Daily Security News
PacketStorm
Fed Sees Crypto Currencies Shifting U.S. Financial System- Microsoft Opens Dynamics 365 Bug Bounty With $20k Top Prize
- Hackers Publish List Of Phished Discord Credentials
- Oakland Follows San Francisco's Lead In Banning Facial Recognition Tech
- Skylight Cyber Bypasses Cylance AI
- No, You Don't Need A Burner Phone At A Hacking Conference
- US Senator Asks FBI To Investigate FaceApp
- Microsoft Warns 10,000 Customers They're Targeted By Nation States
- Slack Resets Passwords For 1% Of Its Users Because Of 2015 Hack
- Unofficial Telegram App Secretly Loads Malicious Sites
- Bluetooth Exploit Can Track And Identify Mobile Device Users
- Elon Musk Reveals Brain Hacking Plans
The Register
- Marketing biz bares folks' data in the act of asking for their GDPR comms preferences new
- Palo Alto gateway security alert, FSB hack, scourge of data-stealing web plugins, and more
- In the cooler for the next three years: Hacker of iCloud accounts used by athletes and rappers
- When Harry met celly: NSA hoarder thrown in the clink for 9 years – after taking classified work home for decades
- All very MoD-ern: RAF test pilot headed into space with Virgin, £30m small sat demo project
- Israel's NSO Group: Our malware? Slurp your cloud backups plus phone data? They've misunderstood
- Your biz won't be hacked by a super-leet exploit. It'll be Bob in sales opening a dodgy email
- Excluding Huawei from UK's 5G will harm security, MPs warn
- 2015 database hack is the terrible gift that keeps giving for Slack: Tens of thousands of passwords now reset
- It's never good when 'Magecart' and 'bulletproof' appear in the same sentence, but here we are
- Bulgaria hack: 20-year-old infosec whizz cuffed after 'adult population's' finance deets nicked
- Those facial recognition trials in the UK? They should be banned, warns Parliamentary committee
Reddit - NetSec
- Fuzzing makes memory-unsafe languages untenable new
- Methods to Bypass Cross Site Request Forgery (CSRF) Protection new
- Axway SecureTransport 5.x Unauthenticated XML Injection / XXE new
- A Dead Simple VPN new
- HackerOne Breaks Down The Top 10 Cybersecurity Vulnerabilities new
- Introduction to physical penetration tests new
- Hacktale: a Blue team training game
- Intro to SQL Injection on OWASP WebGoat 8 Writeup
- Hack The Box - CTF Write-up by 0xRick
- Tunnelling TCP/SSH/TLS: Or, the Wonders of stunnel and How to Get Free Airline Wi-Fi
- Journey over unsecured IoT devices with Kamerka — RTSP and MQTT.
- Full Steam Ahead: Remotely Executing Code in Modern Desktop Application Architectures - INFILTRATE 2019
Bleeping Computer
- IRS Improved Security But Taxpayer Data Is Still At Risk new
- Russian FSB Intel Agency Contractor Hacked, Secret Projects Exposed
- Microsoft Edge Uses Controlled Feature Rollout For Testing New Features
- Microsoft Edge Uses Controlled Feature Rollout to Test New Features
- Windows Defender Gets a New Name: Microsoft Defender
- The Week in Ransomware - July 19th 2019 - Targeted Attacks
- iNSYNQ Cloud Hosting Provider Hit by Ransomware Attack
- New 'US State Police' Extortion Scam Includes Contact Numbers
- Mozilla Firefox Tor Mode to Likely Start as a Browser Addon
- Mozilla Firefox Tor Mode Likely to Start as a Browser Addon
- WizzAir Forces Password Reset on Customer Accounts
- Ransomware Attacks Grow Rampant, Paying Still Not a Good Option
Threat Wire
Exploits
Packet Storm Exploits
- Microsoft Windows Task Scheduler Local Privilege Escalation
- MAPLE Computer WBT SNMP Administrator 2.0.195.15 Buffer Overflow
- fuelCMS 1.4.1 Remote Code Execution
- Web Ofisi E-Ticaret 3 SQL Injection
- Web Ofisi Emlak 3 SQL Injection
- Web Ofisi Emlak 2 SQL Injection
- Web Ofisi Platinum E-Ticaret 5 SQL Injection
- REDCap Cross Site Scripting
- Web Ofisi Firma 13 SQL Injection
- Web Ofisi Rent A Car 3 SQL Injection
- Web Ofisi Firma Rehberi 1 SQL Injection
- Microsoft Windows RPCSS Activation Kernel Security Callback Privilege Escalation
Exploit-DB Webapps
- [webapps] fuelCMS 1.4.1 - Remote Code Execution
- [webapps] Web Ofisi E-Ticaret 3 - 'a' SQL Injection
- [webapps] Web Ofisi Platinum E-Ticaret 5 - 'q' SQL Injection
- [webapps] Web Ofisi Emlak 2 - 'ara' SQL Injection
- [webapps] Web Ofisi Emlak 3 - 'emlak_durumu' SQL Injection
- [webapps] Web Ofisi Firma Rehberi 1 - 'il' SQL Injection
- [webapps] Web Ofisi Rent a Car 3 - 'klima' SQL Injection
- [webapps] Web Ofisi Firma 13 - 'oz' SQL Injection
- [webapps] REDCap < 9.1.2 - Cross-Site Scripting
- [webapps] WordPress Plugin OneSignal 1.17.5 - 'subdomain' Persistent Cross-Site Scripting
- [webapps] Oracle Siebel CRM 19.0 - Persistent Cross-Site Scripting
- [webapps] CentOS Control Web Panel 0.9.8.836 - Authentication Bypass
Exploit-DB Local and Privilege Escalation
- [local] Docker - Container Escape
- [local] Microsoft Windows 10 1903/1809 - RPCSS Activation Kernel Security Callback Privilege Escalation
- [local] Linux - Broken Permission and Object Lifetime Handling for PTRACE_TRACEME
- [local] Windows - NtUserSetWindowFNID Win32k User Callback Privilege Escalation (Metasploit)
- [local] R 3.4.4 (Windows 10 x64) - Buffer Overflow SEH (DEP/ASLR Bypass)
- [local] DameWare Remote Support 12.0.0.509 - 'Host' Buffer Overflow (SEH)
- [local] Microsoft Windows 10 < build 17763 - AppXSvc Hard Link Privilege Escalation (Metasploit)
- [local] Streamripper 2.6 - 'Song Pattern' Buffer Overflow
- [local] Microsoft Windows 10.0.17134.648 - HTTP -> SMB NTLM Reflection Leads to Privilege Elevation
- [local] SNMPc Enterprise Edition 9/10 - Mapping Filename Buffer Overflow
- [local] Serv-U FTP Server - prepareinstallation Privilege Escalation (Metasploit)
- [local] Mac OS X TimeMachine - 'tmdiagnose' Command Injection Privilege Escalation (Metasploit)
Exploit-DB DoS
- [dos] BACnet Stack 0.8.6 - Denial of Service new
- [dos] WinMPG iPod Convert 3.0 - 'Register' Denial of Service
- [dos] Microsoft Compiled HTML Help / Uncompiled .chm File - XML External Entity Injection
- [dos] Android 7 - 9 VideoPlayer - 'ihevcd_parse_pps' Out-of-Bounds Write
- [dos] Microsoft Windows Remote Desktop - 'BlueKeep' Denial of Service (Metasploit)
- [dos] Microsoft Font Subsetting - DLL Heap Corruption in ComputeFormat4CmapData
- [dos] Mozilla Spidermonkey - Unboxed Objects Uninitialized Memory Access
- [dos] Microsoft Windows - Font Subsetting DLL Heap-Based Out-of-Bounds Read in MergeFonts
- [dos] Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling due to Out-of-Bounds cubeStackDepth
- [dos] Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling Due to Negative cubeStackDepth
- [dos] Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling Due to Negative nAxes
