Hack4Charity

information security & technology for everyone

Menu

Skip to content
  • ~Ab0ut uS~
  • ~Pr0j3cts~
    • Change Log
    • Malware Analysis
    • Plex Server
    • Database 101
  • ~h3Lp 0uT~
  • ~s3rV1ceS~
    • ~c0mmun1ty s3rV1ceS~
    • ~pr0f3ssi0naL s3rv1ceS~
  • ~d1scl@im3r~
  • ~c0nT@ct uS~

ISC StormCast for Thursday, April 12th 2018

12 April 2018, 12:26 pm

By Johannes B. Ullrich, Ph.D. UAdmin Phishing Backend
https://isc.sans.edu/forums/diary/A+Phishers+View+of+Phishing+UAdmin+27+Phishing+Control+Panel/23543/
Insecure SecureRandom
https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018-April/015873.html
WebAuthn for Post Password Authentication
https://www.w3.org/TR/2018/CR-webauthn-20180320/
More Here      

Filed under Uncategorized | Permalink

Post navigation

« ISC StormCast for Thursday, April 12th 2018
ISC StormCast for Thursday, April 12th 2018 »

Twitter Feeds

Twitter
an2ni
an2ni
@an2ni

Kudos to my fellow NEHR Colleagues! Kapil Aswani Ferdinand Mangio lnkd.in/g_JGEexh

reply retweet favorite
4:25 am · September 8, 2022
Twitter
an2ni
an2ni
@an2ni

Have you cast your vote yet? Closing soon... lnkd.in/gKnsaTRk

reply retweet favorite
2:52 pm · July 20, 2022
Twitter
an2ni
an2ni
@an2ni

University students, recent graduates, career changers, and other professionals wishing to expand their skills and opportunities are encouraged to participate, especially individuals employed or seeking employment within small and…lnkd.in/gNBpK3ub lnkd.in/gD6nNCsn

reply retweet favorite
3:25 pm · July 19, 2022
Twitter
an2ni
an2ni
@an2ni

Let's go!! lnkd.in/dVZdKKMJ

reply retweet favorite
9:17 am · July 11, 2022
Twitter
SANS Institute
SANS Institute
@SANSInstitute

👋 The FREE #ICS Cybersecurity Field Manual – Vol. 1 📕 lays the foundation for future #ICSSecurity field manuals that will expand on more advanced topics. 📖 Don't fall behind - download your path to defending our critical infrastructure today: sans.org/u/1lFb. pic.twitter.com/xWXX…

reply retweet favorite
12:16 am · July 6, 2022 ·
Retweeted by an2ni
Twitter
an2ni
an2ni
@an2ni

I am honored to be recognized in the 2022 Global Top 100 Leaders in the recent Corinium's InfoSec report. The list is to acknowledge the work that we have been doing to advance the cause of information security across the globe and to highlight the achiev…lnkd.in/duTmF5BY

reply retweet favorite
6:12 pm · June 10, 2022
Twitter
an2ni
an2ni
@an2ni

Revised Guidelines on Business Continuity Management a) adopt a service-centric approach through timely recovery of critical business services facing customers; b) identify end-to-end dependencies that support critical business services, and address a…lnkd.in/dczivRWd

reply retweet favorite
1:05 am · June 8, 2022
Twitter
an2ni
an2ni
@an2ni

Happy and privileged to be part of this initiative. Really exciting when you see the elderlies' keen to learn and what's even more fulfilling is when you hear them say they learned a lot during the 1:1 sessions! Thank you Cyber Security Agency of Singapor…lnkd.in/dXqu8huc

reply retweet favorite
4:49 am · May 23, 2022
Twitter
an2ni
an2ni
@an2ni

Up for grabs! May the Fourth be with you! lnkd.in/g3rG9xqi

reply retweet favorite
7:01 am · May 4, 2022
Twitter
an2ni
an2ni
@an2ni

(ISC)2 Singapore Chapter Mentorship Programme starts soon! Inviting all young talents who are interested and seeking guidance in their new cybersecurity career. At the same time, veterans who are interested to lend a helping hand t…lnkd.in/geCnHAZs lnkd.in/g5rfjN6j

