Clik here to view.
Cisco Talos: Beers with Talos EP 34: Click Here to Assign New Mobile Device...
Beers with Talos (BWT) Podcast Ep. #34 is now available. Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcast.Ep. #34...
View ArticleClik here to view.
ArsTechnica: Security Content: New Spectre attack enables secrets to be...
Enlarge (credit: Pete)When the Spectre and Meltdown attacks were disclosed earlier this year, the initial exploits required an attacker to be able to run code of their choosing on a victim system. This...
View ArticleClik here to view.
Un informático en el lado del mal: El número al que llama está apagado o...
¡Hola hackers! Normalmente no empiezo los artículos con tanta efusividad. Me suele gustar preparar una intro en la narración que os vaya cocinando el ánimo de la lectura cual cenita rica al horno....
View ArticleFortinet FortiGuard Blog: Malvertising, Input Validation, and New IoT Botnet...
What do malvertising, input validation, and new IoT botnet variants have in common? Well, they’re all part of our Weekly Threat Intelligence Brief.
View ArticleClik here to view.
AlienVault Blogs: Things I Hearted this Week, 27th July 2018
Welcome to your weekly security roundup, providing you all with the security news you deserve, but maybe might not need.As always, these news stories are human-curated by me - no fancy algorithms, no...
View ArticleClik here to view.
Cisco Talos: Threat Roundup for July 20-27
Today, as we do every week, Talos is giving you a glimpse into the most prevalent threats we’ve observed this week — covering the dates between July 20 and 27. As with previous roundups, this post...
View ArticleClik here to view.
Dancho Danchev's Blog - Mind Streams of Information Security Knowledge:...
It's been several years since I last posted a quality update at the industry's leading threat-intelligence gathering Webroot's Threat Blog following a successful career as lead security blogger and...
View ArticleDidier Stevens: Update: re-search.py Version 0.0.12
This new version of re-search adds 3 regular expressions to the library: str-e matches quoted strings like str but including the empty string too. str-u matches strings like str, but strips the double...
View ArticleDidier Stevens: Update: numbers-to-string.py Version 0.0.4
This new version of numbers-to-string.py adds new options: –grep, –grepoptions, –begin and –end.With –grep and –grepoptions, you can select the lines to be processed by numbers-to-string.py.And if you...
View ArticleClik here to view.
AlienVault Blogs: Hope for the Best, Plan for the Worst
In an attempt to wake up companies that may not be taking security as seriously as they should, they are often told, "It's not a matter of if, but when."Historically, I've not been the biggest fan of...
View ArticleClik here to view.
Zero in a bit: CA Veracode Dynamic Analysis Helps You Check Your Security...
CA Veracode Dynamic Analysis helps you follow Google I/O 2018 security recommendationsI've been binging on the Google I/O 2018 videos. I guess every web geek does! One video caught my attention: Google...
View ArticleClik here to view.
Zero in a bit: AppSec Mistake No. 1: Using Only One Testing Type
We’ve been in the application security business for more than 10 years, and we’ve learned a lot in that time about what works, and what doesn’t. This is the first in a blog series that takes a look at...
View ArticleClik here to view.
Darknet - The Darkside: Enumall – Subdomain Discovery Using Recon-ng & AltDNS
Enumall is a Python-based tool that helps you do subdomain discovery using only one command by combining the abilities of Recon-ng and AltDNS.This gives you the ability to run multiple domains within...
View ArticleDidier Stevens: Update: python-per-line.py Version 0.0.5
This new version of python-per-line.py adds new options: –grep, –grepoptions, –begingrep, –begingrepoptions, –endgrep and –endgrepoptionsWith –grep and –grepoptions, you can select the lines to be...
View ArticleFortinet FortiGuard Blog: Critical SamSam Ransomware Update
An overview of how to defend your organization from SamSam and other ransomware.
View ArticleClik here to view.
AlienVault Blogs: Malware Analysis using Osquery Part 1
Tools like Sysmon and Osquery are useful in detecting anomalous behavior on endpoints. These tools give us good visibility of what’s happening on endpoints by logging multiple types of events, which we...
View ArticleAlienVault Blogs: Extending Threat Detection to the Endpoint with New EDR...
Back in April, we began to invite USM Anywhere customers to try out our new endpoint agent, the AlienVault Agent, in an Early Access program. The overwhelming interest in the program alone was telling;...
View ArticleClik here to view.
Cisco Talos: Multiple Cobalt Personality Disorder
IntroductionDespite the notion that modern cybersecurity protocols have stopped email-based attacks, email continues to be one of the primary attack vectors for malicious actors — both for widespread...
View ArticleClik here to view.
/dev/random: [SANS ISC] Exploiting the Power of Curl
I published the following diary on isc.sans.org: “Exploiting the Power of Curl“:Didier explained in a recent diary that it is possible to analyze malicious documents with standard Linux tools. I’m...
View ArticleClik here to view.
...And you will know me by the trail of bits: You could have invented that...
A serious bluetooth bug has received quite a bit of attention lately. It’s a great find by Biham and Newman. Given BLE’s popularity in the patch-averse IoT world, the bug has serious implications. And...
View Article