- [dos] Microsoft DirectWrite / AFDKO - Stack-Based Buffer Overflow in do_set_weight_vector_cube for Large nAxes
Exploit-DB Shellcode
- [shellcode] Linux/ARM64 - Bind (4444/TCP) Shell (/bin/sh) + IPv6 Shellcode (176 bytes)
- [shellcode] Linux/ARM64 - execve("/bin/sh", NULL, NULL) Shellcode (40 Bytes)
- [shellcode] Linux/ARM64 - Bind (4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (164 bytes)
- [shellcode] Linux/ARM64 - Reverse (127.0.0.1:4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (128 bytes)
- [shellcode] Linux/ARM64 - Reverse (::1:4444/TCP) Shell (/bin/sh) +IPv6 Shellcode (140 bytes)
- [shellcode] Linux/ARM64 - execve("/bin/sh", ["/bin/sh"], NULL) Shellcode (48 Bytes)
- [shellcode] Linux/ARM64 - Read /etc/passwd Shellcode (120 Bytes)
- [shellcode] Linux/ARM64 - Egghunter (PWN!PWN!) + execve("/bin/sh", NULL, NULL) + mprotect() Shellcode (88 Bytes)
- [shellcode] Linux/ARM64 - mmap() + read() stager + execve("/bin/sh", NULL, NULL) Shellcode (60 Bytes)
- [shellcode] Linux/ARM64 - Jump Back Shellcode + execve("/bin/sh", NULL, NULL) Shellcode (8 Bytes)
- [shellcode] Linux/x86 - execve(/bin/sh) using JMP-CALL-POP Shellcode (21 bytes)
- [shellcode] Linux/x86 - Chmod + Execute (/usr/bin/wget http://192.168.1.93//x) + Hide Output Shellcode (129 bytes)
Exploit-DB Papers
- [papers] Buffer Overflows, C Programming, NSA GHIDRA and More
- [papers] Threat Hunting - Hunter or Hunted
- [papers] Sony PlayStation Vita (PS Vita) - Trinity: PSP Emulator Escape
- [papers] [Hebrew] Digital Whisper Security Magazine #101
- [papers] [Hebrew] Digital Whisper Security Magazine #100
- [papers] [Hebrew] Digital Whisper Security Magazine #103
- [papers] [Hebrew] Digital Whisper Security Magazine #102
- [papers] [Hebrew] Digital Whisper Security Magazine #105
- [papers] [Hebrew] Digital Whisper Security Magazine #104
- [papers] [Hebrew] Digital Whisper Security Magazine #106
- [papers] [Hebrew] Digital Whisper Security Magazine #107
- [papers] Analysis of CVE-2019-0708 (BlueKeep)
Exploit-DB Remote
- [remote] Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass) new
- [remote] MAPLE Computer WBT SNMP Administrator 2.0.195.15 - Remote Buffer Overflow (EggHunter)
- [remote] MAPLE Computer WBT SNMP Administrator 2.0.195.15 - Remote Buffer Overflow
- [remote] PHP Laravel Framework 5.5.40 / 5.6.x < 5.6.30 - token Unserialize Remote Command Execution (Metasploit)
- [remote] Xymon 4.3.25 - useradm Command Execution (Metasploit)
- [remote] Apache mod_ssl < 2.8.7 OpenSSL - 'OpenFuckV2.c' Remote Buffer Overflow (2)
- [remote] Microsoft Exchange 2003 - base64-MIME Remote Code Execution
- [remote] Apache Tomcat - CGIServlet enableCmdLineArguments Remote Code Execution (Metasploit)
- [remote] Linux Mint 18.3-19.1 - 'yelp' Command Injection (Metasploit)
- [remote] FaceSentry Access Control System 6.4.8 - Remote SSH Root
- [remote] Nagios XI 5.5.6 - Magpie_debug.php Root Remote Code Execution (Metasploit)
- [remote] SuperDoctor5 - 'NRPE' Remote Code Execution
Hak5
Vulnerabilities
Security Focus Vulnerabilities
- Bugtraq: [SECURITY] [DSA 4267-1] kamailio security update new
- Bugtraq: [CVE-2018-12584] Heap overflow vulnerability in reSIProcate through 1.10.2 new
- More rss feeds from SecurityFocus new
- Bugtraq: [SECURITY] [DSA 4269-1] postgresql-9.6 security update new
- Bugtraq: [SECURITY] [DSA 4268-1] openjdk-8 security update new
- Vuln: Mozilla Firefox Multiple Security Vulnerabilities
- Vuln: Mozilla Firefox and Firefox ESR Multiple Security Vulnerabilities
- Vuln: Squid CVE-2019-13345 Multiple Cross Site Scripting Vulnerabilities
- Vuln: GNOME gvfs CVE-2019-12795 Local Authorization Bypass Vulnerability
- Vuln: CKEditor CVE-2018-9861 Cross Site Scripting Vulnerability
- Vuln: libpng CVE-2019-7317 Use After Free Denial of Service Vulnerability
- Vuln: Apache WSS4J CVE-2015-0226 Information Disclosure Vulnerability
Bugtraq
- Jira Server - Template injection in various resources - CVE-2019-11581 new
- [slackware-security] Slackware 14.2 kernel (SSA:2019-202-01) new
- [SECURITY] [DSA 4486-1] openjdk-11 security update new
- [SECURITY] [DSA 4485-1] openjdk-8 security update new
- [SECURITY] [DSA 4484-1] linux security update new
- CVE-2019-13577 / MAPLE Computer WBT SNMP Administrator v2.0.195.15 / Unauthenticated Remote Buffer Overflow Code Execution 0day
- [SECURITY] [DSA 4483-1] libreoffice security update
- Deutsche Telekom CERT Advisory [DTC-A-20170323-001]
- [**Fixed Typo] Microsoft Compiled HTML Help / Uncompiled .chm File XML External Entity
- Microsoft Compiled HTML Help / Uncompiled .chm File XML External Entity
- [SYSS-2019-024] FANUC Robotics Virtual Robot Controller - Stack-based Buffer Overflow (CWE-121)
- [SYSS-2019-025] FANUC Robotics Virtual Robot Controller - Path Traversal (CWE-22)
Full Disclosure
- Re: local privilege escalation via CDE dtprintinfo
- CVE-2019-2107 a.k.a "Hevcfright" Proof of Concept exploit (Denial of Service PoC)
- CVE-2019-13577 / MAPLE Computer WBT SNMP Administrator v2.0.195.15 / Unauthenticated Remote Buffer Overflow Code Execution 0day
- Re: Microsoft Compiled HTML Help / Uncompiled .chm File XML External Entity
- Reflected Cross-site Scripting Vulnerability in Ponzu CMS 0.9.4
- AST-2019-003: Remote Crash Vulnerability in chan_sip channel driver
- AST-2019-002: Remote crash vulnerability with MESSAGE messages
- Mozilla's MSI installers: FUBAR (that's spelled "fucked-up beyond all repair")
- PowerPanel Business Edition 3.4.0 - Cross Site Request Forgery
- Two vulnerabilities found in Sony BRAVIA Smart TVs
- Cisco Data Center Manager multiple vulns; RCE as root
- Vulnerabilities in TP-Link TL-WR940N and TL-WR941ND
Tools
CyberPunk nowhere.net
- NSA Software Reverse Engineering Framework: Ghidra
- Semi-Automated Network Penetration Testing Framework: Legion
- Graphical User Interface for Metasploit Meterpreter and Session Handler: Kage
- Automated Dynamic Application Penetration Testing: ADAPT
- Scalable Fuzzing Infrastructure: ClusterFuzz
- Target Reconnaissance Framework: Pown Recon
- Post-Exploitation Framework for Linux Written in Bash: Orc
- Securely and Anonymously Send and Receive Files: OnionShare
- Flexible and Powerful Reverse Proxy: Modlishka
- A Framework for Secure and Scalable Network Traffic Analysis: Netcap
- Phishing Campaign Toolkit: King Phisher
Packet Storm Tools
Reversing/I like ASM
Reddit - Reverse Engineering
- It's 2019 and we still can't disable WOW64. new
- Cracking simple XOR cipher with simulated annealing new
- Cafebabe - A new Java bytecode editor regenerating frames without libraries new
- New Mirror for EXE TOOLS
- Using OOAnalyzer to Reverse Engineer Object Oriented Code with Ghidra
- GitHub - everdox/InfinityHook: Hook system calls, context switches, page faults and more.
