Port 22

~ 16 Aug 2019 ~

AI: Artificial Ignorance

Confidential company documents exposed in public sandboxes

Behind the Scenes at ICS Village

Vulners NMAP v1.4-beta pre-release: Now it can detect web software vulnerabilities by version detect regexes #sorrynessus

Listing registry keys in HKEY_LOCAL_MACHINE users can create symbolic links in

European Central Bank Shuts Down 'BIRD Portal' After Getting Hacked

Patches for 2 Severe LibreOffice Flaws Bypassed Update to Patch Again

Trend Micro Password Manager Flaws Revealed

Bluetana App Quickly Detects Hidden Bluetooth Card Skimmers at Gas Pumps

~ 15 Aug 2019 ~

Dr.Semu - Malware Detection and Classification Tool Based on Dynamic Behavior

NSA Researchers Talk Development, Release of Ghidra SRE Tool

Adware, Trojans Hit Education Sector Hard

Huge Survey of Firmware Finds No Security Gains in 15 Years

RouterOS Post Exploitation

Microsoft warns of new BlueKeeplike flaws

Fuzzy Tester for HTTP header parser (OpenSource)

Analysis: New Remcos RAT Arrives Via Phishing Email

Bypassing Apple FaceID's Liveness Detection Feature

Johnson Controls Metasys

Art of Anti Detection 4 Self-Defense

Fuji Electric Alpha5 Smart Loader

Siemens SCALANCE Products

Siemens SINAMICS

7 Biggest Cloud Security Blind Spots

5 Things to Know About Cyber Insurance

In Kubernetes, pod security policies are a powerful tool for mitigating security risks and enforcing secure configurations within your Kubernetes environment. This is how to get the most out of Kubernetes pod security policies.

Kaspersky Anti-Virus puts users at risk

Kaspersky Antivirus Flaw Exposed Users to Cross-Site Tracking Online

~ 14 Aug 2019 ~

Key Negotiation Of Bluetooth (KNOB) Attack

Apache Thrift, Jinja, JMESPath: Qrator Filtering Network Configuration Delivery

Threat hunting using DNS firewalls and data enrichment

Financial Phishing Grows in Volume and Sophistication in First Half of 2019

Side-Channel Attack against Electronic Locks

Simple & Interactive SSRF tutorial

Public exploits RSS feed

GitHub - tg12/rapid7_OSINT: All the tools you need to make your own mind up from the Open Data Sets

Stronger Defenses Force Cybercriminals to Rethink Strategy

Cybercriminals have turned hundreds of organizations into victims of ransomware, read more about how it can affect you.

Trend Micro Password Manager - Privilege Escalation to SYSTEM

InQuest Labs Website Release: open access to threat feeds, deep file inspection, and yara/regex tools

Meet Bluetana, the Scourge of Pump Skimmers

The Chinese State Is Allegedly Sponsoring Attacks on Cryptocurrency Firms

Multiple pre-auth RCE vulnerabilities in RDP in every version of Windows including modern Windows

BioStar 2 Leak Exposes 23GB Data, 1M Fingerprints

Attorney General Barr and Encryption

butthax: lovense hush buttplug exploit chain

New Bluetooth Vulnerability Lets Attackers Spy On Encrypted Connections

In the Balkans, businesses are under fire from a doublebarreled weapon

You Gotta Reach 'Em to Teach 'Em

August Patch Tuesday: Update Fixes Wormable Flaws in Remote Desktop Services, VBScript Gets Disabled by Default

Tavis Ormandy: Down the Rabbit-Hole of ancient Windows inter-window communication protocol (or: violating NT security boundaries via MSCTF)

8 New HTTP/2 Implementation Flaws Expose Websites to DoS Attacks

~ 13 Aug 2019 ~

How to prevent Google, Apple and Amazon from listening to your conversations

Patch Tuesday, August 2019 Edition

[GoogleProjectZero] Windows Privilege Escalation affecting all versions since XP by leveraging obscur CTF protocol

Several DoS conditions in certain HTTP/2 implementations

LLMNR Poisoning and WPAD Spoofing

SILENTTRINITY v0.3.0: Now Multi-User & Multi-Server

Does Personality Make You Vulnerable to Cybercrime?

From email to phone number. A new OSINT approach

Showing Vulnerability to a Machine: Automated Prioritization of Software Vulnerabilities

Microsoft Patches Wormable RCE Vulns in Remote Desktop Services

Generating Personalized Wordlists with NLP For Password Guessing Attacks

Barracuda Buys Bot-Battling Tech from InfiSecure

tshark.dev: Capture Lifecycle on the CLI