIATELY!
- Hackers hiding malware behind Captcha
- CamScanner Returns After Being Removed by Google for Having Malware
- Electroneum enables third-party mobile top ups for the top four network operators in Brazil
Wired - Security
- Mysterious iOS Attack Changes Everything We Know About iPhone Hacking
- Everything We Know About the Capital One Hacking Case So Far
- What the Jetflicks and iStreamItAll Takedowns Mean for Piracy
- A Hack to Steal a Tesla, a Yelp Overhaul, and More News
- Hackers Could Steal a Tesla Model S by Cloning Its Key Fob—Again
- A History of Plans to Nuke Hurricanes (and Other Stuff Too)
- OpenAI Said Its Code Was Risky. Two Grads Re-Created It Anyway
- Alleged 'Snake Oil' Crypto Firm Sues Over Boos at Black Hat
- Cryptocurrency Mining Employees Expose Nuclear Plant to Internet
- The Consumer Bureau's Reckless Plan for Debt Collection
- What Is Cyberwar? The Complete WIRED Guide
- The Fight Against Robocalls Gets Powerful New Allies
Krebs on Security
- NY Payroll Company Vanishes With $35 Million
- Patch Tuesday, September 2019 Edition
- Secret Service Investigates Breach at U.S. Govt IT Contractor
- ‘Satori’ IoT Botnet Operator Pleads Guilty
- Spam In your Calendar? Here’s What to Do.
- Feds Allege Adconion Employees Hijacked IP Addresses for Spamming
- Phishers are Angling for Your Cloud Providers
- Ransomware Bites Dental Data Backup Firm
- Cybersecurity Firm Imperva Discloses Breach
- Breach at Hy-Vee Supermarket Chain Tied to Sale of 5M+ Stolen Credit, Debit Cards
- Forced Password Reset? Check Your Assumptions
- The Rise of “Bulletproof” Residential Networks
Naked Security
- Capital One breach – 100 million users’ data stolen
- Hackers target Telegram accounts through voicemail backdoor
- Listening in: Humans hear the private info Siri accidentally records
- US chases fraudulent bitcoin exchange BTC-e for $100m
- Post-Equifax settlement, NY updates data breach notification laws
- NAS targeted by brute force ransomware attacks
- Three quarters of gamers suffer hate and harassment online
- Russia targeted all 50 states in 2016 election, Senate report says
- Monday review – the hot 21 stories of the week
- Ransomware hits Louisiana schools; state of emergency declared
- WannaCry hero avoids prison
- S2 Ep1: FaceApp, logic bombs and stranger danger – Naked Security Podcast
Schneier on Security
- Upcoming Speaking Engagements
- Friday Squid Blogging: How Scientists Captured the Giant Squid Video
- When Biology Becomes Software
- Smart Watches and Cheating on Tests
- Fabricated Voice Used in Financial Fraud
- More on Law Enforcement Backdoor Demands
- On Cybersecurity Insurance
- NotPetya
- Friday Squid Blogging: Squid Perfume
- Default Password for GPS Trackers
- The Doghouse: Crown Sterling
- Credit Card Privacy
Linux Security
Dark Reading
- Malware Linked to Ryuk Targets Financial & Military Data
- US Sanctions 3 Cyber Attack Groups Tied to DPRK
- 6 Questions to Ask Once You've Learned of a Breach
- No Quick Fix for Security-Worker Shortfall
- Taking a Fresh Look at Security Ops: 10 Tips
- Escaping Email: Unlocking Message Security for SMS, WhatsApp
- Instagram Bug Put User Account Details, Phone Numbers at Risk
- Indictments Do Little to Stop Iranian Group from New Attacks on Universities
- North Korea Seen Using ELECTRICFISH, BADCALL Malware Variants
- Security Leaders Share Tips for Boardroom Chats
- A Definitive Guide to Crowdsourced Vulnerability Management
- NetCAT Vulnerability Is Out of the Bag
Darknet
- HiddenWall – Create Hidden Kernel Modules
- Anteater – CI/CD Security Gate Check Framework
- Stardox – Github Stargazers Information Gathering Tool
- ZigDiggity – ZigBee Hacking Toolkit
- RandIP – Network Mapper To Find Servers