reply retweet favorite
4:39 pm · April 26, 2022
Twitter
an2ni
an2ni
@an2ni

Register and mark your calendar! lnkd.in/gHxcSgD4

reply retweet favorite
3:05 pm · March 31, 2022
Twitter
an2ni
an2ni
@an2ni

Be part of this exciting and fun community event! lnkd.in/g3Kte8dV

reply retweet favorite
2:50 am · March 31, 2022
Twitter
an2ni
an2ni
@an2ni

OUCH is Out! lnkd.in/gwxdveTU

reply retweet favorite
6:52 am · March 3, 2022
Twitter
an2ni
an2ni
@an2ni

lnkd.in/gr_XEiK8 lnkd.in/g-rtWeYH

reply retweet favorite
2:18 pm · February 3, 2022
Twitter
an2ni
an2ni
@an2ni

February Ouch is Out! lnkd.in/ghKVnnCB

reply retweet favorite
7:58 am · February 3, 2022
Twitter
an2ni
an2ni
@an2ni

Finally! lnkd.in/ga8QHQxB

reply retweet favorite
3:19 pm · January 26, 2022
Twitter
an2ni
an2ni
@an2ni

The National Electronic Health Record (NEHR) provides a summary of patient health records collated across different providers to deliver more holistic and effective care. It has become the digital backbone of Singapore's healthcare system and a critical n…lnkd.in/gGdfxnJG

reply retweet favorite
3:33 pm · January 24, 2022
Twitter
an2ni
an2ni
@an2ni

Thank you IHiS! Happy Water Tiger New Year! 🥳🐅 lnkd.in/gkJmFP8r

reply retweet favorite
5:40 am · January 24, 2022
Twitter
an2ni
an2ni
@an2ni

agcs.allianz.com/new…

reply retweet favorite
8:39 am · January 18, 2022
Twitter
Allianz
Allianz
@Allianz

Our Allianz Risk Barometer identifies the most important global business risks for 2022 and beyond. Download the full @AGCS_Insurance report at agcs.allianz.com/new… and let us know how you would personally rank risks for 2022. #Allianz #AGCS #ARB2022 pic.twitter.com/gMws…

reply retweet favorite
8:39 am · January 18, 2022 ·
Retweeted by an2ni
Follow @an2ni

Now Reading

Coming up - the meat of this ebook with regards to WebApp Pentesting Methodology & Tricks...
Check this Malware Analysis out for the meantime..

RSS Hacking & Cracking

  • Is OneCoin A Scam? - Technical Analysis May 2, 2017 Rafay
  • How Pakistan's Critical Infrastructure Was Hacked? - Technical Analysis April 11, 2017 Rafay

RSS Tenable Security

  • CVE-2022-41040 and CVE-2022-41082: ProxyShell Variant Exploited in the Wild September 30, 2022
    Microsoft has confirmed reports of two zero-day vulnerabilities in Microsoft Exchange Server that have been exploited in the wild. Patches are not yet available. Background On September 28, GTSC Cybersecurity Technology Company Limited published a blog post (English translation published later) regarding their discovery of two zero-day vulnerabilities in Microsoft Exchange Server. According to GTSC, […]
    Claire Tills, Satnam Narang

RSS Security WebCasts @ SANS

RSS Latest Threat Tracking

RSS Latest Vulnerability Exposures

  • CVE-2015-2790 March 30, 2015
    Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image. (CVSS:4.3) (Last Update:2016-12-03)
  • CVE-2015-2789 March 30, 2015
    Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder. (CVSS:4.4) (Last Update:2016-12-03)
Hack4Charity 2014 © Logo by Umair Khan