Hack4Charity

information security & technology for everyone

Menu

Skip to content
  • ~Ab0ut uS~
  • ~Pr0j3cts~
    • Change Log
    • Malware Analysis
    • Plex Server
    • Database 101
  • ~h3Lp 0uT~
  • ~s3rV1ceS~
    • ~c0mmun1ty s3rV1ceS~
    • ~pr0f3ssi0naL s3rv1ceS~
  • ~d1scl@im3r~
  • ~c0nT@ct uS~

ISC StormCast for Thursday, April 12th 2018

12 April 2018, 12:26 pm

By Johannes B. Ullrich, Ph.D. UAdmin Phishing Backend
https://isc.sans.edu/forums/diary/A+Phishers+View+of+Phishing+UAdmin+27+Phishing+Control+Panel/23543/
Insecure SecureRandom
https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018-April/015873.html
WebAuthn for Post Password Authentication
https://www.w3.org/TR/2018/CR-webauthn-20180320/
More Here      

Filed under Uncategorized | Permalink

Post navigation

« ISC StormCast for Thursday, April 12th 2018
ISC StormCast for Thursday, April 12th 2018 »

Twitter Feeds

Twitter
an2ni
an2ni
@an2ni

Finally! lnkd.in/ga8QHQxB

reply retweet favorite
3:19 pm · January 26, 2022
Twitter
an2ni
an2ni
@an2ni

The National Electronic Health Record (NEHR) provides a summary of patient health records collated across different providers to deliver more holistic and effective care. It has become the digital backbone of Singapore's healthcare system and a critical n…lnkd.in/gGdfxnJG

reply retweet favorite
3:33 pm · January 24, 2022
Twitter
an2ni
an2ni
@an2ni

Thank you IHiS! Happy Water Tiger New Year! 🥳🐅 lnkd.in/gkJmFP8r

reply retweet favorite
5:40 am · January 24, 2022
Twitter
an2ni
an2ni
@an2ni

agcs.allianz.com/new…

reply retweet favorite
8:39 am · January 18, 2022
Twitter
Allianz
Allianz
@Allianz

Our Allianz Risk Barometer identifies the most important global business risks for 2022 and beyond. Download the full @AGCS_Insurance report at agcs.allianz.com/new… and let us know how you would personally rank risks for 2022. #Allianz #AGCS #ARB2022 pic.twitter.com/gMws…

reply retweet favorite
8:39 am · January 18, 2022 ·
Retweeted by an2ni
Twitter
an2ni
an2ni
@an2ni

"The best solution is still education. We will need to spend more time building awareness and teaching Singaporeans to look out for phishing attempts. Even if the smses look very legit, hackers will still need to redirect you to a…lnkd.in/gQ9_A-Cv lnkd.in/gzdUdJHa

reply retweet favorite
2:10 am · January 17, 2022
Twitter
an2ni
an2ni
@an2ni

AWS Menu for 2022 (= lnkd.in/grh36QY8

reply retweet favorite
12:35 am · January 15, 2022
Twitter
an2ni
an2ni
@an2ni

"...In all reality, every division in a company has its own pain points.² While it seems that one department refuses to fix the problem of the other, it is also true that most people in the company work with good intentions. Hence, if everyone is trying t…lnkd.in/gcuN6SPV

reply retweet favorite
1:14 pm · January 13, 2022
Twitter
an2ni
an2ni
@an2ni

You are invited! lnkd.in/gWk_ES66

reply retweet favorite
11:21 am · January 11, 2022
Twitter
an2ni
an2ni
@an2ni

OUCH is Out! Spot and Stop Messaging Attacks lnkd.in/ga9WySJ8

reply retweet favorite
5:34 pm · January 5, 2022
Twitter
an2ni
an2ni
@an2ni

Protecting SMS messages used in critical business processes lnkd.in/gy2RZPbU

reply retweet favorite
12:34 pm · December 29, 2021
Twitter
briankrebs
briankrebs
@briankrebs

Ransomware has shutdown computer systems/websites for Virginia's legislative agencies, which are drafting bills and resolutions for the upcoming General Assembly session. Richmond.com says Mandiant was a victim. AP says Mandiant was retained. richmond.com/news/st… pic.twitter.com/eKmb…

reply retweet favorite
2:28 am · December 14, 2021 ·
Retweeted by an2ni
Twitter
an2ni
an2ni
@an2ni

