Port 22

~ 19 Jun 2019 ~

Evading Sysmon DNS Monitoring

Trinity: PSP Emulator Escape

~ 18 Jun 2019 ~

Instagram tests new ways to recover hacked accounts

Firefox Releases Critical Patch Update to Stop Ongoing Zero-Day Attacks

As Cloud Adoption Grows, DLP Remains Key Challenge

Online lyric service Genius hid a Morse code message in song lyrics to prove Google was copying them to its own search page

New Android 2FA Exploit Discovered, Wave of New Apps Targets Cryptocurrency Users

Advertising Alliance Plans Protocols to Reduce Dangerous Content

Escalating AWS IAM Privileges with an Undocumented CodeStar API

Google Targets Deceptive Sites with New Chrome Tools

Mobile Cyberespionage Campaign Bouncing Golf Affects Middle East

Plurox: Modular backdoor

5 Keys to Improve Your Cybersecurity

Running iOS in QEMU to an interactive bash shell (Part 1)

GandCrab Ransomware Decryption Tool [All Versions] Recover Files for Free

570K HQ Combo (Spotify,Deezer,Crunchy,Netflix,uPlay,Steam,Origin)

How Fraudulent Domains 'Hide in Plain Sight'

~ 17 Jun 2019 ~

Why you should not use free VPNs

When you need more security than typical TLS or SSH protocols...

TCP SACK PANIC - Kernel vulnerabilities

Zero to Hero with AWS GuardDuty, Terraform and Slack

A Blue Team guide to Azure & Office 365 monitoring - 0x00sec

SACK Panic - CVE-2019-11477 - Multiple TCP-based remote denial of service issues

Biggest Malware Threats in Healthcare Revealed - NetSec.News

Consul vulnerability scanner and exploit tool

Deploy a private Burp Collaborator Server in Azure

Data, Surveillance, and the AI Arms Race

Utilities, Nations Need Better Plan Against Critical Infrastructure Attackers

Malware sidesteps Google permissions policy with new 2FA bypass technique

Searchbook: free Firefox extension for executing some Graph-like searches against Facebook

772K [EMAIL:PASS] COMBO [Minecraft, Fortnite,Netflix,Spotify,Hulu,Deezer,Steam,Crunchyroll,uPlay]

~ 16 Jun 2019 ~

0xsp Mongoose Linux Privilege Escalation intelligent Enumeration Toolkit

GitHub - BishopFox/sliver: Implant framework

708k Combo HQ [Email_Pass][Netflix,Deezer,Spotify, Fortnite, Origin,fibit ,Minecraft]

Arc of Erie County New York Reports that 3,751 Patients PHI Was Exposed on Internet in 30-Month Period

Threat Group Cards from ThaiCERT

Windows Incident Response Cheat Sheet

Yubico does product recall of FIPS YubiKey due to reduced entropy

~ 15 Jun 2019 ~

Solving each and every FB-CTF challenge - PART 1

Sliver - Advanced implant and C2 framework

DistroTest.net - The first online operating system tester

Antivirus Evasion with Python

Hack The Box - FluJab Write-up by 0xRick

App Analysis: Nimses (Tracking PewDiePie and collecting user data)

10 Notable Security Acquisitions of 2019 (So Far)

AttackDetection/cve-2019-0708.rules which detect possible exploitation under TLS

600 Million Unique Clear-text Passwords Accompanied By Various Hashes

~ 14 Jun 2019 ~

Friday Squid Blogging: Climate Change Could be Good for Squid

vim Code Execution via the vim plugin Modelines

Upcoming Speaking Engagements

Computers and Video Surveillance

SSH Passphrase Phishing (PoC)

Only 20 days left for the CFP/CFT/CFW for Threat CON 2019 happening in Kathmandu, Nepal on 29-31 August. Submit your paper, tool and workshop proposals soon. Also, the early bird passes along with passes for workshop by Dr. Mario Heiderich are up for grabs.

Week in security with Tony Anscombe

6 tips for choosing the right VPN for personal use

Nginx security tips: TLS/SSL HTTPS Improved security and TTFB

GDPR one year on: Most Europeans know at least some of their rights

Better Cybersecurity Research Requires More Data Sharing

How spending our Saturday hacking earned us 20k

AESDDoS Botnet Malware Infiltrates Containers via Exposed Docker APIs

Video Surveillance by Computer

Sensory Overload: Filtering Out Cybersecurity's Noise

Eclipse attacks on IoT devices

Cybersecurity Supply And Demand Heat Map

~ 13 Jun 2019 ~

News crawler, Clean Text Extraction & ML Training automation