- Nipe – Make Tor Default Gateway For Network
- Mosca – Manual Static Analysis Tool To Find Bugs
- Slurp – Amazon AWS S3 Bucket Enumerator
- US Government Cyber Security Still Inadequate
- BloodHound – Hacking Active Directory Trust Relationships
Securelist
Whitehat Security Blog
- Microservices: A Double-Edged Sword
- Using AppSec Statistics to Drive Better Outcomes
- The Rising Costs of Data Breaches – An Expensive Hit to Enterprises Across the Globe
- Cloud Application Security Shouldn’t be Up in the Air
- ‘The More Things Change, The More They Stay the Same’: XSS, SQLi, CSRF AppSec Vulnerabilities Show Little Improvement in 1H2019
- Know Your Risk: How Evaluating Security Posture Can Drive Better Business Decisions
- Best Practices in Identifying and Remediating Vulnerabilities
- It’s Official: WhiteHat and NTT Security Have Closed the Acquisition Deal
- How Empathy Can Make You a Better Leader
- Celebrating International Women in Engineering Day
- Journey to InfoSec 2019: Top Three Takeaways from This Year’s Conference
HITB News
- WordPress XSS Bug Allows Drive-By Code Execution new
- I Could Have Hacked All Uber Accounts- But I Chose to Report it Instead new
- Nemty Ransomware Update Lets It Kill Processes and Services
- Square Crypto Grants $100,000 to Open-Source Crypto Payment Processor
- SIM card exploit could be spying on over 1 billion mobile phone users globally
- Meet the three North Korean hacking groups funding the country’s weapons programs
- Uncover the vulnerability and exploit internally, don’t rely on bug bounties alone
- Zero-day privilege escalation disclosed for Android
- USB4 is coming soon and will (mostly) unify USB and Thunderbolt
- Unix at 50: How the OS that powered smartphones started from failure
- Armed with iOS 0days, hackers indiscriminately infected iPhones for two years
- HITB GSEC Singapore - Unveiling the Latest Trends and Threats in the Cyber Security Landscape
Securiteam
The RISKS Digest
- Ring, the doorbell-camera firm, has partnered with 400 police forces, extending surveillance reach
- Regis University's technology systems targeted by malicious threat likely from outside the country
- A Harvard freshman says he was denied entry to the U.S. over social media posts made by his friends
- Found: World-readable database used to secure buildings around the globe
- Credit card privacy matters: Apple Card vs. Chase Amazon Prime Rewards Visa
- Re: Playing God: Japan temple puts faith in robot priest
- Frequency-sensitive trains and the lack of failure-mode analysis
- Wake Up! Your House Is Calling
- OpenAI releases larger GPT-2 dataset. Can it write fake news better than a human?
- Premier's office accidentally publishes name of secret agent
- WeWork's Wi-Fi network is laughably easy to hack
- A Bitter Divorce Battle on Earth Led to Claims of a Crime in Space
Forbes - Security
- The Evolving Enterprise Calculus Of Public Cloud Versus Private Infrastructure
- Florida Marketing Firm Leaks Data On 200 Million-plus Americans
- Brave Move Good For Tor And Privacy
- Lenovo Rakes In Most TOP500 Systems And Two Years Ahead Of Schedule
- King iPhone Hacker NSO Group Robbed By Employee -- Spyware On Dark Web Sale For $50 Million, Israel Claims
- The Russia Investigation's Intelligence Is 'A Triumph' -- Trump Should Trust It
- This AI Just Beat Human Doctors On A Clinical Exam
- Artificial Intelligence, Gates, Rockefeller, Sloan, Carnegie & Ford Can Defeat Bad Social Media
- IBM's HR Chief Shares Best Advice On The Future Of Work
- Google's $5 Billion Escape: Why Europe's Antitrust Cop Could Be Tougher On Data
- Alexa, Are You A Spy? Israeli Startup Raises $12.5 Million So Governments Can Hack IoT
Kaspersky Blog
- Internet in space: Is there Net on Mars?