- disasm.pro: A realtime, multi-arch assembler and disassembler.
- can this be considered reverse engineering?
- /r/ReverseEngineering's Weekly Questions Thread
- CTF
- Analysis of Google Keep WebAssembly module - WebAssembly Security
- Android Malware Analysis : Dissecting Hydra Dropper
Reddit - Exploit Dev
- Write-ups for exploit.education Phoenix
- At what point can you reasonably move to exploit dev on real targets?
- rop chain based SEH exploit
- Modern GLIBC heap exploitation.
- ROP(static lib), able to pop shell but unable to setuid(0) to root, binary is root suid-ed, any ideas?
- Hands-on Exploit Development courses
- Will learning all this stuff help me get at least an infosec related job someday?
- Exploit Dev training in person - Wash DC area
- Classic buffer overflow finally works but ...
- Exploits don't work anymore with new OS
- Stack-based overflow exercise fails
- Would anyone in the field of tailored exploit development in the private sector be able to comment on their work life?
Reddit - REGames
- Looking to RE an old game from 1999 new
- Need some help extracting Klonoa Door to Phantomile game files and putting them back together
- How can I reverse this image?
- Ideal workflow for learning to RE big MMOs
- Question about reverse engineering
- Am I missing something?
- Death rally reimplementation
- Yo check it out
- Super Mario 64 Decompilation Efforts
- Need Help Decrpyting this game file
- Is there any chance of creating a private server for a MMO that doesn't exist anymore?
- [360] Doom 2's "dlc.disk" Findings
StackExchange - ReverseEngineering
- Change instruction test eax, eax to text eax, 1 new
- Bochs x86 16bit and IDA dissasembly new
- How to facilitate reverse engineering the syntax of a bit stream new
- Recreated LZMA differs from the original after 332 bytes new
- Static binary instrumentation
- SqashFS 3.0 file system has 40 "random" bytes of 0xFF in it
- What is an "mpi register base"?
- IDAPython newbie question
- Recover data from .NET Perst database file
- Find the call function of a string
- Malware stuck on InternetReadFile
- How to virtualize part of a code like VMProtect does?
Metasploit Minute
Malware/APT
Reddit - Malware
- Cylance fooled into thinking malware is just fine! (Aka a harmless file)
- Sandbox solutions
- Momo "Challenge"
- EvilGnome: Rare Malware Spying on Linux Desktop Users
- Heightened threat scenario: all the facts in the AV-TEST Security Report 2018/2019
- FBI Releases Master Decryption Keys for GandCrab Ransomware
- SLUB Gets Rid of GitHub, Intensifies Slack Use
- Is ‘REvil’ the New GandCrab Ransomware?
- Sodinokibi decryptor
- Idleness Buddy info and removal
- GitHub - tg12/slow_the_bots: Slow the bot's by spoofing what they are looking for!
- PEpper: an open source script to perform malware static analysis on Portable Executable
Unit42
FireEye Threat Research
- APT39: An Iranian Cyber Espionage Group Focused on Personal Information
- Bypassing Network Restrictions Through RDP Tunneling
- Cryptocurrency and Blockchain Networks: Facing New Security Paradigms
- A Nasty Trick: From Credential Theft Malware to Business Disruption
- Global DNS Hijacking Campaign: DNS Record Manipulation at Scale
- Digging Up the Past: Windows Registry Forensics Revisited
- OVERRULED: Containing a Potentially Destructive Adversary
- What are Deep Neural Networks Learning About Malware?
- FLARE Script Series: Automating Objective-C Code Analysis with Emulation
- Obfuscated Command Line Detection Using Machine Learning
Crypto
Reddit - Crypto
- The Simplest Multi-key Linearly Homomorphic Signature Scheme (iacr eprint) new
- A Dead Simple VPN (drool worthy) new
- On Stablecoins new
- Using the ID Payload as the AES key to Hash ID
- ECDSA: Faking a signature
- You on Cent yet? fav new crypto social media platform!
- Birthday Paradox And Birthday Attack
- We're building the most secure calling app you can get - Free, P2P, E2E encrypted
- A Rust-based TLS library outperformed OpenSSL in almost every category
- Crypto Lending Platforms: How do they work?
- Shapeshifting Morpheus chip aims to baffle hackers
- Justice John Paul Stevens was also a cryptographer for the Navy in WWII
StackExchange - Crypto
- How to encrypt an ASCII word using DES (ECB) new
- Point doubling with only one coordinate new
- walahala: Decentralized Wallet new
- AES - risk of initial key leakage, if one or multiple round keys leak new
- How is the PRIVATE KEY actually created in the first place? new
- Why, in general, are proofs of possession (POPs) "clearly" not sufficient for substantiating the knowledge of secret key (KOSK) assumption? new
- How many required known plaintexts for an attack are considered insecure? new
- How to encrypt a small number of identities (which are related to each other)? / Which algorithm has the smallest bit-length? new
- CVP over $Z_{q}$ - is the problem still hard? new
- Are there any specific weaknesses in this crypto implementation? new
- Are there any signature algorithms with pseudorandom signatures?
- How to sell a piece of data through blockchain?
