Month: October 2016

Bug Bounties – Discussion of methodologies / failings / marketing fluff via /r/netsec

Bug Bounties – Discussion of methodologies / failings / marketing fluff http://ift.tt/2dQmvIR

October 14, 2016
Announcement of imminent hard fork for EIP150 gas cost changes

During the last couple of weeks, the Ethereum network has been the target of a sustained attack. The attacker(s) have been very crafty in locating vulnerabilities in the client implementations as well as the protocol specification. While the recent patches have led to an overall increased resiliency in the client implementations, the attacks have also…

October 14, 2016
Abusing login mechanisms to detect whether a user is logged in via /r/netsec

Abusing login mechanisms to detect whether a user is logged in http://ift.tt/2erncHa

October 14, 2016
Defcon videos are up. via /r/netsec

Defcon videos are up.

October 14, 2016
New Odinaff Trojan Targeting Banking Sector Linked to Carbanak Gang

New Odinaff Trojan Targeting Banking Sector Linked to Carbanak Gang http://ift.tt/2djRqtM This post was originally published here: post Symantec has discovered evidence that a new trojan that’s predominantly targeting the banking sector has The post New Odinaff Trojan Targeting Banking Sector Linked to Carbanak Gang appeared first on OSINT .

October 12, 2016
Say Cheese: a snapshot of the massive DDoS attacks coming from IoT cameras

Say Cheese: a snapshot of the massive DDoS attacks coming from IoT cameras http://ift.tt/2dQEITt Say Cheese: a snapshot of the massive DDoS attacks coming from IoT cameras: Vulnerabilities via Ecstatic Security http://ift.tt/1TuVnt9 October 11, 2016 at 12:57PM

October 12, 2016
Australian Bureau of Meteorology’s computer system hacked, authorities suspect foreign hand

Australian Bureau of Meteorology’s computer system hacked, authorities suspect foreign hand http://ift.tt/2dK5SLg A foreign power has managed to hack the Australian Bureau of Meteorology’s computer system to steal sensitive documents and compromise other government networks, an official cyber security report revealed on Wednesday. The post Australian Bureau of Meteorology’s computer system hacked, authorities suspect foreign…

October 12, 2016
Scan Ruby-based apps for security issues with Dawnscanner

Scan Ruby-based apps for security issues with Dawnscanner http://ift.tt/2eqD78G Dawnscanner is an open source static analysis scanner designed to review the security of web applications written in Ruby. Dawnscanner’s genesis Its developer, Paolo Perego, says that he was motivated to create it back in spring 2013, when he needed a tool to review a number…

October 12, 2016
Patch Tuesday: Microsoft patches five zero day vulnerabilities – SC Magazine

Patch Tuesday: Microsoft patches five zero day vulnerabilities – SC Magazine http://ift.tt/2dIEdLY October 11, 2016 Patch Tuesday: Microsoft patches five zero day vulnerabilities October’s Patch Tuesday is the first to use Microsoft’s monthly roll out updat system. Microsoft today issued 10 bulletins covering 45 vulnerabilities, including 5 zero days for this month’s Patch Tuesday update,…

October 12, 2016
DXXD Ransomware Encrypts Files on Unmapped Network Shares

DXXD Ransomware Encrypts Files on Unmapped Network Shares http://ift.tt/2dTyEZg A new ransomware family has emerged that targets servers and encrypts files on network shares even if they haven’t been mapped to the infected computer. Dubbed DXXD, the new piece of ransomware appends the .dxxd extension to the encrypted files, after which it drops a ransom…

October 12, 2016