Daily Security News
PacketStorm
California Bill Aims To Strengthen Data Breach Notification Law new
Adobe Repatches Its Acrobat, Reader Patches new
Trump Demands Quick Rollout Of "6G" Wireless Tech, Which Doesn't Exist new
Fake Google reCAPTCHA Used To Hide Android Banking Malware new
American Airlines Has Cameras In Some Seat-Back Screens
California Bill Requires Passport Disclosure Notification
North Korean Hackers Allegedly Pick On Russian Targets For A Change
Tampa Mayor's Twitter Hacked, Used To Send Missile Threats
The Register
Entrust Datacard lined up to unburden Thales of nCipher biz as price for Gemalto buyout new
Infosec in spaaace! NCC and Surrey Uni to pore over satellite security
WTF PDF: If at first you don't succeed, you may be Adobe re-patching its Acrobat, Reader patches
Black-hat sextortionists required: Competitive salary and dental plan
Data breach rumours abound as UK Labour Party locks down access to member databases
Welcome to the sunlit uplands of HTTP/2, where a naughty request can send Microsoft's IIS into a spin
Bored bloke takes control of British Army 'psyops' unit's Twitter
Check yo self before you HyperWreck yo self: Cisco fixes gimme-root holes in HyperFlex, plus more security bugs
Reddit - NetSec
Hack The Box - Zipper Write-up by 0xRick new
Drupalgeddon 2019: Code Injection, Langsec new
Exploiting Drupal8's REST RCE (SA-CORE-2019-003, CVE-2019-6340) new
Linux Kernel Through 4.20.10 Found Vulnerable to Arbitrary Code Execution new
Vulnerabilities in Swiss E-Voting Code (Public Intrusion Test)
Drupal core - Highly critical - Remote Code Execution - CVE-2019-6340
Sensitive Information Disclosure in Android Banking App
144 Million MyFitnessPal accounts now out there from the breach one year ago
Threat Wire
Exploits
Packet Storm Exploits
Tautulli 2.1.26 Cross Site Scripting new
Quest NetVault Backup Server Code Execution / SQL Injection new
HanYazilim Paper Submission System .NET 1.0 Shell Upload
Nuuo Central Management SQL Injection
MatrixSSL x.509 Certificate Verification Stack Buffer Overflow
WebKit JSC reifyStaticProperty Attribute Flag Issue
MikroTik RouterOS Firewall / NAT Bypass
ScreenStream 3.0.15 Denial Of Service
Exploit-DB Webapps
[webapps] HotelDruid 2.3 - Cross-Site Scripting
[webapps] Listing Hub CMS 1.0 - 'pages.php id' SQL Injection
[webapps] Zuz Music 2.1 - 'zuzconsole/___contact ' Persistent Cross-Site Scripting
[webapps] eDirectory - SQL Injection
[webapps] XAMPP 5.6.8 - SQL Injection / Persistent Cross-Site Scripting
[webapps] Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 - Path Traversal / Cross-Site Scripting
[webapps] Ask Expert Script 3.0.5 - Cross Site Scripting / SQL Injection
[webapps] Find a Place CMS Directory 1.5 - 'assets/external/data_2.php cate' SQL Injection
Exploit-DB Local and Privilege Escalation
Exploit-DB DoS
[dos] MatrixSSL < 4.0.2 - Stack Buffer Overflow Verifying x.509 Certificates
[dos] FTPShell Server 6.83 - 'Account name to ban' Denial of Service (PoC)
[dos] WinRAR 5.61 - '.lng' Denial of Service
[dos] FaceTime - Texture Processing Memory Corruption
[dos] Android Kernel < 4.8 - ptrace seccomp Filter Bypass
[dos] Valentina Studio 9.0.4 - 'Host' Denial of Service (PoC)
[dos] BulletProof FTP Server 2019.0.0.50 - 'SMTP Server' Denial of Service (PoC)
[dos] NetSetMan 4.7.1 - 'Workgroup' Denial of Service (PoC)
Exploit-DB Shellcode
[shellcode] macOS - Bind (4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (123 bytes)
[shellcode] macOS - Reverse (127.0.0.1:4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (103 bytes)
[shellcode] macOS - execve(/bin/sh) + Null-Free Shellcode (31 bytes)
[shellcode] macOS - Bind (4444/TCP) Shell (/bin/sh) + IPv6 Shellcode (129 bytes)