Merry CHRISTmas! Thank you Allianz Insurance Singapore !!! lnkd.in/gpnWdij7

reply retweet favorite
5:45 am · December 10, 2021
Twitter
Benjamin Ang
Benjamin Ang
@benjaminang

Lloyds new insurance clauses exclude claims for cyber breaches which they 'reasonably' infer to be state-sponsored. threatpost.com/lloyd… This leaves the insured without cover for the most serious attacks

reply retweet favorite
3:56 am · December 2, 2021 ·
Retweeted by an2ni
Twitter
an2ni
an2ni
@an2ni

lnkd.in/gyMrHxXU

reply retweet favorite
5:46 am · November 29, 2021
Twitter
an2ni
an2ni
@an2ni

Ransomware protection – what does good IT security look like? lnkd.in/etbcUYVS

reply retweet favorite
3:26 am · November 27, 2021
Twitter
an2ni
an2ni
@an2ni

Do sign up early and join us at our annual (ISC)2 Secure Singapore on 6 Nov 2021 - Virtual Conference. We are very pleased to have with us experts from (ISC)2, government, and private sectors sharing their knowledge and experiences…lnkd.in/gG-_KJhG lnkd.in/gzRjpPrQ

reply retweet favorite
5:53 pm · October 20, 2021
Twitter
an2ni
an2ni
@an2ni

Selecting and measuring meaningful security attributes of an information system presents a significant challenge. While traditional security auditing processes can rely on a large body of knowledge and well-established references s…lnkd.in/gRmK2vxg lnkd.in/gM3zyEt8

reply retweet favorite
5:49 pm · October 20, 2021
Twitter
an2ni
an2ni
@an2ni

Special thanks to the Insurance Standing Committee on Cyber Security (ISCCS) community and BBP workgroup for being able to contribute to the development of this guideline for the Singapore Insurance Sector. #cybersecurity #singapore #allianzsingapore lnkd.in/gEECm4Zf

reply retweet favorite
7:27 am · October 20, 2021
Twitter
(ISC)²
(ISC)²
@ISC2

A zero-day security bug (CVE-2021-41773) in the Apache HTTP Server is being actively exploited. Apache recommends upgrading to version 2.4.50. Learn more: ow.ly/vZM950GolAm pic.twitter.com/Z1cf…

reply retweet favorite
7:22 pm · October 8, 2021 ·
Retweeted by an2ni
Follow @an2ni

Now Reading

Coming up - the meat of this ebook with regards to WebApp Pentesting Methodology & Tricks...
Check this Malware Analysis out for the meantime..

RSS Hacking & Cracking

  • Is OneCoin A Scam? - Technical Analysis May 2, 2017 Rafay
  • How Pakistan's Critical Infrastructure Was Hacked? - Technical Analysis April 11, 2017 Rafay

RSS Tenable Security

  • Oracle January 2022 Critical Patch Update Addresses 266 CVEs January 19, 2022
    Oracle addresses 266 CVEs in its first quarterly update of 2022 with 497 patches, including 25 critical updates. Background On January 18, Oracle released its Critical Patch Update (CPU) for January 2022, the first quarterly update of the year. This CPU contains fixes for 266 CVEs in 497 security updates across 39 Oracle product families. […]
    Satnam Narang

RSS Security WebCasts @ SANS

RSS Latest Threat Tracking

  • Holiday Cybersecurity Tips Everyone Should Know November 22, 2021
    It’s the most wonderful time of the year — and not to mention the most chaotic.  Whether you’re trying to meet end of the year deadlines, shop for last-minute gifts, snag seasonal deals, or plan a festive party, it’s common to find yourself much more distracted than usual around the holidays. Unfortunately, this hectic holiday […]
    VIPRE Security

RSS Latest Vulnerability Exposures

  • CVE-2015-2790 March 30, 2015
    Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image. (CVSS:4.3) (Last Update:2016-12-03)
  • CVE-2015-2789 March 30, 2015
    Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder. (CVSS:4.4) (Last Update:2016-12-03)
Hack4Charity 2014 © Logo by Umair Khan