Hack4Charity

information security & technology for everyone

Menu

Skip to content
  • ~Ab0ut uS~
  • ~Pr0j3cts~
    • Change Log
    • Malware Analysis
    • Plex Server
    • Database 101
  • ~h3Lp 0uT~
  • ~s3rV1ceS~
    • ~c0mmun1ty s3rV1ceS~
    • ~pr0f3ssi0naL s3rv1ceS~
  • ~d1scl@im3r~
  • ~c0nT@ct uS~

ISC StormCast for Thursday, August 4th 2016

4 August 2016, 12:28 pm

By Johannes B. Ullrich, Ph.D. The Dark Side of Certificate Transparency
https://isc.sans.edu/forums/diary/The+Dark+Side+of+Certificate+Transparency/21329/
Ouch Security Awareness Newsletter
https://securingthehuman.sans.org/resources/newsletters/ouch/2016
HTTP/2 Vulnerabilities
http://www.imperva.com/docs/Imperva_HII_HTTP2.pdf
More Here      

Filed under Uncategorized | Permalink

Post navigation

« ISC StormCast for Thursday, August 4th 2016
ISC StormCast for Thursday, August 4th 2016 »

Twitter Feeds

Twitter
Benjamin Ang
Benjamin Ang
@benjaminang

Lloyds new insurance clauses exclude claims for cyber breaches which they 'reasonably' infer to be state-sponsored. threatpost.com/lloyd… This leaves the insured without cover for the most serious attacks

reply retweet favorite
3:56 am · December 2, 2021 ·
Retweeted by an2ni
Twitter
an2ni
an2ni
@an2ni

lnkd.in/gyMrHxXU

reply retweet favorite
5:46 am · November 29, 2021
Twitter
an2ni
an2ni
@an2ni

Ransomware protection – what does good IT security look like? lnkd.in/etbcUYVS

reply retweet favorite
3:26 am · November 27, 2021
Twitter
an2ni
an2ni
@an2ni

Do sign up early and join us at our annual (ISC)2 Secure Singapore on 6 Nov 2021 - Virtual Conference. We are very pleased to have with us experts from (ISC)2, government, and private sectors sharing their knowledge and experiences…lnkd.in/gG-_KJhG lnkd.in/gzRjpPrQ

reply retweet favorite
5:53 pm · October 20, 2021
Twitter
an2ni
an2ni
@an2ni

Selecting and measuring meaningful security attributes of an information system presents a significant challenge. While traditional security auditing processes can rely on a large body of knowledge and well-established references s…lnkd.in/gRmK2vxg lnkd.in/gM3zyEt8

reply retweet favorite
5:49 pm · October 20, 2021
Twitter
an2ni
an2ni
@an2ni

Special thanks to the Insurance Standing Committee on Cyber Security (ISCCS) community and BBP workgroup for being able to contribute to the development of this guideline for the Singapore Insurance Sector. #cybersecurity #singapore #allianzsingapore lnkd.in/gEECm4Zf

reply retweet favorite
7:27 am · October 20, 2021
Twitter
(ISC)²
(ISC)²
@ISC2

A zero-day security bug (CVE-2021-41773) in the Apache HTTP Server is being actively exploited. Apache recommends upgrading to version 2.4.50. Learn more: ow.ly/vZM950GolAm pic.twitter.com/Z1cf…

reply retweet favorite
7:22 pm · October 8, 2021 ·
Retweeted by an2ni
Twitter
an2ni
an2ni
@an2ni

lnkd.in/g2CBuGMz

reply retweet favorite
1:17 am · October 7, 2021
Twitter
an2ni
an2ni
@an2ni

lnkd.in/gUDvREhy

reply retweet favorite
12:39 am · September 23, 2021
Twitter
an2ni
an2ni
@an2ni

lnkd.in/gXsx8X6n

reply retweet favorite
12:55 am · September 16, 2021
Twitter
an2ni
an2ni
@an2ni

lnkd.in/gtc3DPu4

reply retweet favorite
12:41 am · September 16, 2021
Twitter
an2ni
an2ni
@an2ni

Make every vote count! If you leaving in Asia Pacific make sure this part of the globe is also represented! lnkd.in/gASxNX5i