[shellcode] macOS - Reverse (::1:4444/TCP) Shell (/bin/sh) +IPv6 Shellcode (119 bytes)
Exploit-DB Papers
Hak5
Vulnerabilities
Security Focus Vulnerabilities
Bugtraq: [CVE-2018-12584] Heap overflow vulnerability in reSIProcate through 1.10.2 new
More rss feeds from SecurityFocus new
Bugtraq: [SECURITY] [DSA 4269-1] postgresql-9.6 security update new
Bugtraq: [SECURITY] [DSA 4268-1] openjdk-8 security update new
Bugtraq: [SECURITY] [DSA 4267-1] kamailio security update new
Vuln: Rockwell Automation Allen-Bradley PowerMonitor Multiple Security Vulnerabilities
Vuln: Opencontainers runc CVE-2019-5736 Local Command Execution Vulnerability
Vuln: Microsoft .NET Framework and Visual Studio CVE-2019-0657 Spoofing Vulnerability
Bugtraq
[SRP-2018-02] Details of a vulnerability in STMicroelectronics' chipset
[SAUTH-2019-0001] - Micro Focus Filr Multiple Vulnerabilities
[SECURITY] [DSA 4396-1] ansible security update
[SECURITY] [DSA 4395-1] chromium security update
[SECURITY] [DSA 4394-1] rdesktop security update
[SECURITY] [DSA 4393-1] systemd security update
[SECURITY] [DSA 4388-2] mosquitto regression update
CVE-2018-20162: Digi TransPort LR54 Restricted Shell Escape
Full Disclosure
CVE-2019-8939: XSS in Tautulli new
Kanboard 1.2.7 Multiple Vulnerabilities
Multiple issues in Teracue ENC-400 including pre-authenticated remote code execution
[CVE-2019-8938] Cross Site Scripting in VertrigoServ 2.17
[CVE-2018-18845] Cross Site Scripting in Advanced comment system v1.0
[CVE-2019-8925 to CVE-2019-8929] Path traversal and Cross Site Scripting in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 Administration zone
[CVE-2019-8923, CVE-2019-8924] SQL injection and persistent Cross Site Scripting in XAMPP 5.6.8 (and previous)
CA20190212-01: Security Notice for CA Privileged Access Manager
Tools
CyberPunk nowhere.net
Scalable Fuzzing Infrastructure: ClusterFuzz
Target Reconnaissance Framework: Pown Recon
Post-Exploitation Framework for Linux Written in Bash: Orc
Securely and Anonymously Send and Receive Files: OnionShare
Flexible and Powerful Reverse Proxy: Modlishka
A Framework for Secure and Scalable Network Traffic Analysis: Netcap
Phishing Campaign Toolkit: King Phisher
Framework for Rogue Wi-Fi Access Point Attack: WiFi-Pumpkin
Reversing/I like ASM
Reddit - Reverse Engineering
/r/ReverseEngineering's Weekly Questions Thread
Learning Radare2 by Reverseing a UMPC Bios (Apologizes for Lack of Pictures)
[Level 1] Reverse Engineering .NET Applications For Beginners || Crackmes.de
Need help figuring out how some data is encoded
Reversing a Black Desert Online Dump: Restoring IAT with IDAPython and FLIRT signatures – Niemand
Reverse engineering an obfuscated Unity game
Extracting a 19 Year Old Code Execution from WinRAR
Tomb Raider 5 Decompilation Project - Status Update: PSX HLE Emulation and other funny things
Reddit - Exploit Dev
Is it worth learning exploit development in this day and age?
ROP-ing on Aarch64
Windows Exploit Development 101
Exploiting overflows on MIPS processors is complicated by the separate caches for instructions and data
Exploiting the Magellan bug on 64-bit Chrome Desktop - Exodus Intelligence
Exploit Developer Employment
Anyone know where I can get a safe download of LordPE?
Three Byte Overwrite to Exploit Vulnserver TRUN
Reddit - REGames
Does anyone have news about CDKiLLER & TippeX? The people behind ProtectionID.
good Udemy courses for ASM and editing EXEs?
Tomb Raider 5 Decompilation Project - Status Update: PSX HLE Emulation and other funny things
decrypting assets of an android game
How do Anti Cheat Systems work?
Looking for a more in depth D3D9 hooking guide
'Wrapping' game data in C/C++ for readability - what's your preference?
