Port 22

~ 6 Dec 2019 ~

Neat solution for storing fingerprints in biometric scanners for grocery stores

Creating a Rootkit to Learn C

SANS Announces 13th Holiday Hack Challenge and 2nd KringleCon infosec conference

Tricky VPN-busting bug lurks in iOS, Android, Linux distros, macOS, FreeBSD, OpenBSD, say university eggheads

Facebook Sued Chinese Firm for Hacking its Users and Running Fraud Ads

~ 5 Dec 2019 ~

VCs find exciting new way to blow $1m: Wire it directly to hackers after getting spoofed

If there's somethin' stored in a secure enclave, who ya gonna call? Membuster!

Alleged Russian Hacker Behind $100 Million Evil Corp Indicted

Apple Explains Mysterious iPhone 11 Location Requests

Dec 12 Webinar: API Whitelisting / Positive Security Model to prevent OWASP API Top 10 A3, A6 & A8

Trivial SecureWorks Red Cloak Agent Local Bypass

Chepy 1.3.0 released now with basic pcap support, and many more new improvements!

Scammy and spammy harassers are chasing veteran pros off crypto-collab platform Keybase

A graph-based tool for visualizing effective access and resource relationships in AWS environments

CVE-2019-14899: Inferring and hijacking VPN-tunneled TCP connections.

Feds slap $5m bounty on 'Evil Corp' Russian duo accused of running ZeuS, Dridex banking trojans

How 3 vulns in CRI-O + an overzealous OOM killer could lead to a container escape

How to fool infosec wonks into pinning a cyber attack on China, Russia, Iran, whomever

80% of all Android apps encrypt traffic by default

A Practical Consideration of Typosquatting Python Packages

Shockwave & Flash co-creator Sarah Allen on lessons learned & system vulnerabilities

Oil be damned: Iran-based crooks flinging malware at Middle Eastern energy plants again research

Election Machine Insecurity Story

Extracting Information from Electronic Devices with the SEC Xtractor - Open Source Hardware Release

Microsoft Defender ATP Brings EDR Capabilities to macOS

FBI Puts $5 Million Bounty On Russian Hackers Behind Dridex Banking Malware

Face scanning privacy concern or identity protection?

Thales DIS SafeNet Sentinel LDK License Manager Runtime

Weidmueller Industrial Ethernet Switches

NTLMRecon - A fast NTLM reconnaissance tool without external dependencies

Severe Auth Bypass and Priv-Esc Vulnerabilities Disclosed in OpenBSD

Authentication Vulnerabilities in OpenBSD

Atlassian scrambles to fix zero-day security hole accidentally disclosed on Twitter

ZeroCleare: New Iranian Data Wiper Malware Targeting Energy Sector

Lazarus group goes back to the Apple orchard with new macOS trojan

~ 4 Dec 2019 ~

The RCS Texting Protocol Is Way Too Easy to Hack

Generate pentest reports based on Github issues.

Taking your Bug Bounty Program Public

What's in a Botnet? Researchers Spy on Geost Operators

CCNA 200-125: Assessment Test-I

JUST IN: Russian Hackers Infect Ohio's Election Voting System

Ewoks Are the Most Tactically Advanced Fighting Force in Star Wars

FIRST CONTACT: New vulnerabilities in contactless payments

Obfuscation Tools Found in the Capesand Exploit Kit Possibly Used in KurdishCoder Campaign

Becoming a Tech Policy Activist

Microsoft Issues Advisory for Windows Hello for Business

Attackers Continue to Exploit Outlook Home Page Flaw

Attackers Can Circumvent Outlook Homepage Flaw

APT review: what the worlds threat actors got up to in 2019

Hackers Find Ways Around a Years-Old Microsoft Outlook Fix

Breaking the Rules: A Tough Outlook for Home Page Attacks (CVE-2017-11774)

Mozilla locks nosy Avast, AVG extensions out of Firefox store amid row over web privacy

Elcomsoft Extracts Data from Locked iPhones with Unpatchable checkra1n Jailbreak

Critical Flaw in GoAhead Web Server Could Affect Wide Range of IoT Devices

The iPhone 11 Pros Location Data Puzzler

Europol Shuts Down Over 30,500 Piracy Websites in Global Operation

~ 3 Dec 2019 ~

Blockchain Developer Gets Busted After Talk in North Korea

Collection of public security audits grouped by programming language

RSA-240 Factored

Broken Link Hijacking

Notorious spy tool taken down in global operation

Excelerating Analysis Tips and Tricks to Analyze Data with Microsoft Excel

TrickBot Expands in Japan Ahead of the Holidays

When Rogue Insiders Go to the Dark Web

TrueDialog Unsecure Database Exposes SMS Data: Report