Port 22

~ 15 Dec 2018 ~

Hosting malicious payloads on Youtube

~ 14 Dec 2018 ~

Magellan - SQLite Remote Code Execution Vulnerability

SQLite and Chromium RCE

phpMyAdmin (AllowArbitraryServer) Arbitrary File Read Vulnerability

Email Bomb Threats Follow Sextortion Playbook

Real-Time Attacks Against Two-Factor Authentication

Iranian Hackers Target Nuclear Experts, US Officials

NoNameCon 2019 Call for Talks and Workshops

Cylance Narrows The Cybersecurity Skills Gap With Virtual CISO.

Bypassing Firebase client-side authorization to create custom app.goo.gl subdomains

Cybercriminals Use Malicious Memes that Communicate with Malware

How I got a $3k bug bounty from Twitter

How to protect yourself as the threat of scam apps grows

New Facebook Bug Exposed 6.8 Million Users Photos to Third-Party Apps

2019 Attacker Playbook

Exploiting XXE with local DTD files. Get output from your blind XXE.

Binder transactions in the bowels of the Linux Kernel

Week in security with Tony Anscombe

New Shamoon Malware Variant Targets Italian Oil and Gas Company

Hackers are Modern Witches

BSides Columbus 2019 (01Mar2019) CFP (and general registration) is open

Fake Bomb Threat Emails Demanding Bitcoins Sparked Chaos Across US, Canada

Malaysian government targeted with mash-up espionage toolkit

~ 13 Dec 2018 ~

Friday Squid Blogging: More Problems with the Squid Emoji

Spammed Bomb Threat Hoax Demands Bitcoin

Samsung Bug Allowed Full Takeover of User Accounts

What are Deep Neural Networks Learning About Malware?

Exploit | YARA Internals II: Bytecode

Just Launched - Security Innovation Blockchain CTF V2

Cybercrime Is World's Biggest Criminal Growth Industry

Tildeb: Analyzing the 18-year-old Implant from the Shadow Brokers Leak

Pentesting with InSecure Chrome

Logitech Keyboard opens WebSocket server with no authentication - Google Project Zero

Marriott Hack Reported as Chinese State-Sponsored

Education Gets an 'F' for Cybersecurity

Medtronic 9790, 2090 CareLink, and 29901 Encore Programmers

Schneider Electric GUIcon Eurotherm

Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays

Remotely controlled EV home chargers the threats and vulnerabilities

Geutebrck GmbH E2 Series IP Cameras

GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e

Cybercriminals Change Tactics to Outwit Machine-Learning Defense

Locality Sensitive Fuzzy Hashing (in Golang)

Troubleshooting Obscure OpenSSH Failures

~ 12 Dec 2018 ~

CVE-2018-8626 | Windows DNS Server Heap Overflow Vulnerability

Worst Password Blunders of 2018 Hit Organizations East and West

Scanning for Flaws, Scoring for Security

IDORs (Insecure Direct Object Reference) over Fortify Software Security Center (SSC) 17.10, 17.20 & 18.10 (CVE-20187690, CVE-20187691)

Password strength estimation in nonwestern languages - iacr eprint

FLARE Script Series: Automating Objective-C Code Analysis with Emulation

Owning the Virgin Media Hub 3.0

Bug Hunting Paves Path to Infosec Careers

How we discovered over 50 critical vulnerabilities in Adobe Reader in 50 days.

New Australian Backdoor Law

GitHub - NASA-SW-VnV/ikos: Static analyzer for C/C++ based on the theory of Abstract Interpretation.

From blind XXE to root-level file read access

Cyberbullying is worringly rising in Spain

Mac Malware Cracks WatchGuard's Top 10 List

Microsoft, PayPal, Google Top Phishing's Favorite Targets in Q3

Cryptocurrency Miner Spreads via Old Vulnerabilities on Elasticsearch

Higher Education: 15 Books to Help Cybersecurity Pros Be Better

Zero-day in Windows Kernel Transaction Manager (CVE-2018-8611)

December Patch Tuesday: Year-End Batch Addresses Win32k Elevation of Privilege and Windows DNS Server Vulnerabilities

Adobe's Year-End Update Patches 87 Flaws in Acrobat Software

Microsoft Issues Patch for Windows Zero-Day Flaw Under Active Attack