I need to decrypt an iOS game save
StackExchange - ReverseEngineering
Saving IDA Graph to PDF format? new
Need help understanding basic buffer overflow new
(CTF) Speed up assembly by hooking to an static function new
Altering jump address of ELF executable using gdb new
Reverse engineering checksum from RS-485 device
javascript hook comparisons
Finding lua addresses with ida
Executing CMP DS:[] by inline assembly inline hooks
Metasploit Minute
Malware/APT
Reddit - Malware
I feel disappointed, what to do to continue in malware analysis? new
Question about using theZoo new
Porn Site Malware Attacks on the Rise
How to decrypt H&S strings in radare2?
Extracting a 19 year old code execution from WinRAR
Untrusted PDF and Word Documents
To Prepare for a malware analysis Job interview, what sort of questions to expect?
de4dot string decrypting trick over a double packed .net Malware: obfuscated PNG, resources Deobfuscation, On The Fly compiling
Unit42
Unit 42 Vulnerability Research Team Discovers 23 New Vulnerabilities February 2019 Disclosures – Adobe and Microsoft new
New BabyShark Malware Targets U.S. National Security Think Tanks
Shifting in the Wind: WINDSHIFT Attacks Target Middle Eastern Governments
Threat Brief: Understanding Domain Generation Algorithms (DGA)
menuPass Playbook and IOCs
Tracking OceanLotus’ new Downloader, KerrDown
Mac Malware Steals Cryptocurrency Exchanges’ Cookies
Russian Language Malspam Pushing Redaman Banking Malware
FireEye Threat Research
APT39: An Iranian Cyber Espionage Group Focused on Personal Information
Bypassing Network Restrictions Through RDP Tunneling
Cryptocurrency and Blockchain Networks: Facing New Security Paradigms
A Nasty Trick: From Credential Theft Malware to Business Disruption
Global DNS Hijacking Campaign: DNS Record Manipulation at Scale
Digging Up the Past: Windows Registry Forensics Revisited
OVERRULED: Containing a Potentially Destructive Adversary
What are Deep Neural Networks Learning About Malware?
Crypto
Reddit - Crypto
Periodic FAQ post new
Company offering $20,000 to break their encryption! new
What are some hash types that are used to compare similar images?
Maybe not super relevant, but did you guys read the hilarious example in Wikipedia's MiTM article?
Help factoring a 100 digit number, is this possible for an amateur?
How secure is it to use a passphrase as described in XKCD 936?
CAESAR competition final portfolio selections
Is there any size recommendation for salts used by SCrypt?
StackExchange - Crypto
how to compute IV with AES CTR if key, plaintext and ciphertext are known? new
Efficient polynomial ring multiplication with coefficients in GF(2^s) new
ECC How do the Curve, its number of bits of security and key size affect the maximum size of ciphertext? new
Secure multi-party computation for digital signature new
Analyzing RC4 with a reduced state array [duplicate] new
Discrepancy in padding order between NORX specification and reference code new
Digital Signature Algorithm for large files - bottle-necked by hash function? new
Big-O Encryption Algorithm new
Podcasts
Security Weekly
Apple Sued, Lenovo X, & DNS – Hack Naked News #208
Leadership & Communication – Business Security Weekly #118
Cyber Insurance, Brendan Goodwin – Business Security Weekly #118
Android, Dark Web, & Development – Application Security Weekly #51
Integrating Security into DevOps, Altran – Application Security Weekly #51
DEFCON, Windows 10, & Linux vs Mac – Paul’s Security Weekly #594
Harry Svedlove, Edgewise – Paul’s Security Weekly #594
Enterprise-ish Network Security: Pt. 1 – Paul’s Security Weekly #594
Risky.Biz
Risky Business #531 -- Australia's political parties targeted, the Witt indictment and more
Risky Business #530 -- UAE's Project Raven, Bezosgate and more
Risky Biz Soap Box: Polyswarm builds a marketplace for AV engines
Risky Business #529 -- Special guest Rob Joyce, NSA
Risky Business #528 -- Huawei dinged, epic FaceTime and Exchange bugs
Risky Business #527 -- Featuring Alex Stamos, The Grugq, Susan Hennessey, Brian Krebs, Kelly Shortridge and Bobby Chesney
Risky Business #526 -- Huawei arrest in Poland, DPRK SWIFT hack conviction, more from the El Chapo trial
Risky Business #525 -- Back on deck for 2019!