Podcasts
Security Weekly
- Topic Segment: Security Roundtable – Paul’s Security Weekly #612
- Security News: July 18, 2019 – Paul’s Security Weekly #612
- MITRE ATT&CK: Katie Nickels, MITRE – Paul’s Security Weekly #612
- IT Industry, Jared Haggerty – Enterprise Security Weekly #145
- Identity Authentication, David Harding – Enterprise Security Weekly #145
- Enterprise News: July 17, 2019 – Enterprise Security Weekly #145
- July 16, 2019 – Hack Naked News #227
- Security Money: July 15, 2019 – Business Security Weekly #136
- Eric McAlpine, Momentum Cyber – Business Security Weekly #136
- Application News – Application Security Weekly #69
- Securing Multi-Cloud Environments – Application Security Weekly #69
- Blue/Purple Teaming (defense) – Paul’s Security Weekly #611
Risky.Biz
- Risky Biz Soap Box: Ryan Kalember of Proofpoint on "Very Attacked People"
- Risky Business #548 -- Zoom RCE details and all the week's news
- Risky Business #547 -- Zoom-gate, massive GDPR fines, ship hack warnings and more
- Risky Biz Soap Box: Cylance talks Persona
- Risky Business #546 -- The fifth domain sees some action
- Feature podcast: An interview with Jim Baker, former general counsel, FBI
- Risky Business #545 -- US Government loses control of customs mugshot database
- Risky Business #544 -- NYTimes Baltimore report falls over
- Risky Business #543 -- NYTimes blames NSA for Baltimore hacks, Assange faces espionage charges
- Risky Biz Soap Box: VMRay CEO Carsten Willems talks sandbox tech
- Risky Business #542 -- Confusion reigns over Huawei ban
- Risky Biz Soap Box: Signal Sciences on serverless, app-layer deception and more
The CyberWire
- Special Edition — The Fifth Domain coauthor Richard A. Clarke
- Nansh0u not your normal cryptominer — Research Saturday
- Following K3chang. Bulgaria’s tax agency breach. An alternative currency gets some incipient regulatory scrutiny. Why towns are hit with ransomware. A hair-care hack.
- TrickBot’s new tricks. Poisoning the ad supply chain. Clouds get schooled. Novel phishing tackle, but stale bait. Cyberwar powers. Election interference. FaceApp fears. Bad macro…
- Telco data breach. Firmware supply chain problems. Hacking BLE. Census security. Continuity of operations. Decryptor for GandCrab, NSPM 13. Bulgaria’s tax hack.
- GandCrab hoods may be back with new ransomware. Video-on issues. Broadcom-Symantec talks are off, for now. Treason or just business? Robo-calls. A decryptor for Ims0rry…
- Voting machine woes. Router exploits trouble Brazil, Bitpoint alt-coin exchange investigates theft. Facebook fined $5 billion. Power failures probably unrelated to cyberattacks. Amazon Prime phishing.
- Opportunistic botnets round up vulnerable routers — Research Saturday
- Buhtrap gets into the spying game. US cyber operations against Iran considered: there are both strategic and Constitutional issues. Election security. Water bills. And again…
- Magecart is getting interested in exposed databases. Agent Smith may be in your Android app store. Tracking FinSpy. A contractor gets spearphished.
- Zoom addresses concerns about call joining and cameras. ICS vulnerabilities addressed. Patch Tuesday notes. Tracing a disinformation campaign.
- Security issues with Zoom for Macs. Astaroth fileless malware reported in Brazil. GoBotKR distributed by torrent. ICO hits British Airways with a record fine. State…
Threat Intel
Reddit - Onions
- Transferring coins to deep web new
- Recived a user name a password to this site on a deeb web chat new
- Anonymization in Tor - VEDA - Medium new
- Announcing a New Resource: Envoy Forum. new
- So I just got an invite to this site new
- Whonix 15 has been Released new
- help? new
- The deep part of youtube new
- Request for an onion new
- Any idea how to fix this?
- Somes of my opinions about VPN and traffic analysis
- Denverdank peaceful independent growers shop
Reddit - Pwned
- Troy Hunt: Authentication and the Have I Been Pwned API new
- Any repository with data from insecure S3 buckets, especially log files?
- CafePress data breach impacts 23 million users
- CafePress data breach impacts 23 million users
- Livejournal.com data breach impacts 33 million users with plaintext passwords
- Agent Smith Android malware has infected 25 million devices so far
- Breaking News: A Cesar Sayoc wannabe hacked other website and posted bomb threat against Reddit for quarantining T_D
- Australian Catholic University data breach
- Password breaches with docker and h8mail
- Have I Been S0ld? Troy Hunt’s “Have I Been Pwned” security website is up for acquisition
- U.S. Customs and Border Protection says traveler photos and license plate images stolen in data breach
- Have you ever wondered how much leaked DB's are sold for before someone uploads it for everyone?
HaveIBeenPwned
- Xiaomi (unverified) - 7,088,010 breached accounts new
- Flash Flash Revolution (2019 breach) - 1,858,124 breached accounts new
- Stronghold Kingdoms - 5,187,305 breached accounts new
- GameSalad - 1,506,242 breached accounts new
- Armor Games - 10,604,307 breached accounts
- Roll20 - 3,994,436 breached accounts
- Artvalue - 157,692 breached accounts
- EatStreet - 6,353,564 breached accounts
- Bulgarian National Revenue Agency - 471,167 breached accounts
- YouNow - 18,241,518 breached accounts
- Animoto - 22,437,749 breached accounts
- BlackSpigotMC - 140,029 breached accounts
Privacy/VPNs
Reddit - Privacy
- Malvertising (malicious advertising) new
- Government tries to steal my personal data and block internet new
- 6 Reasons Why Face App Puts Your Privacy at Serious Risk | The Hinglish new
- Some Internet service providers do DNS Hijacking new
- Google Chrome’s Incognito Mode is way less private than you think new
- By reading this document, have I agreed to it, like it says I have? Did I agree to give it access to all my giblets? new
- Fathom releases cookie-less analytics to their already anonymous analytics new
- How are the privacy features of Safari vs Chrome? new
- Answers against the "But this will help to stop criminals / terrorist" argument? new
- An Ethical, Privacy-Centric, Non-Evil Alternative To Google new
- Any private alternatives to Firefox Send which now makes people log in? A friend just killed himself and new
- A WordPress Plugin for privacy protection (photographs on websites) new
Reddit - VPN
- Strongswan vs Wireguard new
- Anyone experience with GoVPN? new
- VPS provider? new
- VPNUnlimited failing to connect via IKEv2 new
- No Internet after disconnecting from VPN new
- Dead Simple VPN new
- Looking for a proxy (Socks5) server that lets me choose a specific city new
- Need help with our VPN/privacy based startup market research. Please submit your responses for the survey link in this post. it will help us a…
- "blocknet2" in Windows Defender Firewall
- DAE have severely limited bandwidth on Mullad for the last couple of days?
- VPN disabled my internet thanks to Killswitch
- ATT WiFi at work
Help Wanted
Reddit - AskNetSec
- DefCon burner phones new
- NetSec noob - need some advice on how to proceed new
- Why would an attacker request 100+ password resets at once? new
- Security Researchers on Twitter new
- Tips for passing the GCIH exam new
- Looking for Volunteers (Toronto/Greater Toronto Area-only) for a CTF in Q4 2020 new
- Found vulnerability in boss's other job's site. new
- Router Possibly compromised new
- Network security new
- Interview for a SOC consultant role new
- How not leak identity on this web application? [long]
- Is an associates in Cyber security worth it?