- Kaspersky Incident Communications
- Transatlantic Cable podcast, episode 109
- All apps on Google Play are safe: Fact or fiction?
- Supply chain as SMB threat
- Keeping e-sports clean
- How browser plugins can leak corporate secrets
- Charity on the Internet: How to identify scammers
- Transatlantic Cable podcast, episode 108
- A malicious website can infect my iPhone. Fact or fiction?
- Student surprise: malware masked as textbooks and essays
- Cybersecurity as a public persona
Adam Shostack & friends
- Episode 9 Spoilers
- Workshop on Serious Games for Cyber Security
- 3 Arguments for Threat Modeling
- The White Box Essays (Book Review)
- Science of Security, Science for Security
- ‘No need’ to tell the public(?!?)
- Hayabusa!
- Books Worth Your Time (Q1 2019)
- Leave Those Numbers for April 1st
- 20 Years of STRIDE: Looking Back, Looking Forward
- Cybersecurity is not very important
- Threat Modeling in 2019
Graham Cluley
- Smashing Security #145: Apple and Google willy wave while home assistants spy – DoH!
- Toyota parts supplier loses $37 million in email scam
- Operation reWired: 281 suspected email scammers arrested around the world
- Unlock the power of threat intelligence with this practical guide. Get your free copy now
- Wikipedia and World of Warcraft Classic targeted by DDoS attacks
- Hackers who hit Texas with ransomware attack demanded $2.5 million, got nothing
- Hundreds of millions of Facebook users’ phone numbers found lying around on the internet
- Smashing Security #144: Google helps the FBI, Twitter Jack’s hijack, and car data woes
- Twitter disables tweeting via SMS (temporarily at least), in wake of Jack Dorsey account hijack
- CEO voice deepfake blamed for scam that stole $243,000
- Chinese tech firm Huawei says it was hacked by the United States
- Earn $2.5 million if you find a remote zero-day exploit for Android
Rapid7
- Metasploit Wrap-Up
- This One Time on a Pen Test: The Pizza of Doom
- Automating User Provisioning and Deprovisioning with Security Orchestration, Automation, and Response (SOAR)
- Patch Tuesday - September 2019
- CVE-2019-15846 Privileged Remote Code Execution Vulnerability in the Exim Mailer: What You Need to Know
- R7-2019-09 | CVE-2019-5617, CVE-2019-5643, CVE-2019-5644: C4G BLIS authentication and authorization vulnerabilities (FIXED)
- How Rapid7 Industry Research Strengthens InsightVM
- Metasploit Wrap-Up
- Initial Metasploit Exploit Module for BlueKeep (CVE-2019-0708)
- This One Time on a Pen Test: Your Mouse Is My Keyboard
- RASP 101: What Is Runtime Application Self-Protection?
