Port 22

~ 15 Feb 2019 ~

Chashell, a Go reverse shell, cross-platform and communicating over DNS.

Pwning yet another insecure IP camera

ICS/SCADA Attackers Up Their Game

Maltas leading bank resumes operations after cyberheist-induced shutdown

Post-Quantum Crypto Standards Aren't All About the Math

Reconstructing SIGSALY

Week in security with Tony Anscombe

Navigating the murky waters of Android banking malware

Facebook CSRF protection bypass which leads to Account Takeover.

Innovative Phishing Campaign Uses Google Translate to Serve Phishing Webpage

WARNING New Phishing Attack That Even Most Vigilant Users Could Fall For

Actual high-level network security roles and skillsets

Hacker Breaches Dozens of Sites, Puts 127 Million New Records Up for Sale

~ 14 Feb 2019 ~

New Ovidiy Stealer Password Stealing Malware Priced to Boost Sales

From 'O.MG' to NSA, What Hardware Implants Mean for Security

Point of No C3 - Linux Kernel Exploitation - Part 0

[fosdem 2019 recording] Handling Security Flaws in an Open Source Project (Jeremy Allison)

Omnipresence on the web: browse through many locations concurrently with Docker, VPN & Squid

Valentine's Emails Laced with Gandcrab Ransomware

NordVPN Dominates VPN Market Share, and That Will Likely Continue | News & Opinion

New Professional Development Institute Aims to Combat Cybersecurity Skills Shortage

Coffee Meets Bagel Confirms Hack on Valentine's Day

Diversity Is Vital to Advance Security

Attack at email provider wipes out almost two decades worth of data

USB Cable with Embedded Wi-Fi Controller

Unauthenticated SSRF in Oracle EBS

Multi stage malicious LNK dropper analysis

How to Create a Dream Team for the New Age of Cybersecurity

When love becomes a nightmare: Online dating scams

Pangea Communications Internet FAX ATA

gpsd Open Source Project

Security Spills: 9 Problems Causing the Most Stress

Pwning WPA/WPA2 Networks With Bettercap and the PMKID Client-Less Attack

DarkSpiritz Pentesting Framework - Updated with Bug Fixes and new features. On a new repository as well.

Bomb Threat Hoaxer Exposed by Hacked Gaming Site

Ex-US Intelligence Agent Charged With Spying and Helping Iranian Hackers

~ 13 Feb 2019 ~

2018 Was Second-Most Active Year for Data Breaches

CVE-2019-0539 Root Cause Analysis

Ex-US Intel Officer Charged with Helping Iran Target Her Former Colleagues

Access to everyone in Puerto Rico's CESCO database through an Insecure Direct Object Reference

Researchers Dig into Microsoft Office Functionality Flaws

Scammers Fall in Love with Valentine's Day

DNS Manipulation in Venezuela in regards to the Humanitarian Aid Campaign

Tool to export an image of an EC2 volume outside of AWS (for forensic work or archiving)

Cyberinsurance and Acts of War

Security.txt: a proposal for publishing channels for vulnerability disclosure

Why you should choose a pseudonym at Starbucks

February Patch Tuesday: Batch Includes 77 Updates That Cover Flaws in Internet Explorer, Exchange Server, and DHCP Server

Snapd Flaw Lets Attackers Gain Root Access On Linux Systems

Patch Tuesday, February 2019 Edition

Hackers Destroyed VFEmail Service Deleted Its Entire Data and Backups

~ 12 Feb 2019 ~

Tracking Google Chrome From its PID

Hacking Laws are Silly, Dont click this link.

There are Two Types of Hackers

IoT security resources

Autocert - use TLS to access internal kubernetes services from anywhere

New Ubuntu Linux privilege escalation exploit and technical write-up (dirty_sock)

Up to 100,000 Reported Affected in Landmark White Data Breach

Docker image security scanning in a few simple steps

Practical Enclave Malware with Intel SGX

PowerShell netsec scripts I wrote for other sysadmins

Omnipresence on the web: browse through many locations concurrently with Docker, VPN & Squid

Xiaomi M365 scooter - Lack of security, enables an attacker to flash malicious firmware or maliciously use the scooter features

Tough day for VFEmail....

Make It Rain with MikroTik