The CyberWire
Rosneft suspicions shift from espionage to business email compromise — Research Saturday new
Influence operations in Ukraine’s elections. Australian hacks look more like China’s work. Huawei and the 5G future. Objectionable content in comments. DrainerNot. No more soldier-selfies… new
Hybrid war and tactical influence operations. Separ lives off the land. NoRelationship attacks get past email filters. Responsible disclosure. Man-in-the-room bug. Ship hacking. Password managers.
Fancy Bear phishes in think tanks. Lazarus Group takes a swipe at Russian organizations. New decryptor for GandCrab. Citizen Lab and Novalpina discuss NSO Group.…
International cyber conflict: India and Pakistan; Australia and China. Rietspoof malware. Microsoft ejects cyptojackers from its store. NCSC may go easy on Huawei. Parliament criticizes…
Seedworm digs Middle East intelligence — Research Saturday
GandCrab notes. Make tests, not bans, says GSMA. Content moderation. Takedown of inauthentic accounts. Influence operations. Happy birthday, GCHQ.
Former Air Force counterintelligence specialist indicted on charges of spying for Iran. Where’s the stolen Equifax data? Two alleged Apophis Squad clowns indicted.
Threat Intel
Reddit - Pwned
Exposed wp-config.php files - database credentials.
Gnosticplayers is back - another brand new breach...
An Indian journalist pwned right wing twitter bots (including government ministers) into tweeting absolute non sense.
Holly fuck!
Australian Federal Parliament
Here is the leaked databases from Raidfourms
Security firm identifies hacker behind Collection 1 leak, as Collection 2-5 become public
Crypto Hacker Scores $28,600 After Hack Of Bitcoin Exchange
HaveIBeenPwned
MyFitnessPal - 143,606,147 breached accounts
MyHeritage - 91,991,358 breached accounts
EyeEm - 19,611,022 breached accounts
devkitPro - 1,508 breached accounts
Collection #1 (unverified) - 772,904,991 breached accounts
FaceUP - 87,633 breached accounts
Dangdang - 4,848,734 breached accounts
BannerBit - 213,415 breached accounts
Privacy/VPNs
Reddit - Privacy
NY governor orders probe into Facebook access to data from other apps new
Photos being stolen and used on the internet. new
Signal or iMessage for daily use? new
How trustworthy is Keepass2Android, the unofficial android port of Keepass? new
Invidio.us for Youtube new
Alternative to Google Voice for a throwaway number used for texting? new
Should I buy a KaiOS phone new
Reddit - VPN
WireGuard 23% faster than IPSec on iOS new
ISP Router, Geofencing new
VPN-not a gamer new
VPN on Cell Phones new
Tips for getting past Google's CAPTCHA when using a VPN? new
What does an OpenVPN connection with tls-crypt look like to the ISP/DPI filter? new
How to get around university blocking VPNs & other sites?
Routing VPN internet traffic into another VPN
Help Wanted
Reddit - AskNetSec
CBAInProd User Agent new
Net security irc servers/telegram channels/else new
Help with hashcat demo for class.. new
Looking for a collaborative community new
Starting Career Advice new
[Career] Internal vs External new
Attending rsa conference for the first time as a student and require some guidelines new
good twitter accounts to follow computer security new
Reddit - Netsec Students
CTF Video: HackTheBox - Zipper Walkthrough new
Anyone attending rsa conference, interested in meeting up and exploring the conference new
I'll be hosting a live hacking tutorial on Twitch this Tues (2/26) at 8PM EST new
For those wanting to learn how to build a lab this awesome guide's minimum price is free! new
A Salty Login Application - Written in Java new
Raven Walkthrough new
HackTheBox - Giddy new
Tips : Interviewing for Security Engineer
Stack Overflow
Are all Internet-accessible Ubuntu servers doomed?
Is that means vulnerable function If I execute shell code via program
How to disable "Deceptive site ahead" on JS while ping request?
Custom AuthenticationFailureHandler @Bean vs new FailureHandler()
Is it a good idea to configure a cluster that is hosting multiple services with a SAN based certificate?
