Silver – Mass Scan IPs For Vulnerable Services
masscan is fast, nmap can fingerprint software and vulners is a huge vulnerability database. Silver is a front-end that allows...
OSINT
A Visit from the Spirits of HaXmas Past
One balmy Texas winter’s eve, having closed the pull request tab for the night, I lie in bed poking at...
Spelevo exploit kit debuts new social engineering trick
2019 has been a busy year for exploit kits, despite the fact that they haven’t been considered a potent threat...
“Smart Spies”- Amazon Alexa and Google Home’s Voice Assistant Were Vulnerable to a Security Flaw
Alexa and Google Home smart speakers have been vulnerable to a security threat that made eavesdropping, voice phishing and using...
Hackers using government websites of Russian Federation for mining
Cybercriminals used to generate cryptocurrencies not only computers of ordinary Internet users but also the resources of large companies, as...
All Android Users Beware! All The Android Versions Vulnerable To This New Bug ‘StrandHogg’
Android is vulnerable anew owing it to a new bug that goes by the name of “StrandHogg”. It is a...
Secretx – Extracting API Keys And Secrets By Requesting Each URL At The Your List
Extracting api keys and secrets by requesting each url at the your list.Installationpython3 -m pip install -r requirements.txtUsagepython3 secretx.py --list...
ReconCobra – Complete Automated Pentest Framework For Information Gathering
ReconCobraReconcobra is Foot printing software for Ultimate Information GatheringKali, Parrot OS, Black Arch, Termux, Android Led TVInterfaceSoftware have 82 Options...
All I Want for Christmas Is a Big Box of Quirky IoT
During a recent trip, I met up with some good friends and had a conversation about a new hobby of...
Momentum botnet spotted in the wild
A new botnet dubbed Momentum has been found targeting Linux systems running on a variety of different processors and pushing...
Building a Daily Threat Simulation Tool with Todd Beebe
In the latest episode of our podcast, Security Nation, we sat down to talk with Todd Beebe about the automated...
New Consumer Online Privacy Rights Act (COPRA) would empower American users
Despite the already dizzying number of comprehensive data privacy proposals before the US Senate—nearly 10 have been introduced since mid-2018—yet...
In Berlin, Russian and German scientists discussed the danger of smart gadgets
By December 15, on behalf of President Vladimir Putin, the Russian government should prepare a Federal project "Artificial intelligence", which...
nodeCrypto v2.0 – Ransomware Written In NodeJs
nodeCrypt is a linux Ransomware written in NodeJs that encrypt predefined files.This project was created for educational purposes, you are...
Pbtk – A Toolset For Reverse Engineering And Fuzzing Protobuf-based Apps
Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more...
Mac threat detections on the rise in 2019
Conventional wisdom has been that, although not invulnerable to cyberthreats (as some old Apple ads would have you believe), Macs...
A week in security (December 9 – 15)
Last week on Malwarebytes Labs, we cautioned readers against purchasing potentially privacy-invasive, cyber-insecure smart doorbells, warned about a new credit...
State Bank of India Issues Warning of Juice Jacking
In recent months there has been a rise in cyber-frauds with people losing money on online payment or digital transactions....
ATM Attacks-Know how AtMs cab be hacked under 20 minutes!!!
Want to know something interesting and alarming? A research report published last year revealed that most ATM's can be hacked...
Online Payments for Water Services Intercepted By Hackers
The City of Waco warns residents that their online payments for water services may have been impeded by hackers who...
TheTHE – Simple, Shareable, Team-Focused And Expandable Threat Hunting Experience
TheTHE is an environment intended to help analysts and hunters over the early stages of their work in an easier,...
Automating Application Security Testing Within Your Atlassian Bamboo Pipelines
This blog post is part three of our ongoing Automation with InsightAppSec series. Make sure to check out part one...
DDoS Attacks and IoT Exploits: New Activity from Momentum Botnet
by Aliakbar Zahravi We recently found notable malware activity affecting devices running Linux, a platform that has battled numerous issues...
Rambler claimed the rights to the Nginx web server
Rambler Group claimed a violation of its exclusive copyright on the Nginx web server, which was developed by a former...