- Rapid7 Introduces Industry Cyber-Exposure Report: Nikkei 225
Security in Mainstream Media
Google News Hacking
- User complains about ban after hacking $1B from Aussie platform - Micky News new
- Iranian Hacking of Gantz's Phone Far More Serious Than Originally Thought - Yeshiva World News new
- China responsible for Parliament House hacking, Australian intelligence agencies believe - The Canberra Times new
- It was China that hacked our parliament: report - The Big Smoke Australia new
- China hacked Australian parliament, political parties in February 2019, intelligence sources believe - The Advertiser new
- Keep the hackers away, use multifactor authentication - Manila Bulletin new
- China 'blamed for cyber-attack' on Australian parliament - 9News new
- Nicole Scherzinger hacked with advertisement to her ‘sex tape’ - Metro new
- Nicole Scherzinger hacked with advertisement to ‘sex tape’ - Metro.co.uk new
- Hacking A Private Instagram Account Is Way Easier Than You Think - HotNewHipHop new
- Hacking A Private Instagram Account Is Way Easier Than You Think - HotNewHipHop new
- Familiarity is the enemy on the war on hackers and cyber crime - Irish Examiner new
Google Cyber Security
- Cyber Battle of the Emirates: Training the next generation of cyber security pros - Help Net Security new
- Here's the Cybersecurity SaaS Stock I Just Bought - Motley Fool new
- Episode 108 -- The Capital One Data Breach and Vendor Cybersecurity Risks - JD Supra new
- NZ provides $10 million to help Pacific countries lift cybersecurity capability - CIO New Zealand new
- Top 10 Cyber Security Trends to Watch in 2020 - Analytics Insight new
- Cyber security training necessary for our state | Editorials - American Press new
- Police arrest workers of Israeli cyber group Ability on suspicion they violated defense export law - Haaretz new
- America's cyber blind spot | TheHill - The Hill new
- Opinion: Cyber attacks threaten security of 2020 election - The Mercury News new
- What to do about growing cyber security threats to businesses & individuals - WMUR Manchester new
- U.S. Targets North Korean Hacking as Rising National-Security Threat - The Wall Street Journal new
- Yerington Cyber Security training reduces online threats for 13 participants - Nevada Appeal
Thirsty for more
YCombinator
- Neovim v0.4.0 new
- Ask HN: Is .io domain unstable? new
- The Muse Is Hiring a VP Engineering in NYC new
- Purdue Pharma Files for Bankruptcy to Wipe Out 2k Lawsuits new
- Ask HN: React Native or Flutter? new
- An important quantum algorithm may be a property of nature new
- Australia concluded China was behind hack on parliament, political parties new
- Ask HN: Is there any point in trying to clear your online footprint new
- Free Open Source VPN – Curve25519,ChaCha20 – WireGuard and OpenVPN new
- Why Is the Amazon Rain Forest Disappearing? new
- Emulating a PlayStation 1 (PSX) Entirely with C# and .NET new
- Wasps: If you can't love them, at least admire them new
Digg - Hack
Slashdot - Rights
- Walmart Sues Tesla Over Fires At Stores Fitted With Its Solar Panels
- Man Sued For Using Bogus YouTube Takedowns To Get Address For Swatting
- You Can Finally See All Of The Info Facebook Collected About You From Other Websites
- WebKit Introduces New Tracking Prevention Policy
- How Malformed Packets Caused CenturyLink's 37-Hour, Nationwide Outage
- Bernie Sanders Wants To Ban Facial Recognition Use By Police
- Developers Accuse Apple of Anti-Competitive Behavior With Its Privacy Changes in iOS 13
- Degrading Tor Network Performance Only Costs a Few Thousand Dollars Per Month
- Fearing Data Privacy Issues, Google Cuts Some Android Phone Data For Wireless Carriers
- Massive Ransomware Attack Hits 23 Local Texas Government Offices
- Why Am I Receiving Unordered Boxes From Amazon?
- Alexa, Siri, and Google Home Can Be Tricked Into Sending Callers To Scam Phone Numbers
Reddit - Cyberpunk
- Armed (Firearms & Tear Gas) HK police flood in to a station and fill all surrounding trains. new
- SC-88 - Air/Lock new
- BWlhaictke - Bo Gack new
- [OC] Connections new
- Cybered war dog concept new
- New Cyberpunk YouTube Channel new
- Welcome to the Cybernetik Jungle new
- Cyberunk always so good new
- This actually exists new
- Oh shiet new
- Tattoo Artist Turned Their Prosthetic Limb Into A Tattoo Gun new
- Imaginary propaganda for global army [OC] new
Reddit - Security CTF
- HackTheBoxw Writeup for Irked
- HackTheBox - Irked CTF Video Walkthrough
- Irked: Hack The Box Walkthrough
- Help building simple beginner CTF
- Hacker 101 CTF - level 4 - "Photo Gallery" help
- Hacker 101 CTF Level 2 MicroCMS V2
- Ret2 Systems Battle Quest - Seeking help
- Help for solving exercise
- breakingin: Reverse engineering a custom VM architecture and writing a proxy to bypass a firewall
- Broken image
- Teacher: Hack The Box Walkthrough
- HackTheBox: Teacher - write-up by Khaotic
Reddit - Sysadmin
- netApp?