Manage PII/PHI data on AWS
How to obtain userId specified by Alexa user during account linking
Angular 6- Do my validations pose a security risk? [on hold]
Stack Exchange
How file-level security works? new
Remote access to Windows Workstation with credentials, after Windows 10 - 1809 new
Could always-listening mobile apps secretly spy on conversations? new
How should I store and distribute deployment configurations? new
Is it secure to store my mysql password in a const std::string? new
What is this NAT rule forwarding UDP port 1052? new
Is there any downside to having a VeraCrypt file container that is almost as big as the drive it's on? new
Secure multi-party computation for digital signature new
Locks/Social Engineering
Reddit - Lockpicking
Im extremely new to lockpicking but it seems extremely fascinating to me new
Evil bitting! 😁 I'm going to have fun with taht one I think new
First training lock. new
I found this box in my closet, how do i pick it ? new
Anyone know what keyway/lock this may be? new
Used Locks to Practice on? new
Shimmin it Canadian Style new
What sort of lock for a Blue belt are available In Australia new
Reddit - Social Engineering
How to Discourage Extreme Partisanship new
How to Discourage Extreme Partisanship new
How to Discourage Extreme Partisanship new
Are Algorithms Really Better Than Humans At Judging Someone's Credit Score?
How Master Manipulators Conceal Their Intentions
How to Establish Innocence to Get Away With Things
How many of you just gave up on actively engaging in social situations?
How to encourage people to voluntarily pay for coffee?
Security Blogs
Security Bloggers Network
What is Microsoft® Active Directory®? new
XKCD, Night Shift new
Cloudy with a chance of Caffeinated Query Orchestration – New rJava Wrappers for AWS Athena SDK for Java new
Dealing with TLS Certificates in DevOps new
Our Updated “Applying Deception Technologies and Techniques to Improve Threat Detection and Response” (2019) Publishes new
Shmoocon 2019, Parker Wiksell’s & Jewell Seay’s ‘Patchwerk: Kernel Patching For Fun And Profit’ new
Imperva Makes Major Expansion in Application Security new
Join Gurucul at RSA Conference 2019 in San Francisco new
ThreatPost
Phishing Scam Cloaks Malware With Fake Google reCAPTCHA new
Reddit Gold: Alice and Bob, Caught in a Web of Lies new
Video: HackerOne CEO on the Evolving Bug Bounty Landscape new
Data Breaches of the Week: Tales of PoS Malware, Latrine Status new
Threatpost News Wrap Podcast For Feb. 22 new
Threatpost Poll: Are Password Managers Too Risky?
ThreatList: Porn-Focused Malware Triples, Dark Web Loves It
Adobe Re-Patches Critical Acrobat Reader Flaw
ISC SANS
ISC Stormcast For Friday, February 22nd 2019 https://isc.sans.edu/podcastdetail.html?id=6384, (Fri, Feb 22nd)
Simple Powershell Keyloggers are Back, (Thu, Feb 21st)
ISC Stormcast For Thursday, February 21st 2019 https://isc.sans.edu/podcastdetail.html?id=6382, (Thu, Feb 21st)
ISC Stormcast For Wednesday, February 20th 2019 https://isc.sans.edu/podcastdetail.html?id=6380, (Wed, Feb 20th)
More Russian language malspam pushing Shade (Troldesh) ransomware, (Wed, Feb 20th)
Identifying Files: Failure Happens, (Tue, Feb 19th)
ISC Stormcast For Tuesday, February 19th 2019 https://isc.sans.edu/podcastdetail.html?id=6378, (Tue, Feb 19th)
VMware Security Advisory Released: VMSA-2019-0001 https://www.vmware.com/security/advisories/VMSA-2019-0001.html, (Mon, Feb 18th)
digitalmunition
BoNeSi – The DDoS Botnet Simulator
Australia’s major political parties hacked in ‘sophisticated’ attack ahead of election
Maltego CE – An Interactive Data Mining Tool That Renders Directed Graphs For Link Analysis
FaceTime Texture Processing Memory Corruption
Toyota plans to release the PASTA (Portable Automotive Security Testbed) Car-Hacking Tool on GitHub next month.
