Hack4Charity

information security & technology for everyone

Menu

Skip to content
  • ~Ab0ut uS~
  • ~Pr0j3cts~
    • Change Log
    • Malware Analysis
    • Plex Server
    • Database 101
  • ~h3Lp 0uT~
  • ~s3rV1ceS~
    • ~c0mmun1ty s3rV1ceS~
    • ~pr0f3ssi0naL s3rv1ceS~
  • ~d1scl@im3r~
  • ~c0nT@ct uS~

ISC StormCast for Thursday, April 12th 2018

12 April 2018, 12:26 pm

By Johannes B. Ullrich, Ph.D. UAdmin Phishing Backend
https://isc.sans.edu/forums/diary/A+Phishers+View+of+Phishing+UAdmin+27+Phishing+Control+Panel/23543/
Insecure SecureRandom
https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018-April/015873.html
WebAuthn for Post Password Authentication
https://www.w3.org/TR/2018/CR-webauthn-20180320/
More Here      

Filed under Uncategorized | Permalink

Post navigation

« ISC StormCast for Thursday, April 12th 2018
ISC StormCast for Thursday, April 12th 2018 »

Twitter Feeds

Twitter
an2ni
an2ni
@an2ni

lnkd.in/gUDvREhy

reply retweet favorite
12:39 am · September 23, 2021
Twitter
an2ni
an2ni
@an2ni

lnkd.in/gXsx8X6n

reply retweet favorite
12:55 am · September 16, 2021
Twitter
an2ni
an2ni
@an2ni

lnkd.in/gtc3DPu4

reply retweet favorite
12:41 am · September 16, 2021
Twitter
an2ni
an2ni
@an2ni

Make every vote count! If you leaving in Asia Pacific make sure this part of the globe is also represented! lnkd.in/gASxNX5i

reply retweet favorite
5:43 pm · September 10, 2021
Twitter
an2ni
an2ni
@an2ni

Today Singapore celebrated it's 56th National Day after being pushed back due to lockedown. Thank you for being our home in the past 15 years! lnkd.in/gn3aGidt #singapore lnkd.in/gz_MtirQ

reply retweet favorite
4:16 pm · August 21, 2021
Twitter
NCSC UK
NCSC UK
@NCSC

Detect and protect your organisation from credential abuse ncsc.gov.uk/blog-pos… pic.twitter.com/7oL9…

reply retweet favorite
11:32 am · August 6, 2021 ·
Retweeted by an2ni
Twitter
Paul Asadoorian
Paul Asadoorian
@securityweekly

How to interpret the analyst reports - Read Now! ow.ly/46wl50Ej8mS pic.twitter.com/Ttie…

reply retweet favorite
3:02 pm · July 20, 2021 ·
Retweeted by an2ni
Twitter
NCSC UK
NCSC UK
@NCSC

Tactics and techniques to keep your security monitoring effective ncsc.gov.uk/blog-pos… pic.twitter.com/FaSG…

reply retweet favorite
9:01 am · July 11, 2021 ·
Retweeted by an2ni
Twitter
NCSC UK
NCSC UK
@NCSC

What exactly should we be logging? ncsc.gov.uk/blog-pos… pic.twitter.com/Vrwe…

reply retweet favorite
4:07 pm · July 10, 2021 ·
Retweeted by an2ni
Twitter
owasp
owasp
@owasp

On the next @Owasp_DevSlop, @symops' founders will discuss the trend of workflow automation via declarative code and compare and contrast the practice of workflow automation in the context of CI/CD, low-code business applications, and security workflows. 🔗evt.to/ohouoeuw pic.twitter.com/qkIK…

reply retweet favorite
1:48 am · June 3, 2021 ·
Retweeted by an2ni
Twitter
Binni Shah
Binni Shah
@binitamshah

sysmon-modular : A repository of sysmon configuration modules : github.com/olafharto… credits @olafhartong pic.twitter.com/dmka…

reply retweet favorite
1:31 am · May 31, 2021 ·
Retweeted by an2ni
Twitter
(ISC)²
(ISC)²
@ISC2

Partner Event: Learn about tomorrow's security strategies at @RSAConference. The world's most comprehensive cybersecurity conference returns as a virtual experience May 17 - 20. (ISC)² members, register with code 1U1ISC2FD for exclusive savings: ow.ly/ebXf30rFWvy #RSAC pic.twitter.com/Vnvj…

reply retweet favorite
10:53 pm · May 3, 2021 ·
Retweeted by an2ni
Twitter
Paul Asadoorian
Paul Asadoorian
@securityweekly

