SANS Internet Storm Center, InfoCON: green: October 2016 Issue of Securing...
--- Johannes B. Ullrich, Ph.D.STI|Twitter|LinkedIn (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleUn informático en el lado del mal: Hacking de dispositivos IIOT (Industrial...
Durante este mes de septiembre, se han celebrado al 3ª edición de la RootedCON Valencia, y la 6ª edición de Navaja Negra , en las cuales se me invitó a presentar una serie de investigaciones y ataques...
View ArticleSANS Internet Storm Center, InfoCON: green: ISC Stormcast For Thursday,...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleSANS Internet Storm Center, InfoCON: green: Checking my honeypot day, (Thu,...
A number of the handlers, including myself, run a number of honeypots around the planet. Unfortunately I dont get to play with them as much as I want to. There are a bunch of automated processes in...
View ArticleSecutityByDefault: Ya están aquí #8dot8 de Chile y Bolivia!
Una vez más por estas fechas se celebra uno de los eventos en los que mejor me lo paso: Se trata de 8.8, el evento de seguridad más conocido en el sector de la seguridad de Chile. Este año será su...
View ArticleSunbelt Blog: Great improvements for even greater GFI Support
Recently we sat down with Michael Gleason and Dennis van Wagtendonk, GFI Support managers, and had a chat on the many changes that have been underway within GFI Support, focused on increasing the...
View ArticleArsTechnica: Security Content: Researchers find fake data in Olympic...
Fake bear dump. (credit: Stewart Butterfield)A pattern of mischaracterization, misrepresentation, and outright alteration of breached data has emerged in two of the latest headline-grabbing batches of...
View ArticleSANS Internet Storm Center, InfoCON: green: What is happening on 2323/TCP?,...
A number of sources, including DShield, have noticed an uptick on port 2323 TCP beginning around 3 weeks ago.This is the scanner portion of the Mirai botnetscanning for IoT devices on both 23/TCP and...
View ArticleSANS Internet Storm Center, InfoCON: green: ISC Stormcast For Friday, October...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleSANS Internet Storm Center, InfoCON: green: To report any scams/malware...
--- Johannes B. Ullrich, Ph.D.STI|Twitter|LinkedIn (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleUn informático en el lado del mal: Play Framework: Un bug de XSS en el login...
Play es un framework de aplicaciones webs de código abierto escrito es Scala v2 y Java v1 que sigue sigue un patrón de arquitectura Modelo Vista Controlador (MVC). Play Framework es un entorno de alta...
View ArticleKPNC: vulnerability in… WinCalc (Win7, x64)
I will never go out of business in this country. thanks to Microsoft. who would have thought that wincalcis vulnerable? I have not checked all systems yet, so this is my configuration: Windows 7...
View ArticleDidier Stevens: rtfdump Videos
I produced 3 videos to show you how to use my rtfdump.py tool to analyze (malicious) RTF files.Here is a video for sample 07884483f95ae891845caf0d50ce507f:Here is a video for sample...
View ArticleDarknet - The Darkside: Scirius – Suricata Ruleset Management Web Application
Scirius Community Edition is a web interface dedicated to Suricata ruleset management. It handles the rules file and update associated files. A Ruleset is made of components selected in different...
View ArticleSANS Internet Storm Center, InfoCON: green: VMWare Security Advisory -...
-- Rick Wanner MSISE - rwanner at isc dot sans dot edu - http://namedeplume.blogspot.com/ - Twitter:namedeplume (Protected) (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons...
View ArticleSANS Internet Storm Center, InfoCON: green: First Hurricane Matthew related...
Dr. J. put out an appeal earlier today for readers to send in any Scams related to Hurricane Matthew. Literally within minutesMatthias sent us a Hurricane Matthew Phish that hit his inboxtoday. It...
View ArticleArsTechnica: Security Content: US government: Russia behind hacking campaign...
Putin us on. (credit: Presidential Press and Information Office)The Office of the Director of National Intelligence and the Department of Homeland Security today jointly charged that the Russian...
View Articlehoneyblog: 2011 Honeynet Project Security Workshop Slides + Videos
The slides and videos from the 2011 Honeynet Project Security Workshop (Paris) are now available! You can get the material from http://www.honeynet.org/SecurityWorkshops/2011_Paris. About the...
View ArticleLost In Security: Españoles por la BlackHat
Siguiendo con la estela del artículo publicado 'Españoles por la Phrack', vuelvo a la carga con un artículo parecido, pero en este caso sobre una de las conferencias de seguridad que más conoce la...
View ArticleLost In Security: El último superviviente (II) - iOS
En el pasado artículo estuvimos revisando los puntos débiles que tiene un malware a la hora de sobrevivir un reinicio del sistema, y nos centramos en OSX. Ahora toca el turno a iOS, que al ser una...
View Article