reply retweet favorite
5:43 pm · September 10, 2021
Twitter
an2ni
an2ni
@an2ni

Today Singapore celebrated it's 56th National Day after being pushed back due to lockedown. Thank you for being our home in the past 15 years! lnkd.in/gn3aGidt #singapore lnkd.in/gz_MtirQ

reply retweet favorite
4:16 pm · August 21, 2021
Twitter
NCSC UK
NCSC UK
@NCSC

Detect and protect your organisation from credential abuse ncsc.gov.uk/blog-pos… pic.twitter.com/7oL9…

reply retweet favorite
11:32 am · August 6, 2021 ·
Retweeted by an2ni
Twitter
Paul Asadoorian
Paul Asadoorian
@securityweekly

How to interpret the analyst reports - Read Now! ow.ly/46wl50Ej8mS pic.twitter.com/Ttie…

reply retweet favorite
3:02 pm · July 20, 2021 ·
Retweeted by an2ni
Twitter
NCSC UK
NCSC UK
@NCSC

Tactics and techniques to keep your security monitoring effective ncsc.gov.uk/blog-pos… pic.twitter.com/FaSG…

reply retweet favorite
9:01 am · July 11, 2021 ·
Retweeted by an2ni
Twitter
NCSC UK
NCSC UK
@NCSC

What exactly should we be logging? ncsc.gov.uk/blog-pos… pic.twitter.com/Vrwe…

reply retweet favorite
4:07 pm · July 10, 2021 ·
Retweeted by an2ni
Twitter
owasp
owasp
@owasp

On the next @Owasp_DevSlop, @symops' founders will discuss the trend of workflow automation via declarative code and compare and contrast the practice of workflow automation in the context of CI/CD, low-code business applications, and security workflows. 🔗evt.to/ohouoeuw pic.twitter.com/qkIK…

reply retweet favorite
1:48 am · June 3, 2021 ·
Retweeted by an2ni
Twitter
Binni Shah
Binni Shah
@binitamshah

sysmon-modular : A repository of sysmon configuration modules : github.com/olafharto… credits @olafhartong pic.twitter.com/dmka…

reply retweet favorite
1:31 am · May 31, 2021 ·
Retweeted by an2ni
Twitter
(ISC)²
(ISC)²
@ISC2

Partner Event: Learn about tomorrow's security strategies at @RSAConference. The world's most comprehensive cybersecurity conference returns as a virtual experience May 17 - 20. (ISC)² members, register with code 1U1ISC2FD for exclusive savings: ow.ly/ebXf30rFWvy #RSAC pic.twitter.com/Vnvj…

reply retweet favorite
10:53 pm · May 3, 2021 ·
Retweeted by an2ni
Follow @an2ni

Now Reading

Coming up - the meat of this ebook with regards to WebApp Pentesting Methodology & Tricks...
Check this Malware Analysis out for the meantime..

RSS Hacking & Cracking

  • Is OneCoin A Scam? - Technical Analysis May 2, 2017 Rafay
  • How Pakistan's Critical Infrastructure Was Hacked? - Technical Analysis April 11, 2017 Rafay

RSS Tenable Security

  • Introducing Tenable.cs: Full Lifecycle, Cloud Native Security December 7, 2021
    The new offering extends the recently acquired Accurics platform to enable DevSecOps and “shift left security” with integrated controls for development and runtime workflows, focused on Infrastructure as Code (IaC). Almost every security practitioner we talk with mentions struggling with fragmented security solutions and a difficult path to improved security outcomes. They leverage dozens of […]
    Team Tenable

RSS Security WebCasts @ SANS

RSS Latest Threat Tracking

  • Holiday Cybersecurity Tips Everyone Should Know November 22, 2021
    It’s the most wonderful time of the year — and not to mention the most chaotic.  Whether you’re trying to meet end of the year deadlines, shop for last-minute gifts, snag seasonal deals, or plan a festive party, it’s common to find yourself much more distracted than usual around the holidays. Unfortunately, this hectic holiday […]
    VIPRE Security

RSS Latest Vulnerability Exposures

  • CVE-2015-2790 March 30, 2015
    Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image. (CVSS:4.3) (Last Update:2016-12-03)
  • CVE-2015-2789 March 30, 2015
    Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder. (CVSS:4.4) (Last Update:2016-12-03)
Hack4Charity 2014 © Logo by Umair Khan