Cyber criminals promise millions to skilled professionals
Cyber criminals are willing to pay more than a million dollars a year to skilled information security professionals who are willing to...
News
New Malspam Campaign Targets WinRAR ACE Flaw to Deliver Malware
Security researchers have discovered a new Malspam campaign exploiting the recently discovered WinRAR ACE flaw to install malware on the...
Multiple ArtraDownloader Variants Used by BITTER to Target Pakistan
Executive Summary Since at least 2015, a suspected South Asian threat grouping known as BITTER has been targeting Pakistan and Chinese organizations...
Russian hacker accused of bank cyber-attacks pleads guilty in US court
Russian programmer Stanislav Lisov, extradited to the United States from Spain in 2018, pleaded guilty to conspiring to commit a...
Marriott Reveals They Had My Un-encrypted Passport and Credit Card Information, and Now Hackers Have It
Marriott let me know that the hack of their systems released my unencrypted passport number and unencrypted credit card number....
North Korean hackers could start stealing business secrets
As North Korea tries to rev up its economy, it may shift its hacking efforts from financial thievery to stealing...
Secret Rules of Visa and MasterCard Revealed by Russian Ex-Hacker
Dmitry Artimovich, who on several occasions had been referred to as a "Russian hacker” by the world's largest news publications...
dirty_sock: Linux Privilege Escalation (via snapd)
In January 2019, current versions of Ubuntu Linux were found to be vulnerable to local privilege escalation due to a...
CVE-2019-6340 | Drupal RCE Vulnerability
The remote execution flaw exists because some field types do not properly sanitize data from non-form sources and this can...
CVE-2019-8912 | Use After Free Arbitrary Code Execution Vulnerability for many Linux Kernels
Linux Kernel is prone to an arbitrary code-execution vulnerability.An attacker can exploit this issue to execute arbitrary code in the...
Cybersecurity A Key Challenge for the Automotive Industry
The fundamental challenge of cybersecurity is not new. They have existed as long as computers have been used in sensitive applications in...
Monero Miner-Malware Uses RADMIN, MIMIKATZ to Infect, Propagate via SMB Vulnerability
Between the last week of January to February, we noticed an increase in hack tool installation attempts that dropped seemingly...
GitHub Increases Bug Bounty Program Rewards
GitHub revealed on Tuesday that last year it paid out $165,000 to researchers who took part in its public bug...
Kali Linux 2019.1 – Updates…updates….updates
Everyone likes a new Kali update!The big marquee update of this release is the update of Metasploit to version 5.0,...
You have around 20 minutes to contain a Russian APT attack
Governments and private organisations have around 20 minutes to detect and contain a hack from Russian nation-state actors. New statistics...
PrivateVPN Thoughts
PrivateVPN Does PrivateVPN keep any logs? The FAQ is emphatic: "No, we NEVER produce logs of any data traffic. The only things...
Locky ransomware back with a new bag of tricks
Locky ransomware is back, again... It's delivered with the help of new tricks to fool users and anti-malware defences. Delivered...
AI is key to speeding up threat detection and response
Time is the most important factor in detecting network breaches and, consequently, in containing cyber incidents and mitigating the cost of...
Hackers Mock Cybersecurity Firm FireEye with Second Data Dump
The dump is relatively small, containing around 3MB of files. https://pastebin.com/L48e49AK At the end of July, anonymous hackers published documents stolen from...
Fines of £17m for unprotected UK firms
The UK Government’s Department of Digital, Culture, Media and Sport (DCMS) has announced that firms could face fines of up...
Spaghetti – Web Application Security Scanner
Description Spaghetti is a web application security scanner tool. It is designed to find various default and insecure files, configurations...
PasswordStats – A cool new password reporting tool
Have you ever done a domain password audit? Well yes the cracking of the passwords can be fun depending on...
Malboxes: a Tool to Build Malware Analysis Virtual Machines
Malware analysis is like defusing bombs. The objective is to disassemble and understand a program that was built to do...
Windows SMB Zero-Day Exploit Released in the Wild after Microsoft delayed the Patch
Last weekend a security researcher publicly disclosed a zero-day vulnerability in Windows 10, Windows 8.1 and Server editions after Microsoft...