Reddit - Netsec Students
- Kali Linux Installation guide for beginners new
- Need help with VNC exploit new
- Tips for passing the GCIH exam new
- Introduction to Networking | Network Basics for Beginners - SSH (Client/Server) new
- Pfsense security onion lan doesn't access the internet
- Intro to SQL Injection on OWASP WebGoat 8 Writeup
- What experience do you have with endpoint protection services?
- Here is my personal and custom Windows 32 bit buffer overflow checklist, printable version (.pdf) is in the comments [OC]
- Can Ironport look into web email?
- [video] Training and Culture
- Fave tools for blue team
- OSCP PWK labs (week 2ish in review)
Stackoverflow - Security
- SHA1PRNG SecureRandom behavior is different after seeding on java11 new
- Set GOOGLE_APPLICATION_CREDENTIALS securely new
- How can I enable client certificate ios 12 so that chrome uses it new
- Identity Server 4 asp.net 2.1 - IProfileService or alternative new
- Can this be a strategy to defend csrf? (double submit cookie) new
- What is Digest and Kid properties in SigningCredentials class under .NET Core? new
- How to ask for windows authentication with python new
- Secure configuration in an unsecure environment new
- How to optimize CVE search? new
- Download a file only if you enter the passWord new
- JavaScript to capture IP via WebRTC (issue with async/await) new
- Sending user-name/password instead of security tokens issues
Stack Exchange
- Risk of VPS - Do I share information with other VPS users, like IP? Is it possible to detect that I use a VPS solution?… new
- Prevent malicious usage of custom parameter in tiny url new
- Are hidden directories vulnerable? new
- Is there any open source tool for 3rd parties vulnerability management? [on hold] new
- Stack address is shown less than heap address in C program new
- Is it a security concern that nginx ingress controller in kubernetes exposes well known endpoints? (/healthz) new
- What books would you recommend for Application security? new
- How to protect Google Application Credentials on production server? new
- Can any Windows app install a kernel driver? if not, then how can Anti-Viruses install kernel drivers? new
- Where is the best place to start learning about network and internet security? [on hold] new
- How to find working malware gateways to analyse? new
- Is there a password based challenge response authentication scheme with public key cryptography? new
Locks/Social Engineering
Reddit - Lockpicking
- Mul-t-lock new
- Good morning, I am asking out of curiosity, is there such thing as a Lock that will “autodestroy” or make itself impossible to pick if… new
- Tubular Lock Help new
- I'm being ghosted by TOOOL new
- What is this kind of lock with weird looking key? Found this thing online while looking for easy lock to practice. new
- Still in package. new
- Mobile picking setup in a Pelican 1500. new
- How to get started? new
- Gutted this old Yale today. Do master wafers make locks easier or harder to pick? new
- Opened my first non see through lock! For some reason I feel the urge to buy more locks new
- Help me ID these locks? new
- My First Orange - ABUS 55/40 new
Reddit - Social Engineering
- Introduction to physical penetration tests. Was asked to post here as well, it contains some information on experiences and encounters when trying to legally enter… new
- Someone know her name? new
- What is this kind of tactic called? Is it manipulative? new
- How do I headhunt a Manager, after I step into their store? new
- One of us new
- How to encourage potential actors to become stand-ins/understudies/body doubles instead of playing the main role new
- A specific GDPR law is very vulnerable to social engineering. new
- What do you believe is the easiest way to start the process of freeing one's mind from the negative behavioral programming associated with social engineering…
- Best ways of reconnecting from old email
- Dark Psychology - 5 Steps Of Social Manipulation
- Social Contagion, “Neurolinguistic Programming”, And Psychedelics
- Looking for Audio Books to help with social engineering
Security Blogs
Security Bloggers Network
- Defense in Depth: Securing the New Network Edge new
- Face Off: Privacy Issues Not Confined to FaceApp new
- FaceApp Privacy Panic, Facebook’s 5 Billion Dollar Fine, Amazon Brushing Scams new
- Six System and Software Vulnerabilities to Watch Out for in 2019 new
- Up Your Data Security Game Today new
- Another Look at Global Insider Cybersecurity Threats new
- Top 6 Windows Security Settings To Configure Right Now new
- SANS CTI Summit 2019, Katie Nickels’ & Brian Beyer’s ‘ATT&CK™ Your CTI With Lessons Learned From 4 Years In The Trenches’ new
- Another Look at Insider Threats new
- Robert M. Lee’s & Jeff Hass’ Little Bobby Comics: ‘Zero Day Noobs’ new
- SANS CTI Summit 2019, Matt Bromiley’s ‘BEC Revisited: Dropping By On Our Favorite Prince’ new
- SANS CTI Summit 2019, Mitchell Edwards’ ‘Language And Culture In Threat Intelligence’
ThreatPost
- Iran-Linked APT34 Invites Victims to LinkedIn for Fresh Malware Infections
- Adult Sites Lack Privacy, Open the Door for Harassment and Tracking
- Bug in NVIDIA’s Tegra Chipset Opens Door to Malicious Code Execution
- Security Watch: Elon Musk’s NeuraLink Links Brains to iPhones via Bluetooth
- Mirai Botnet Sees Big 2019 Growth, Shifts Focus to Enterprises
- Slack Initiates Mass Password Reset
- Google Triples Some Bug Bounty Payouts
- Ke3chang APT Linked to Previously Undocumented Backdoor
- Wormable BlueKeep Bug Still Threatens Legions of Windows Systems
- Firmware Bugs Plague Server Supply Chain, 7 Vendors Impacted
- Bluetooth Flaws Could Allow Global Tracking of Apple, Windows 10 Devices
- Massive Malvertising Campaign Reaches 100M Ads, Manipulates Supply Chain
ISC SANS
- ISC Stormcast For Monday, July 22nd 2019 https://isc.sans.edu/podcastdetail.html?id=6586, (Mon, Jul 22nd) new
- Malicious RTF Analysis CVE-2017-11882 by a Reader, (Sun, Jul 21st) new
- Re-evaluating Network Security - It is Increasingly More Complex, (Sat, Jul 20th)
- Malicious PHP Script Back on Stage?, (Thu, Jul 18th)
- ISC Stormcast For Friday, July 19th 2019 https://isc.sans.edu/podcastdetail.html?id=6584, (Fri, Jul 19th)
- The Other Side of Critical Control 1: 802.1x Wired Network Access Controls, (Thu, Jul 18th)
- ISC Stormcast For Thursday, July 18th 2019 https://isc.sans.edu/podcastdetail.html?id=6582, (Thu, Jul 18th)
- Analyzis of DNS TXT Records, (Wed, Jul 17th)
- ISC Stormcast For Wednesday, July 17th 2019 https://isc.sans.edu/podcastdetail.html?id=6580, (Wed, Jul 17th)
- ISC Stormcast For Tuesday, July 16th 2019 https://isc.sans.edu/podcastdetail.html?id=6578, (Tue, Jul 16th)
- Commando VM: The Complete Mandiant Offensive VM, (Tue, Jul 16th)
- isodump.py and Malicious ISO Files, (Mon, Jul 15th)
digitalmunition
- Open banking establishes new access to banks’ networks, creating additional security issues
- The Good Guys Protecting You before the Bad Guys StrikeDATAQUEST
- Mahara up to 17.10.7/18.04.3/18.10.0 Collection Title cross site scripting
- Executing a multi-cloud strategy: Crawl, walk, run
- Ethical Hacking: Meet Cybersecurity’s White-Hat Warriors
- Phoenix Contact FL SWITCH up to 1.34 Web UI Credentials weak encryption
- WinPwn- Automation For Internal Windows Penetration Testing
- Is curiosity killing patient privacy?
