Port 22

~ 21 Aug 2019 ~

Learn how to use and scale osquery to detect evasive or fileless malware, stealthy persistence, unseen attacks etc. (Free Video Training)

Researcher banned from Valve's bug bounty program publishes 2nd Steam Local Privilege Escalation 0-day

New FISMA Report Shows Progress, Gaps in Federal Cybersecurity

MoviePass Leaves Credit Card Numbers, Personal Data Exposed Online

Attack (with) Jupyter!

'Box Shield' Brings New Security Controls

First half 2019 sees 4,000 data breaches exposing 4B records

privilege escalation attacks on Windows.

State-Sponsored Cyberattacks Target Medical Research

Forced Password Reset? Check Your Assumptions

Google Finds 20-Year-Old Microsoft Windows Vulnerability

XSLT Injection Basics with Saxon+- Ektron CMS rce PoC

Education and privacy legislation at ChannelCon

Duolingo Learning Full Unlocked + Mod for android - APKROOK

7 Big Factors Putting Small Businesses At Risk

Google and Mozilla Block Kazakhstans Root CA Certificates to Prevent Spying

Russian Hacking Group Targeting Banks Worldwide With Evolving Tactics

~ 20 Aug 2019 ~

Release out-of-tree v1.0.0 kernel {module, exploit} development tool

CISOs Struggle with Diminishing Tools to Protect Assets from Growing Threats

Automating pentests with WebDriver

Ransomware wave hits 23 towns in Texas

rest-client Gem Hijacked

The Age of Surveillance Capitalism and The Price We Pay

Use This Privacy Tool to View and Clear Your 'Off-Facebook Activity' Data

Dont Be a Menace to ROKKEX: Example of An Impersonation Attack

Surveillance as a Condition for Humanitarian Aid

Cyberthreats Against Financial Services Up 56%

AuthCov: Open source web app authorization crawling & scanning tool (SPA-compatible!)

Getting Start with AppSec: Updated

An unintentional insider threat (UIT) is a current or former employee, contractor, or business

Do Not Pay Ransomware A Lesson for Municipalities

Zebra Industrial Printers

iOS 12.4 jailbreak released after Apple accidentally un-patches an old flaw

The Common Vulnerability Scoring System (CVSS) provides an open framework for communicating the characteristics and impacts of IT vulnerabilities. A newer version presents changes in the scoring system that reflects more accurately the vulnerabilities that fall under the web application domain.

Application, Data And Host Security

5 Ways to Improve the Patching Process

DejaBlue: Analyzing a RDP Heap Overflow

How Activity Logs Help WordPress Admins Better Manage Website Security

Hackers Planted Backdoor in Webmin, Popular Utility for Linux/Unix Servers

~ 19 Aug 2019 ~

Webinar: How We Bypassed All NTLM Relay Mitigations

GAME OVER: Detecting and Stopping an APT41 Operation

Exploiting A/B Testing for Fun and Profit (Part 1)

Router Network Isolation Broken By Covert Data Exfiltration

The Rise of Bulletproof Residential Networks

Uncovering a MyKings Variant With Bootloader Persistence via Managed Detection and Response

Influence Operations Kill Chain

CVSS v3 Creates New Challenges For Developers.

IT threat evolution Q2 2019

IT threat evolution Q2 2019. Statistics

Uploading web.config for Fun and Profit 2

~ 18 Aug 2019 ~

Step by step guide to a full internal network pentest

~ 17 Aug 2019 ~

Hack The Box - Helpline Write-up

Hack The Box - Helpline Write-up by 0xRick

2019 Email Archiving Price Comparison - WebTitan

0day remote code execution for webmin

Core developer of WordPress proposes to remove existing Ed25519 signature checking of auto-updates from core in 5.3 and to only use HTTPS and hash checksum for security instead

~ 16 Aug 2019 ~

Friday Squid Blogging: Robot Squid Propulsion

Offensive Lateral Movement

Bloodhound - Honing a Tradecraft

Picture Yourself Becoming a Hacker Soon (Beginners Guide)

Checking price doesnt always work!

Week in security with Tony Anscombe

Project Zero Turns 5: How Google's Zero-Day Hunt Has Grown

Adware Posing as 85 Photography and Gaming Apps on Google Play Installed Over 8 Million Times

Software Vulnerabilities in the Boeing 787