NYPD subpoenas New York Post reporter’s Twitter account in leak hunt
Researchers find another unsecured S3 bucket
Pass the Cookie made it into the latest 2600 magazine! Very excited about this!
I was just walking around Capitol Hill and stopped by Ada’s Technical Books on 15th Avenue - a great coffee shop with lots of technical books. Right after walking in to grab a cup of tea, I saw the latest Hacker Quarterl...
IBM has confirmed that it will not participate in next week’s RSA Conference
UKAD under attack but defenses hold firm
Final Year Project - Web Application Security Principles About 18 years ago I worked on the final year project for my Bachelor’s degree in Computer Science. I had just gotten interested in security and was learning about security principles.
The title of the project was “Web Application Security Pri...
Suspected ransomware leaves 135,000 residents high and dry
Chattanooga cybersecurity firm Conversant unveils $8m expansion plan that will double workforce
This post highlights a simple mitigation to improve the security posture of your organization. The idea is to, by practical means, limit attack surface and prevent spreading of automated malware, as well as limiting lateral movement by adversaries.
Network security over the last 15 years Malware can...
Healthcare data breach report shows state where most breaches occurred in 2019
Portuguese man who allegedly leaked soccer’s dirty secrets to go on trial after losing an appeal
Les marqueurs techniques suivants sont associés en source ouverte au groupe d'attaquants TA2101 utilisant le rançongiciel Maze (voir la publication CERTFR-2020-CTI-001). Ils sont fournis au format d'export MISP et peuvent être utilisés à des fins de détection et de blocage de cette menace. Cette...
Institute of International Education left MongoDB databases unprotected
Showdown between DoJ and world’s largest telecom kit maker intensifies
Les marqueurs techniques suivants sont associés en source ouverte au groupe d'attaquants TA2101 utilisant le rançongiciel Maze (voir la publication CERTFR-2020-CTI-001). Ils sont fournis au format d'export MISP et peuvent être utilisés à des fins de détection et de blocage de cette menace. Cette...
Pennsylvanian convenience stores are latest to be targeted
Cyber-attackers adopt a new tactic to phish victims interested in coronavirus
With the release of Manticore 0.3.3, we’re proud to announce support for symbolically executing WebAssembly (WASM) binaries. WASM is a newly standardized programming language that allows web developers to run code with near-native performance directly within the browser. Manticore 0.3.3 can explore...
US Census Bureau has not fixed cybersecurity weaknesses, according to Government Accountability Office report
Puerto Rico’s government conned out of $2.6m in an email phishing scam