- Huduma Namba has not been hacked – Nairobi News
- Phoenix Contact FL SWITCH up to 1.34 Web UI cross site request forgery
- BEC fraud losses almost doubled last year
- Firefox Disabled Add-Ons Fiasco Fixed As Mozilla Released Firefox 66.0.4
eHacking News
Wired - Security
- Adware Is the Malware You Should Actually Be Worried About new
- Browser Extensions Scraped Data From Millions of People
- The App Creeping on Your IG Location, Jakarta’s Insurance Crisis, and More News
- The FaceApp Privacy Panic, a Mysterious Satellite Outage, and More News
- Europe’s Galileo Satellite Outage Serves as a Warning
- Think FaceApp Is Scary? Wait Till You Hear About Facebook
- Why Microsoft’s BlueKeep Bug Hasn’t Wreaked Havoc—Yet
- Hackers Made an App That Kills to Prove a Point
- How To Clear Out Your Zombie Apps and Online Accounts
- Palantir Manual Shows How Law Enforcement Tracks Families
- An Amazon Phishing Scam Hits Just in Time For Prime Day
- On TikTok, Teens Meme Life360, the Safety App Ruining Their Summer
Krebs on Security
- QuickBooks Cloud Hosting Firm iNSYNQ Hit in Ransomware Attack
- Party Like a Russian, Carder’s Edition
- Meet the World’s Biggest ‘Bulletproof’ Hoster
- Is ‘REvil’ the New GandCrab Ransomware?
- FEC: Campaigns Can Use Discounted Cybersecurity Services
- Patch Tuesday Lowdown, July 2019 Edition
- Who’s Behind the GandCrab Ransomware?
- Microsoft to Require Multi-Factor Authentication for Cloud Solution Providers
- Breach at Cloud Solution Provider PCM Inc.
- Tracing the Supply Chain Attack on Android
- Collections Firm Behind LabCorp, Quest Breaches Files for Bankruptcy
- Microsoft Patch Tuesday, June 2019 Edition
Naked Security
- Monday review – the hot 22 stories of the week new
- Firefox to pile on more native privacy features
- Shapeshifting Morpheus chip aims to baffle hackers
- FaceApp privacy panic sets internet alight
- Series 2 launch episode – RDP exposed [PODCAST]
- Hacked Bluetooth hair straighteners are too hot to handle
- Google Chrome is ditching its XSS detection tool
- Still not using HTTPS? Firefox is about to shame you
- RDP exposed: the wolves already at your door
- Microsoft, Google and Apple clouds banned in Germany’s schools
- Facebook rolls out anti-scam reporting tool in UK
- Researchers hide data in music – and human ears can’t detect it
Schneier on Security
- Friday Squid Blogging: Squid Mural
- A Harlequin Romance Novel about Hackers
- John Paul Stevens Was a Cryptographer
- Identity Theft on the Job Market
- Zoom Vulnerability
- Palantir's Surveillance Service for Law Enforcement
- Upcoming Speaking Engagements
- Friday Squid Blogging: When the Octopus and Squid Lost Their Shells
- Clickable Endnotes to Click Here to Kill Everybody
- Presidential Candidate Andrew Yang Has Quantum Encryption Policy
- Resetting Your GE Smart Light Bulb
- Details of the Cloud Hopper Attacks
Linux Security
Dark Reading
- Malware in PyPI Code Shows Supply Chain Risks
- Europol Head Fears 5G Will Give Criminals an Edge
- Mirai Groups Target Business IoT Devices
- The Problem with Proprietary Testing: NSS Labs vs. CrowdStrike
- Crack the Defenses of iOS and other Platforms at Black Hat USA
- Security Lessons From a New Programming Language
- BitPaymer Ransomware Operators Wage Custom, Targeted Attacks
- Open Source Hacking Tool Grows Up
- RDP Bug Takes New Approach to Host Compromise
- 8 Legit Tools and Utilities That Cybercriminals Commonly Misuse
- How Capture the Flag Competitions Strengthen the Cybersecurity Workforce
- Bulgarian Tax Breach Nets All the Records
Darknet
- Nipe – Make Tor Default Gateway For Network
- Mosca – Manual Static Analysis Tool To Find Bugs
- Slurp – Amazon AWS S3 Bucket Enumerator
- US Government Cyber Security Still Inadequate
- BloodHound – Hacking Active Directory Trust Relationships
- SecLists – Usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells
Securelist
Whitehat Security Blog
- Best Practices in Identifying and Remediating Vulnerabilities
- It’s Official: WhiteHat and NTT Security Have Closed the Acquisition Deal
- How Empathy Can Make You a Better Leader
- Celebrating International Women in Engineering Day
- Journey to InfoSec 2019: Top Three Takeaways from This Year’s Conference
- 9 Product Flavors Fit the Security Needs of the Entire Software Lifecycle
- Women’s Day at WhiteHat Security – Top Takeaways from Women in Tech
- Find and Fix JavaScript Vulnerabilities Early in the SDLC
- WhiteHat Security’s Approach to Detecting Cross-Site Request Forgery (CSRF)
- Don’t Mistake Compliance for Security
- How to Take the Next Step as a Woman in Cybersecurity
- Partnership with RSI Eases Burden of Remediation on DevSecOps
HITB News
- iOS 13 & iPadOS bug said to allow unauthenticated access to usernames & passwords
- Hacker steals data of millions of Bulgarians, emails it to local media
- NCSC issues warning over global DNS hijacking campaign
- Symantec and Broadcom cease deal negotiations: Sources
- Office 365 declared illegal in German schools due to privacy risks
- Zoom Vulnerability Lets Hackers Hijack Your Webcam
- Firms That Promised High-Tech Ransomware Solutions Almost Always Just Pay the Hackers
- Seven out of 10 Brits want tougher penalties for breaching privacy rules
- Malicious campaign targets South Korean users with backdoor-laced torrents
- British Airways Faces $230 Million Fine for 2018 Breach
- Why Apple should follow Microsoft's move to get rid of passwords
- Waze Data Can Help Predict Car Crashes and Cut Response Time
Securiteam
The RISKS Digest
- Thoughtcrime --> Thoughtaccidents
- Google audio recordings of users leaked
- "Raspberry Pi 4 won't work with some power cables due to its USB-C design flaw"
- Texas County Purchases DRE Machines Over Expert Security Objections
- Re: Line just went Orwellian on Japanese users with its social credit-scoring system
- Collision on Hong Kong metro
- FDA seeks comment on cybersecurity warnings and security upgrades
- Stripe Outage Smacked Businesses for Two Hours
- "Robot that started fire costs Ocado $137M"
- Anaesthetic devices 'vulnerable to hackers'
- Inside the world of bogus medicine, where smoothies and salads can supposedly kill cancer
- "Vulnerabilities found in GE anesthesia machines"
Forbes - Security
- Artificial Intelligence, Gates, Rockefeller, Sloan, Carnegie & Ford Can Defeat Bad Social Media
- IBM's HR Chief Shares Best Advice On The Future Of Work
- Google's $5 Billion Escape: Why Europe's Antitrust Cop Could Be Tougher On Data
- Alexa, Are You A Spy? Israeli Startup Raises $12.5 Million So Governments Can Hack IoT
- Lenovo Rakes In Most TOP500 Systems And Two Years Ahead Of Schedule
- From Fire Victims To Supply Chains, Trulioo Finds New Uses For KYC
- The Russia Investigation's Intelligence Is 'A Triumph' -- Trump Should Trust It
- Here's What Hackers Do With All Your Stolen Passwords
Kaspersky Blog
- How Kaspersky’s new brand is engineered to bring on the future
- Transatlantic Cable podcast, episode 101
- Smart home hacks
- FinSpy — commercial spyware
- Building trust together with Disclose.io
- Transatlantic Cable podcast, episode 100
- Data leak costs £183 million
- Remote access — for a scammer
- How to update apps on your smartphone
- Sodin ransomware enters through MSPs
- Transatlantic Cable podcast, episode 99
- What is digital steganography?