- When replacing a hard disk drive with a new solid state drive in my laptop, what are the best practices for the following?
- Should I do an apprenticeship degree?
- Issue with initialization disk- Windows Server 2016 on IBM x3650 (7945AC1)
- How to enforce temperature unit in Outlook calendar?
- MDM vs. Executives
- Difference Veeam Backup Essentials and Veeam Backup and Replication Community Edition
- Local admin can't install software??
- Skip oobe using factory install
- Daemonized Socat
- Load balance / failover across sites for external services?
- Sodinokibi + Windows Updates
Reddit - Bitcoin
- Nasdaq Launches Decentralized Funding Index for Digital Assets #invest #bitcoin #cryptocurrency new
- SegWit usage over 50%!! new
- Bitcoin Mining Power Hits New High as Half a Million New ASICs Go Online - CoinDesk new
- Rapper Akon says bitcoin is better than US dollar "supported by the military" new
- Random Trading Thoughts 9/15/19 new
- Can BTC save us? new
- Every single game is a step towards adoption. Imagine this team wins the Premier League. new
- Elliptic Curve Question new
- #1 fact about bitcoin new
- Who is Tom Lee and why does the media care what he thinks? new
- Big Bitcoin promo on Instagram by pornstar Mia Khalifa new
- Front page of BBC Sport website new
Reddit - CryptoCurrency
- Credit where credit is due: Facebook's Libra
- Credit where credit is due: Facebook's Libra
- How to know if a cryptocurrency website is legit?
- New Mexican Crypto-Trading site!
- Pompliano: Bitcoin Doesn’t Need Bullets to Take Over As World's Next Reserve Currency
- New Bitcoin Tax Rules To Boost Crypto Market Growth
- Could the Yang Gang take the crypto debate mainstream
- 4 days for international wire transfer; 4 days to send astronauts to the moon
- XRP News Update: July 6th, 2019
- Tierion (TNT) securing the worlds digital documents using bitcoin for just fractions of a penny
- Forged documents and multi-billion dollar fortunes: Craig Wright faces tough questions in court
- Farmers market in Seattle's U District right now
Lobste.rs
- Here's My Type, So Initialize Me Maybe (mem::uninitialized is deprecated)
- Here's My Type, So Initialize Me Maybe (mem::uninitialized is deprecated)
- The Web We Want
- Minify Your SVGs
- Why you shouldn't support Onivim
- What does "x = a + b" mean?
- Generating Correctness Proofs with Neural Networks
- What are you doing this weekend?
- How ProtonMail is Really Secure?
- The Quest for Formally Secure Compartmentalizing Compilation
- Context Binding in Ruby
- The Day You Became A Better Writer (2007)
Hackaday
- Watch Earthquake Roll Across A Continent In Seismograph Visualization Video
- Watch Earthquake Roll Across A Continent In Seismograph Visualization Video
- Forget the Walkman: It’s the Headphones
- Weather Station Can Rock You Like A Hurricane
- Hydraulic Bench Vise a Masterpiece of Scrap Metal and Angle Grinding
- 5G Power Usage Is Making Phones Overheat In Warm Weather
- Making Instant Ramen a Bit More Instant
- Hackaday Links: July 21, 2019
- A Baseball Cap That Films The Past
- An Epic Tale of Thermistors: Tricks for Much Better Temperature Sensing
- External Buffer Boosts 3D Printer Filament Splicing on the Palette 2
- A New Motherboard For Amiga, The Platform That Refuses To Die
Ars Technica
- Gears of War 5 hands-on: A new blockbuster for the game-subscription era
- Eddie Redmayne stars as a pioneering balloonist in The Aeronauts trailer
- Yeah, the forecast for Hurricane Dorian is a mess
- Snake oil or genius? Crown Sterling tells its side of Black Hat controversy
