-
Aug 30, 2019
Security researchers from Google’s Project Zero team say they have discovered a number of compromized websites which used previously undisclosed security flaws to attack any iPhone that visited them.
… read more »
-
Aug 30, 2019
Okay, [this](https://www.andreafortuna.org/2019/08/16/the-making-of-another-world/) is the third post dedicated to Another World (previous are this and this): I think now it’s clear how much I appreciate this game.
… read more »
-
Aug 29, 2019
During a penetration test, once you get a local access to a target, you should start a local assessment of the machine in order to plan a correct tactic for privileges escalation and lateral movement.
… read more »
-
Aug 28, 2019
Credit card skimming is a type of credit card theft performed using a small device to steal credit card information during a legitimate credit card transaction.
… read more »
-
Aug 27, 2019
Imperva disclosed today a security incident that led data exposure affecting a subset of customers using its Cloud Web Application Firewall (previously known as Incapsula).
… read more »
-
Aug 27, 2019
In the beginning it was the wardialing: the scan a block of numbers (dialed with specific software and a modem) often related to a company, in order to find out a fax or a modem response.
… read more »
-
Aug 23, 2019
Do you remember this post about Kazakhstan government attempts to deploy a root certificate in order to start a spying campaign of citizen’s HTTPS traffic?
… read more »
-
Aug 22, 2019
When you start analyzing a Linux memory dump using volatility, the first problem you may need to face is choosing the correct memory profile.
… read more »
-
Aug 21, 2019
An interesting article by Luca Bongiorni explains how to create a remote controlled HID injector cable using some simple hardware components easily purchased on online stores (with less then 10$)
… read more »
-
Aug 20, 2019
The vulnerability resides in the way devices choose an entropy value for encryption keys while establishing a connection: an attacker in close proximity to the victim’s device could intercept or manipulate encrypted Bluetooth traffic between two paired devices.
… read more »
-
Aug 16, 2019
Another World was one of the video games I most loved in my youth.
… read more »
-
Aug 15, 2019
OS X is, in effect, a nix based system. Therefore the forensic image acquisition processes are very similar to those used on Linux systems. Today I’d like to share my personal acquisition workflow for Apple Mac systems, *suitable for OSX… read more »
-
Aug 14, 2019
Google Project Zero disclosed a vulnerability in CTF, a Microsoft protocol used by all Windows versions since Windows XP that can be exploited with ease.
… read more »
-
Aug 13, 2019
Researchers have discovered that some DSLRs and mirrorless cameras are actually vulnerable to ransomware attacks.
… read more »
-
Aug 12, 2019
Do you think chatting in WhatsApp is completely private. No, sadly it's not! #privacy #whatsapp #telegram #signal #briar #riotim #metadata #e2e… read more »
-
Aug 8, 2019
After a post focused on Android, another list of tools useful for penetration testing and reverse engineering of iOS applications.
Also all this tools are OSS and freely available.
… read more »
-
Aug 7, 2019
Security researchers at Bitdefender disclosed a new way of exploiting a flaw in Intel chips.
… read more »
-
Aug 7, 2019
And some suggestion to hardening your buckets!
… read more »
-
Aug 5, 2019
Can I avoid identity theft? No, you can't! You can only prevent criminals from using your personal information, which they almost certainly already have.
#privacy #cybersecurity #identitytheft #bruceschneier… read more »
-
Aug 2, 2019
Some months ago, Speigel Onlinereported on comments by Germany’s Interior Minister Horst Seehofer, who proposed greater governmental access to end-to-end encrypted communications, such as those by WhatsApp and Telegram.
… read more »