Multiple Dasan GPON Routers Command Injection and Authentication Bypass Vulnerabilities
PoC Exploit Code for recent container escape flaw in runc published online
Social Recon – Investigate The Online Presence And Footprint Of Someone
eHacking News
Wired - Security
A Hidden Nest Secure Mic, Facebook's Dead VPN, and More Security News This Week new
The (Non-Trump) Surprise Inside Andrew McCabe's Memoir new
The Russian Sleuth Who Outs Moscow's Elite Hackers and Assassins
A 'Smart Wall' Could Spark a New Kind of Border Crisis
7 Scenarios for How the Mueller Probe Might End
Android Users: Check This Facebook Location Privacy Setting ASAP
ATM Hacking Has Gotten So Easy, the Malware's a Game
Russian Hackers Go From Foothold to Full-On Breach in 19 Minutes
Krebs on Security
New Breed of Fuel Pump Skimmer? Not Really
A Deep Dive on the Recent Widespread DNS Hijacking Attacks
Bomb Threat Hoaxer Exposed by Hacked Gaming Site
Patch Tuesday, February 2019 Edition
Email Provider VFEmail Suffers ‘Catastrophic’ Hack
Phishers Target Anti-Money Laundering Officers at U.S. Credit Unions
More Alleged SIM Swappers Face Justice
Crooks Continue to Exploit GoDaddy Hole
Naked Security
Facebook lets Android users block location tracking
Advertisers flee YouTube after video comments get even more disgusting
Microsoft fixes web server DDoS bug
Flash “security bypass” list hidden in Microsoft Edge browser
Bluetooth “gas station” warning on Facebook – truth or hoax? [VIDEO]
Password managers leaking data in memory, but you should still use one
Hacker Lauri Love denied bid to get computers back
Sorry, we didn’t mean to keep that secret microphone a secret, says Google
Schneier on Security
Friday Squid Blogging: A Tracking Device for Squid new
Gen. Nakasone on US CyberCommand
Reverse Location Search Warrants
Details on Recent DNS Hijacking
Estonia's Volunteer Cyber Militia
I Am Not Associated with Swift Recovery Ltd.
Cataloging IoT Vulnerabilities
Friday Squid Blogging: Sharp-Eared Enope Squid
Linux Security
Dark Reading
Lessons From the War on Malicious Mobile Apps new
New Malware Campaign Targets Job Seekers new
6 Tips for Getting the Most from Your VPN new
New Legislation Builds on California Data Breach Law new
To Mitigate Advanced Threats, Put People Ahead of Tech new
Learn to Plug (or Exploit) New Vulnerabilities at Black Hat Asia
Researchers Propose New Approach to Address Online Password-Guessing Attacks
Attack Campaign Experiments with Rapid Changes in Email Lure Content
Securelist
Whitehat Security Blog
HITB News
Nike’s self-lacing sneakers turn into bricks after faulty firmware update
Malware that hunts for account credentials on adult websites tripled in 2018
K2 claims victory over zero-day attacks
Human Negligence to Blame for the Majority of Insider Threats
Marriott hack spurs tightening of California data-security laws
Commerzbank, Continental and Siemens test blockchain tech on money market
This tool allows you to check the code powering Chrome extensions
The Russian Sleuth Who Outs Moscow's Elite Hackers and Assassins
TAO Security
Forcing the Adversary to Pursue Insider Theft
Fixing Virtualbox RDP Server with DetectionLab
Trying DetectionLab
Happy 16th Birthday TaoSecurity Blog
Notes on Self-Publishing a Book
Managing Burnout
The Origin of the Quote "There Are Two Types of Companies"
The Origin of the Term Indicators of Compromise (IOCs)
The RISKS Digest
Disinformation and fake news: House of Commons DCMS Committee
AAAS: Machine learning 'causing science crisis'
Re: `Zero Trust' AI: Too Much of a Good Thing is Wonderful
Re: A Machine Gets High Marks for Diagnosing Sick Children
Mailing list risks
What is a Smart Microwave?
Seatback cameras on Singapore Airlines
Risks of automatic text generation
Forbes - Security
Graham Cluley
Hacker arrested for wave of fake bomb and shooting threats against schools
Electric scooters can be hijacked remotely – no password required
Smashing Security #115: Love, Nests, and is 2FA destroying the world?
VFEmail suffers ‘catastrophic’ attack, as hacker wipes email service’s primary and backup data
Automatic 4K/HD for YouTube extension pulled from Chrome Store for pop-up ad abuse
Some OkCupid users have their accounts compromised. Why don’t more dating apps use 2FA?