- Physicists now have even better models for blood spatter from gunshot wounds
- Trump admin. announces plan to kill 2016 methane emissions limits
- Stone tools suggest the first Americans came from Japan
- Court: Girl broke child porn law by texting explicit video of herself
- Apple to stop storing Siri audio after contractors heard private talks and sex
- Collector unearths long-lost 8-bit Konami games, dumps them for emulation
- Early hominin skull fills in “a major gap” in the fossil record
- Dealmaster: Various storage and PC accessories are on sale at Amazon today
Wired
- Ex-Donkey Kong Champ Threatens to Sue Over Record Removal new
- The Colonel Sanders Dating Sim Tops This Week's Internet News Roundup new
- New Electrics, New Laws, and Other Car News This Week new
- The Best iPad Drawing Apps for Every Kind of Artist (2019) new
- Physicists Finally Nail the Proton’s Size, and Hope Dies new
- Fitbit Versa 2 Review: Still Not An Apple Watch new
- How Rich Donors Like Epstein (and Others) Undermine Science new
- How Rich Donors Like Epstein (and Others) Undermine Science new
- A Detox Drug Promises Miracles—If It Doesn't Kill You First new
- A Detox Drug Promises Miracles—If It Doesn't Kill You First new
- Space Photos of the Week: Spying on Jupiter
- Old Sci-Fi Movies Probably Aren't as Good as You Remember
Slashdot
- MIT Unveils the World's Most Advance Carbon Nanotube Chip new
- Pine64 Confirms $25 'PineTime' Smartwatch for Linux Smartphones new
- Linux 5.3 Released new
- Online Lenders Publicly Shame Debtors in the Philippines Using Their Facebook Contacts new
- FCC Fails, Robocalls (and Complaints) Increase, Along with Number-Hijacking new
- 'King of Kong' Billy Mitchell Argues He Was Framed for Donkey Kong Cheating, Threatens Legal Action new
- Inspired By Harry Potter, 150 Colleges Now Have Quidditch Teams new
- The Next Energy-Efficient Architecture Revolution: A House Built By Robots new
- Ask Slashdot: Can A Lack of Privacy Be Weaponized? new
- Google's Search Results Begin Prioritizing 'Original Reporting' new
- IOS 13 Lock Screen Lets Anyone See Your Address Book new
- Python 2 Sunsets in 107 Days. JPMorgan Isn't Ready new
DZone Security
- Blockchain – The Competitive Edge for Your Digital Marketplace
- What Is Server Name Indication and How Does it Work?
- Understanding the Difference Between IT Security and Cybersecurity
- 10 Simple Tips to Protect Your Organization From Ransomware
- Factoring Data Security Into a Digital Transformation Strategy
- Restrict Access to Your SQL Server Data Using a Facade Database
- Are You Prepared to Handle Security Breaches for Web Applications?
- Positive Impact of Graph Technology and Neural Networks on Cybersecurity
- What Is Endpoint Security and Why Is it Necessary Today?
- Security Landscape for Containerized Apps
- Spring Boot Tutorial: Build a Spring Boot App and Deploy Into Tomcat
- Blockchain Use Cases: How Blockchain Will Transform the Food Supply Chain
DZone
- PostgreSQL Backup and Recovery Automation
- Couchbase N1QL Query With Self-Referencing Hierarchy
- API Security Weekly: Issue #46
- Beware of Dog [Comic]
- GraphQL Java Example for Beginners [Spring Boot]
- Scikit-Learn and More for Synthetic Dataset Generation for Machine Learning
- Spring Bean Lifecycle: Using Spring Aware Interfaces
- What Is Endpoint Security and Why Is it Necessary Today?
- Variable Fonts vs. Static Fonts and Cross-Browser Compatibility, Part 1
- Survey Reveals Rapid Growth in Kubernetes Usage, Security Still a Concern
- Top 3 Takeaways from the State of DevOps 2019 Report
- 8 Benefits of Unit Testing
Digg Security