ErrataSec
Adam Shostack & friends
- Episode 9 Spoilers
- Workshop on Serious Games for Cyber Security
- 3 Arguments for Threat Modeling
- The White Box Essays (Book Review)
- Science of Security, Science for Security
- ‘No need’ to tell the public(?!?)
- Hayabusa!
- Books Worth Your Time (Q1 2019)
- Leave Those Numbers for April 1st
- 20 Years of STRIDE: Looking Back, Looking Forward
- Cybersecurity is not very important
- Threat Modeling in 2019
Graham Cluley
- Slack response. Passwords reset four years after data breach
- Thousands of NHS computers are still running Windows XP from beyond the grave
- Security researcher arrested after data on every adult in Bulgaria hacked from government site
- Smashing Security #137: Porn trolling lawyers, Insta hacking, and Ctrl-Alt-LED
- Apple pushes out another silent update to address flaws in RingCentral and other video conferencing apps
- Unlock the power of threat intelligence with this practical guide. Get your free copy now
- Alan Turing – the face of the new £50 note
- How any Instagram account could be hacked in less than 10 minutes
- Apple pushes out silent update to remove sketchy Zoom code from Macs
- Apple says its Walkie-Talkie app could be exploited to spy on iPhones
- Smashing Security #136: Oops, we created Iran’s hacking exploit
- Marriott faces £99.2 million fine after hack exposed 393 million hotel guest records
Rapid7
- Metasploit Wrap-Up
- Why Having the Right Team Is Vital to Advancing Security
- End of Sale Announced for Metasploit Community
- Your Guide to Securing Multi-Cloud Environments in an IaaS World
- Metasploit Open Source Office Hours: Vegas 2019
- Metasploit Wrap-Up
- So, You Think You Can Query?
- Zoom Video Snooping Security Flaw (CVE-2019-13450): What You Need to Know
- Patch Tuesday - July 2019
- Securing Your Cloud Environments with InsightIDR, Part 2: Amazon Web Services (AWS)
- New Container Security Assessment Features Added to InsightVM
- Metasploit Wrap-Up
Security in Mainstream Media
Google News Hacking
- Virtual Meetings Are Great... Until They Are Hacked - ISBuzz News new
- YouTube’s Policy on Hacking Videos Makes Everyone Less Safe - The Wire new
- Metropolitan Police apologises for Friday night hacking incident - www.computing.co.uk new
- Warning As Iranian State Hackers Target LinkedIn Users With Dangerous New Malware - Forbes new
- Hackers Attacked the Asian Art Museum of San Francisco. Are Other Cultural Institutions Next? - artnet News new
- Microsoft says 10,000 users targeted by hackers - AMEinfo new
- The unnerving tale of having my Social Security hacked - The Washington Post new
- The unnerving tale of having my Social Security hacked - The Washington Post new
- Hackers broke into a contractor for Russia's spy agency - Engadget new
- Owatonna producing building glass to prevent corporate spying, hacking - Minneapolis Star Tribune new
- Owatonna producing building glass to prevent corporate spying, hacking - Star Tribune new
- An entire nation just got hacked - CNN new
Google Cyber Security
- International Criminal Law and Australia's Cyber Strategy: A Progress Report - Lexology new
- Tech Nation's cyber security cohort: Fortium Technologies - Information Age new
- 'Tackling the cyber-security threat' - How out-of-band management keeps networks up and running - SC Magazine UK new
- How to build a comprehensive cyber security strategy - IT PRO new
- Crypto-attacks are rising in Asia – and cybersecurity AI may be the best way to fight the threat: Darktrace - Business Insider new
- Lecturer in Cyber Security job with EDINBURGH NAPIER UNIVERSITY | 172911 - Times Higher Education (THE) new
- Cyber security: LandMark White implements ACSC's 'Essential Eight' - Computerworld Australia new
- Fix rogue audits; guard Indian data; bulletproof 5G: India's new cybersecurity chief's Vision 2020 - Economic Times new
- Girl Scouts of the USA unveil new cybersecurity, coding badges - KFYR-TV new
- The Army and cyber-security - Irish Times new
- Columbia cybersecurity team to compete on national stage - WIS10 new
- Kristian Boykov Is Released After Charges Downgraded In Bulgarian Hack - NPR new
Thirsty for more
YCombinator
- A Ferocious Heat in Delhi new
- Azolla Event new
- In the Defense of Spaghetti Code new
- Quiet Hacker News new
- He Built a $1B Business Where All 700 Employees Work Remotely new
- Fuzzing makes memory-unsafe languages untenable new
- Canadian cities take wooden skyscrapers to new heights new
- Do-Nothing Scripts new
- Brains scale better than CPUs. So Intel is building brains new
- It’s time to move on from OOP? new
- Shortcuts JS – Create Apple Shortcuts Using JavaScript new
- Race Condition vs. Data Race (2011) new
Digg - Hack
Slashdot - Rights
- Microsoft Warns of Political Cyberattacks, Announces Free Vote-Verification Software
- Is Russia Trying to Deanonymize Tor Traffic?
