Port 22

~ 29 Nov 2019 ~

IT threat evolution Q3 2019

disasm.pro: An online real-time assembler and disassembler supporting multiple architectures

Europol Shuts Down 'Imminent Monitor' RAT Operations With 13 Arrests

~ 28 Nov 2019 ~

Jackdaw - collect all information in your domain, store it in a SQL database

Release 0.8 of MOSP is out with generation of MISP galaxies and clusters

Exploiting CVE-2018-8611: Windows Kernel Transaction Manager (KTM) Race Condition

How is NordVPN unblocking Disney+? It might be through YOUR own computer. Even if youve never used Disney+ or NordVPN.

SSD Advisory - Synology DSM Remote Command Injection

Hacking Doom for fun, health and ammo

Public SSH keys can leak your private infrastructure

Google caught a Russian state hacker crew uploading badness to the Play Store

5 scams to watch out for this shopping season

RevengeHotels: cybercrime targeting hotel front desks worldwide

Cloudy biz Datrix locks down phishing attack in 15 mins after fat thumb triggers email badness

18 tech predictions for 5G in 2020

NIST Zero Trust Architecture Draft

Troubleshooting with Wireshark: The Case of the TCP Challenge ACK

This week, we give thanks to Fortinet for reminding us what awful crypto with hardcoded keys looks like

~ 27 Nov 2019 ~

DHS Mandates Federal Agencies to Run Vulnerability Disclosure Policy

Magento Marketplace Suffers Data Breach Exposing Users' Account Info

Cryptocurrency exchange loses US$50 million in apparent hack

Cryptocurrency exchange loses US$50 million in apparent hack

TrackingTheTrackers.com - A free online analysis tool to check if a website is disguising third-party trackers as first-party trackers

Analysis of Jira Bug Stresses Impact of SSRF in Public Cloud

'Ethical' hackers say: It's just hacker. To be one is no longer a bad thing

Think Twice Before Giving Gifts With a Microphone or Camera

Google Details Its Responses to Cyber Attacks, Disinformation

It's 2019 and Splunk has a Y2K-esq bug that will detonate on Jan 1, 2020 leading to data loss

Hydrabus Framework - Hardware - 0x00sec

A Glimpse Into Tencent's Legu Packer

We have now run out of IPv4 addresses

Over 12,000 Google Users Hit by Government Hackers in 3rd Quarter of 2019

Its Way Too Easy to Get a .gov Domain Name

The Hacker News 2020 Cybersecurity Salary Survey Call for Participation

~ 26 Nov 2019 ~

Trump's Ukraine Delusion, Tesla's Ford Showdown, and More News

Latest Kali Linux OS Added Windows-Style Undercover Theme for Hackers

Trump's Ukraine Server Delusion Is Spreading

Google Firebase Database Misconfiguration

Kali Linux 2019.4 Release

The Implications of Last Week's Exposure of 1.2B Records

New Hot Spot 2.0 Wifi Evil Twin Attack

New dirsearch release: directory brute forcer

Sale of 4 Million Stolen Cards Tied to Breaches at 4 Restaurant Chains

Forget Homomorphic Encryption, here comes Functional Encryption

NYPD Pulls Fingerprint Database Offline Due to Ransomware Scare

Tenable Nessus tips and tricks Astrix

Stantinko botnet adds cryptomining to its pool of criminal activities

Stantinko botnet adds cryptomining to its pool of criminal activities

ABB Relion 670 Series

Spam and phishing in Q3 2019

ABB Relion 650 and 670 Series

5 Ways to Champion and Increase Your 2020 Security Budget

Exploiting padding oracles with fixed IVs

Malicious Android SDKs Caught Accessing Facebook and Twitter Users Data

Stop us if you've heard this one: Facebook and Twitter profiles silently slurped by shady code

Getting started with Version 2 of AWS EC2 Instance Metadata service (IMDSv2)

~ 25 Nov 2019 ~

Just released Chepy, Cyberchef in python with a CLI and library. WIP

FIDL: FLAREs IDA Decompiler Library

Hacking an Android TV in 2 minutes

Hidden Cam Above Bluetooth Pump Skimmer

Juice Jacking (malicious charging kiosks) is getting a lot of coverage lately focusing on fear and misrepresentations of risks. I wrote this article to help set the record straight, and to show security reporting can be based on facts not fears.

Attacking FreeIPA Part I Authentication

Tushu, Take Twoshu: Malicious SDK Reappears in Google Play

UN Secretary-General: US-China Tech Split Worse Than Cold War

AIEngine AI-driven Network Intrusion Detection System