Infosec Events: Week 47 In Review – 2016
Events RelatedBSides DC 2016 – Opening– www.youtube.com Alex Norman does what Alex Norman does best. Open the con. Inspirational, motivational and most importantly… short.AppSecUSA 2016–...
View ArticleArsTechnica: Security Content: Symantec buys anti-ID fraud firm LifeLock for...
(credit: Ben Hudson)Symantec, one of the biggest consumer computer security firms in the world, is about to become even bigger with plans to buy LifeLock—an identity-theft protection service.The...
View ArticleSANS Internet Storm Center, InfoCON: green: ZIP With Comment, (Mon, Nov 21st)
I got hold of a malicious document e-mailed inside a password protected ZIP file.This time Im not going to write about the maldoc, but about the ZIP file. The password for the ZIP file was mentioned...
View ArticleDarknet - The Darkside: PyExfil – Python Data Exfiltration Tools
PyExfil started as a Proof of Concept (PoC) and has ended up turning into a Python Data Exfiltration toolkit, which can execute various techniques based around commonly allowed protocols (HTTP, ICMP,...
View ArticleArsTechnica: Security Content: Office Depot caught claiming out-of-box PCs...
Enlarge (credit: Nicholas Eckhart)Office Depot and its sister retailer OfficeMax have stopped using a technically dubious piece of malware-scanning software after two news services caught the stores...
View ArticleSANS Internet Storm Center, InfoCON: green: ISC Stormcast For Tuesday,...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleDidier Stevens: Simple Ciphers: cipher-tool.py
When I left my last position, my friends and colleagues with whom I’ve worked for years gave me a little challenge: a PDF with a hidden ciphertext. At first I had to use Excel to decipher the...
View ArticleUn informático en el lado del mal: Actividades para la última parte de...
Si te pones a mirar el calendario, el año casi ya se nos ha ido. Aún no me aventuro a decir que no vaya a participar en ninguna actividad en Diciembre, que nunca se sabe cómo va a girar el mundo en las...
View ArticleSecutityByDefault: Sec/Admin: El evento de seguridad de Sevilla
Para los que no conozcáis este evento (lo cual es difícil dada la gran difusión que ha ido haciendo la comunidad y algunas empresas sobre el mismo), se trata de un congreso de seguridad que se celebra...
View ArticleArsTechnica: Security Content: Tor phone is antidote to Google “hostility”...
Enlarge (credit: Mission Impossible)The Tor Project recently announced the release of its prototype for a Tor-enabled smartphone—an Android phone beefed up with privacy and security in mind, and...
View ArticleSANS Internet Storm Center, InfoCON: green: Update:ZIP With Comment, (Tue,...
Thanks to your help, we found an application that will display a ZIP comment by default: WinRAR.Didier Stevens Microsoft MVP Consumer Securityblog.DidierStevens.comDidierStevensLabs.comNVISO (c) SANS...
View ArticleSANS Internet Storm Center, InfoCON: green: Site Outage This Afternoon: The...
--- Johannes B. Ullrich, Ph.D.STI|Twitter|LinkedIn (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleArsTechnica: Security Content: Elegant 0-day unicorn underscores “serious...
Enlarge/ A screenshot showing an exploit that takes full control of a fully updated version of Fedora. (credit: Chris Evans)Recently released exploit code makes people running fully patched versions of...
View ArticleSANS Internet Storm Center, InfoCON: green: ISC Stormcast For Wednesday,...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleSANS Internet Storm Center, InfoCON: green: Vmware Patches VMSA-2016-0005.5,...
--Tom Webb (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleSANS Internet Storm Center, InfoCON: green: Mapping Attack Methodology to...
Recently weve seen lots of malicious documents make it through our first protection layers....
View ArticleUn informático en el lado del mal: Conferencia "You Are: Where You Are"...
Hace no demasiado os dejé un artículo en el que hablaba de la importancia de los datos de la localización. El artículo se llamo Tú eres: donde tú estás (o cómo tu ubicación dice quién y cómo eres) y...
View ArticleMcAfee Avert Labs: Taking a Look at W32/Ramnit
Today we’re going to take a look at an interesting file-infector virus. W32/Ramnit infects EXE, DLL and HTML files. That last one is right; W32/Ramnit also infects HTML files to replicate itself.Let’s...
View Articlehoneyblog: 2011 Honeynet Project Security Workshop Slides + Videos
The slides and videos from the 2011 Honeynet Project Security Workshop (Paris) are now available! You can get the material from http://www.honeynet.org/SecurityWorkshops/2011_Paris. About the...
View ArticleLost In Security: Españoles por la BlackHat
Siguiendo con la estela del artículo publicado 'Españoles por la Phrack', vuelvo a la carga con un artículo parecido, pero en este caso sobre una de las conferencias de seguridad que más conoce la...
View Article