- New Map Shows Where America's Police, Businesses Are Using Facial Recognition and Other Surveillance Tech
- China's Tech Giants Have a Second Job: Helping Beijing Spy on Its People
- Google and Facebook Might Be Tracking Your Porn History, Researchers Warn
- Chuck Schumer Asks FBI To Investigate FaceApp
- EFF Hits AT&T With Class-Action Lawsuit For Selling Customers' Location To Bounty Hunters
- Data Broker LocationSmart Will Fight Class Action Lawsuit Over Selling AT&T Data
- Ex-Microsoft Worker Charged in Alleged Scheme To Steal $10M in Gift Cards and Use Funds To Finance Extravagant Purchases
- Bulgaria's Hacked Database Leaks To Hacking Forums
- To Foil Hackers, 'Morpheus' Chip Can Change Its Code In the Blink of An Eye
- Oakland Becomes Third US City To Ban Facial Recognition
Reddit - Cyberpunk
- I know is just a meme but can you feel an authentic "blade runner" atmosphere? new
- Mask, art by me, acrylic painting on 10cm x 10cm canvas. 2019 new
- What the Experts Aren’t Saying About Heterotroph Definition Biology and How It impacts You new
- One of the most cyberpunk places I've ever seen (Chongqing, China) with cool ambient music new
- The fall of the Authoritarian. credit r/phy361sm new
- Night in Las Vegas (sorry for the bad quality, but I just had to share the vibe) new
- All seeing eye new
- T8000 new
- The Electric State by Simon Stalenhag – Animated new
- [x-post r/Montreal] After the fireworks new
- Predator X by Abrar Khan new
- Since a Cyberpunk future is now our present and themore extreme portrayals, our inevitable future, what are you going to do to prepare and how… new
Reddit - Security CTF
- HackTheBoxw Writeup for Irked
- HackTheBox - Irked CTF Video Walkthrough
- Irked: Hack The Box Walkthrough
- Help building simple beginner CTF
- Hacker 101 CTF - level 4 - "Photo Gallery" help
- Hacker 101 CTF Level 2 MicroCMS V2
- Ret2 Systems Battle Quest - Seeking help
- Help for solving exercise
- breakingin: Reverse engineering a custom VM architecture and writing a proxy to bypass a firewall
- Broken image
- Teacher: Hack The Box Walkthrough
- HackTheBox: Teacher - write-up by Khaotic
Reddit - Sysadmin
- Password policy new
- GPO: Set a delay between gpos new
- Is this type of (Dell) disk compatible for in any generic (ie. Non-Dell) system? new
- GPO printer deployment: Certain printers only appear after gpupdate with /force new
- Second DC new
- Looking for a domain registrar that allows granular billing / access. new
- Server 2016 Windows Update new
- Security Toolkit new
- External users need to connect quick and safe to HA RDS Farm. new
- office 365 proplus shortcuts going missing randomly new
- What type of WiFi access points would allow 1000 audience members at a live concert to connect simultaneously? new
- Outlook request new
Reddit - Bitcoin
- Bakkt begins user testing bitcoin futures new
- BAKKT opens today! new
- What Is Smart Contract In Blockchain?🤔#officialhacker new
- 9 Reasons for Using Bitcoin instead of Cash new
- Latest Grayscale Report Shows Institutional Bitcoin Investment On The Rise - 17 July 2019 new
- Question About Bitcoin new
- Mind blowing... new
- Gold Production is Increasing, Bitcoin's Declining; Who Wins the Market? new
- Daily Discussion, July 22, 2019 new
- https://www.asiacryptotoday.com/iran-announces-gold-backed-national-cryptocurrency new
- Create an investment plan and stick to it new
- No official ban on cryptocurrency yet, Indian Minister clarifies - TokenPost new
Reddit - CryptoCurrency
- Credit where credit is due: Facebook's Libra
- Credit where credit is due: Facebook's Libra
- How to know if a cryptocurrency website is legit?
- New Mexican Crypto-Trading site!
- Pompliano: Bitcoin Doesn’t Need Bullets to Take Over As World's Next Reserve Currency
- New Bitcoin Tax Rules To Boost Crypto Market Growth
- Could the Yang Gang take the crypto debate mainstream
- 4 days for international wire transfer; 4 days to send astronauts to the moon
- XRP News Update: July 6th, 2019
- Tierion (TNT) securing the worlds digital documents using bitcoin for just fractions of a penny
- Forged documents and multi-billion dollar fortunes: Craig Wright faces tough questions in court
- Farmers market in Seattle's U District right now
Lobste.rs
- Release 0.2.0 | Numerical Linear Algebra for Programmers: An Interactive Tutorial with GPU etc new
- Bastion: Fault-tolerant Runtime for Rust applications new
- Fast Food Software Engineering Progression new
- Refactoring Legacy Code new
- The case statement and ranges new
- What Spectre Means for Lanugage Implementers - Ben Titzer - PLISS 2019 new
- mtm (The Micro Terminal Multiplexer) 1.0 released new
- Argon Family of Computers new
- PoW vs PoS - Environment and Security new
- PEG Parsers new
- VHDL to PCB new
- Thomas Ball - The Correct Cloud - Logic and Languages new
Hackaday
- Hydraulic Bench Vise a Masterpiece of Scrap Metal and Angle Grinding new
- 5G Power Usage Is Making Phones Overheat In Warm Weather new
- Making Instant Ramen a Bit More Instant new
- Hackaday Links: July 21, 2019 new
- A Baseball Cap That Films The Past new
- An Epic Tale of Thermistors: Tricks for Much Better Temperature Sensing new
- External Buffer Boosts 3D Printer Filament Splicing on the Palette 2 new
- A New Motherboard For Amiga, The Platform That Refuses To Die new
- DIY Industrial Oven Brings the Heat
- Building A Bigger Cloud Chamber
- Project Perceives Pondering, Prints Poetry
- Breathing LED Done with Raw Logic Synthesized from a Verilog Design
Ars Technica
- You can’t copyright a cocktail, so what’s a creative bartender to do? new
- The Greatest Leap, part 6: After Apollo, NASA still searching for an encore new
- Amazon warns customers: Those supplements might be fake new
- Can Disney’s Circle really deliver a porn-free Internet? new
- Can Disney’s Circle really deliver a porn-free Internet? new
- Watch this paper doll do sit-ups thanks to new kind of “artificial muscle” new
- Watch this paper doll do sit-ups thanks to new kind of “artificial muscle” new
- Game of Thrones goes on a Victory Lap—and an Apology Tour new
- Game of Thrones Goes on a Victory Lap—and an Apology Tour new
- Once again, engage: Picard trailer feels like the next Next Generation
- The Greatest Leap, part 5: Saving the crew of Apollo 13
- Operation Avalanche, the only good conspiracy—fake the Moon landing, get promoted
Wired
- An Alien-Hunting Russian Tech Mogul May Help Solve a Space Mystery new
- A Meditation on Moon Shots, a Mid-Engine Corvette, and More Car News This Week new
- The Story Universe of Magic: The Gathering Is Expanding new
- Are Super Automatic Espresso Machines Worth Buying? new
- Adware Is the Malware You Should Actually Be Worried About new
- 'Snowpiercer' Trains an Eye on TV—and Its Genre DNA Runs Deep new
- Phase 4 of the Marvel Cinematic Universe Isn't Cinematic
- *Star Trek: Picard* Shows Where the Franchise Is Boldly Going
- ‘Snowpiercer,’ ‘Picard,’ and More Awesome Trailers Hit Comic-Con
- Comic-Con's Batman VR Experience Soars—While Others Fall Flat
- Are Humans the Meanest Species in the Universe?
- Browser Extensions Scraped Data From Millions of People