Botched Mumsnet update allowed users to see details of strangers’ accounts
Update your iOS devices now against the FaceTime eavesdropping bug
Rapid7
Metasploit Wrap-up new
Drupal Core Remote Code Execution (CVE-2019-6340): What You Need to Know
APIs + SDKs = The Plugin Dream Team
[IoT Security] Introduction to Embedded Hardware Hacking
Stack-Based Buffer Overflow Attacks: What You Need to Know
Metasploit Wrap-Up
From InsightConnect, With Love: Wishing a Happy Valentine’s Day to Our Most Popular Plugins
Level Up Your Internet Intelligence Using the Rapid7 Open Data API and R
Security in Mainstream Media
Google News Hacking
Fortnite: Police interview Aussie kids who got hacking software from online games - Herald Sun new
Over $3.5 million worth of hacked credit card details are up for grabs on dark web forums (Beware, Meezan Bank Users) - Digital Information World new
2 'members of hacking group' held in Bagura - theindependentbd.com new
Bad hackers can ‘break the internet’ warn web infrastructure keepers - South China Morning Post new
4 Dickinson High students accused of hacking computer system, changing grades - NJ.com new
Body hacking technology improves everyday tasks for biotech pioneers - KSAT 12 new
Breaking: Did Iran release a video of hacked American UAVs in Syria and Iraq? - NEWSREP new
Why Investors Should Be Paying Attention to Blox (CDT) - Hacked new
Google Cyber Security
Be on guard against cyber security threats - TODAYonline new
Banks need to rethink Cybersecurity - The Corner Economic new
Warning issued over spate of attacks on internet's infrastructure - The Times of Israel new
The Big Read in Short: Singapore's weakest link in cyber security - TODAYonline new
CSIOS Wins Triple Awards in 2019 Cybersecurity Excellence Awards® - Benzinga new
The biggest risk to cybersecurity? Legitimate users - The HR Director Magazine new
Cyber Security & Cloud Expo Europe - Biometric Update new
Cybersecurity bill gets amendment - Bangkok Post new
Thirsty for more
YCombinator
Best of Arxiv.org for AI, Machine Learning, and Deep Learning – January 2019 new
The Deadly Truth about a World Built for Men – From Stab Vests to Car Crashes new
Berkshire Hathaway 2018 Annual Shareholder Letter [pdf] new
Toxic ‘Forever Chemicals’ in Drinking Water Leave Military Families Reeling new
We’re Reading Fahrenheit 451 Wrong new
Adelaide Pilot Leaves 'I'm Bored' Message and Graffiti on Flight Radar new
Halley: Lightweight Game Engine Written in C++14 new
New OpenGL Driver for Intel Gen8 GPUs Merged into Mesa new
Digg - Hack
Slashdot - Rights
European Governments Approve Controversial New Copyright Law new
President Trump Wants US To Win 5G Through Real Competition new
Microsoft Workers' Letter Demands Company Drop $479 Million HoloLens Military Contract new
Once Hailed As Unhackable, Blockchains Are Now Getting Hacked new
Apple To Close Retail Stores In the Patent Troll-Favored Eastern District of Texas new
Test Shows Facebook Begins Collecting Data From Several Popular Apps Seconds After Users Start Consuming Them. Company Also Collects Data of Non-Facebook Users. new
A Third of All Chrome Extensions Request Access To User Data on Any Site
Former Facebook Employees Say The Company's Prioritization Of Privacy is About Optics
Reddit - Security CTF
Decoding of String.. new
HackTheBox - Giddy new
HackTheBox - Giddy CTF Video Walkthrough
Giddy: Hack The Box Walkthrough
CTF Group Creation - Looking for tips and advice!
Need help with this cryptography ctf problem.
I just completed the Bandit wargame at Overthewire, here are my takeaways.
Google CTF Beginner's Quest: Help with GDB memory map and meanings of some terms
Reddit - Sysadmin
Where do Wall Street quant firms advertise for their job applicants? new
WIKI: was recommended a wiki, which wiki do you suggest? new
Why would a vhdx be slower than a vhd? new
You can rebuild the fileserver now. new
Cluster new
Moving away from Powershell new
What does your company use for LDAP? new
If your boss asks you if you’re busy, never ever say no. new
Reddit - Bitcoin
Bitcoin Is Entirely Legal in More Than 111 Countries Worldwide new
Can a Bitcoin ETF become a reality? new
I've just started accepting BTC as payment for my wellbeing business. Today is huge! new
I asked the 9 year old Dennis from lightning.pictures to draw me a bitcoin mascot and he didn’t disappoint! Go support this kid and have… new
"Bitcoin trader tortured with drill" in the Netherlands. new
someone please code a btc ticker for android always on screens!!! new
I wish they added new games so that there would be more chances to get a bonus… new
What? Banks get hacked too? €13 million stolen in Cyber attack on Malta's largest bank new
Reddit - CryptoCurrency
Parity Developer Afri Schoeden Leaves Ethereum Development Following Controversial Tweet new
Man With Common Sense Reacts To Lightning Fanboy Dev new
Any one else get a message from this guy? new
What currencies are most decentralized? new
“Bitcoin accepted here” on a Five year old’s neighborhood popshop new
John McAfee Sticks To $1,000,000 Bitcoin (BTC) Prediction, Issues 'Hard Date' - Ethereum World News new
Crypto-currencies gaining popularity in Kenya new
Dash Core CEO marks 5th anniversary with deep look at the industry new
Lobste.rs
A pattern language of firefighting frontline practice to inform the design of ubiquitous computing new
Weighing the environmental costs: buy an eReader, or a shelf of books? new
Pleroma's First Release! 0.9.9 new
Drupalgeddon: Code Injection, Code Reuse, Langsec new
Accio Dependency Manager new
Patent exhaustion and open source new
The SDK “Power Mac G5” for the Xbox 360 new
The New Youngest Fusioneer new
Hackaday
The PC Speaker Lives On As A New Album new
Art Deco Control Panel Looks Out of Metropolis new
Colour-Code Your Way To Timber Satisfaction new
Raspberry Pi Revives Stand-Alone DivX Player new
Foundations For Machine Learning In English (Or Russian) new
A Coin Cell Powers This Tiny ESP32 Dev Board new
Building An Optically Pumped Laser Pointer new
Nerf Mods Via 3D Printing new
Ars Technica
Dragon aces final NASA review, now set for test flight on March 2 new
INF Treaty exit? Putin says he’s ready to escalate to Cuban Missile Crisis levels new
The clearest images of Ultima Thule reveal a strange-looking object new
Frontier demands $4,300 cancellation fee despite horribly slow Internet new
FTC plans to examine loot boxes with public workshop later this year new
Sackler behind OxyContin fraud offered twisted, mind-boggling defense new
Halo Infinite now linked to next Xbox’s launch, rumor suggests RPG elements new
Hayabusa2 touches down on asteroid, shoots it new
Wired
Game Design Is Not for the Faint of Heart new
Ajit Pai Claims His FCC Improved Broadband Access new
Space Photos of the Week: Building Blocks of Water Everywhere new
10 Best Android Phone Deals This Weekend (2019) new
Sunscreen Regulations Haven’t Aged Well new
Gadget Lab Podcast: Samsung’s Foldable Phone Future new
'Desus & Mero' Is the Future of Late-Night TV new
Slashdot
European Governments Approve Controversial New Copyright Law new
President Trump Wants US To Win 5G Through Real Competition new
Japan's Hayabusa 2 Successfully Touches Down On Ryugu Asteroid, Fires Bullet Into Its Surface new
Researchers Make Coldest Quantum Gas of Molecules new
Frontier Demands $4,300 Cancellation Fee Despite Horribly Slow Internet new
NVIDIA Turing-Based GeForce GTX 1660 Ti Launched At $279 new
Microsoft Workers' Letter Demands Company Drop $479 Million HoloLens Military Contract new
Instagram Code Reveals Public 'Collections' Feature To Take On Pinterest new
DZone Security
51% Attack Proves Blockchain Is ‘Unhackable’ The Way The Titanic Was ‘Unsinkable’ new
Control Your Privacy: Start Encrypting Your Emails
Cloud Security Is More Important Than Ever
Evolution of Phishing: Spear Phishing and Whaling Scams Explained
OAuth2 Authentication in Zerocode
A Darker Future Is Here
Dependencies: It’s Not Just Your Code You Need to Secure
Monitoring SQL Server Security: What's Required?
DZone
51% Attack Proves Blockchain Is ‘Unhackable’ The Way The Titanic Was ‘Unsinkable’ new
Switching Between .NET Core SDK Versions new
Text Mining 101: What it Is and How it Works new
Spring Sweets: Group Loggers With Logical Name [Snippet] new
Self-Deploying Node.js Applications new
API Builder: A Simple CI/CD Implementation – Part 1 new
The Secret to Workplace Morale May Very Well Be DevOps
Automated Cross-Browser Testing
Digg Security