Teleworking Challenges? Extend your enterprise network security controls - Register & Watch On-Demand Now! ow.ly/2hJb50CNGWP pic.twitter.com/RGV3…

reply retweet favorite
10:53 pm · May 3, 2021 ·
Retweeted by an2ni
Twitter
(ISC)²
(ISC)²
@ISC2

Do you know how to bridge the gap between security and agility, building security into the #DevOps cycle and making it an integral part of the process? See if you have what it takes with this short 10-question quiz. Take quiz: ow.ly/WWET50ElSE8 #cybersecurityeducation pic.twitter.com/q0Ow…

reply retweet favorite
2:13 pm · April 25, 2021 ·
Retweeted by an2ni
Twitter
CSA
CSA
@CSAsingapore

QNAP has issued a security advisory to address two critical vulnerabilities affecting QNAP Network Attached Storage (NAS). Read the alert here. csa.gov.sg/singcert/…

reply retweet favorite
4:05 am · April 24, 2021 ·
Retweeted by an2ni
Twitter
(ISC)²
(ISC)²
@ISC2

There’s a fine line between collecting required vs. necessary data. Rather than walk that tightrope, government bodies have worked to promulgate regulations to protect all the data that, if leaked, may jeopardize an individual. More on the blog: ow.ly/GX0850EcKsg pic.twitter.com/XUW7…

reply retweet favorite
4:39 am · April 10, 2021 ·
Retweeted by an2ni
Twitter
(ISC)²
(ISC)²
@ISC2

The 2021 Cloud Security Report will provide the latest cloud security trends and data points that will help gauge how your own organization compares with others. Take the survey now and get your voice heard: ow.ly/V8jy50EbrVv #cloudsecurity pic.twitter.com/Ns5A…

reply retweet favorite
4:37 am · April 10, 2021 ·
Retweeted by an2ni
Twitter
CSA
CSA
@CSAsingapore

Learn more about protecting against data breaches here: csa.gov.sg/singcert/…

reply retweet favorite
11:35 am · April 6, 2021 ·
Retweeted by an2ni
Twitter
Binni Shah
Binni Shah
@binitamshah

The Facebook Phone Numbers Are Now Searchable in Have I Been Pwned : troyhunt.com/the-fac… credits @troyhunt Visit for data breach verification : haveibeenpwned.com

reply retweet favorite
11:31 am · April 6, 2021 ·
Retweeted by an2ni
Twitter
Evolve Security & Evolve Academy
Evolve Security & Evolve Academy
@TheEvolveSec

Don't forget to register for our free #EvolveSec @Meetup this Friday 3/19 led by our OSCP Bootcamp Instructor, Ramandeep Singh (OSCE, OSCP, OSWP, CHFI, CEH, Security+). Register now! bit.ly/3bWx6f5

reply retweet favorite
2:53 am · March 16, 2021 ·
Retweeted by an2ni
Follow @an2ni

Now Reading

Coming up - the meat of this ebook with regards to WebApp Pentesting Methodology & Tricks...
Check this Malware Analysis out for the meantime..

RSS Hacking & Cracking

  • Is OneCoin A Scam? - Technical Analysis May 2, 2017 Rafay
  • How Pakistan's Critical Infrastructure Was Hacked? - Technical Analysis April 11, 2017 Rafay

RSS Tenable Security

  • CVE-2021-22005: Critical File Upload Vulnerability in VMware vCenter Server September 22, 2021
    VMware published an advisory addressing 19 vulnerabilities, including one critical flaw in vCenter Server that is reportedly simple to exploit. Background On September 21, VMware published a security advisory addressing 19 vulnerabilities in vCenter Server, its centralized management software for VMware vSphere systems. The full list of vulnerabilities patched includes: CVE Description CVSSv3 CVE-2021-22005 vCenter […]
    Satnam Narang

RSS Security WebCasts @ SANS

RSS Latest Threat Tracking

  • 6 Risky Business Activities You Should Stop Doing NOW! June 17, 2021
    As a SMB end user, you are most vulnerable to the wiles of hackers and criminals when you are doing high-risk things without knowing just how risky they are. Below are activities you should stop doing now.   Sharing Information Over Public WiFi Using an unsecured network to share anything you care about is a […]
    VIPRE Security

RSS Latest Vulnerability Exposures

  • CVE-2015-2790 March 30, 2015
    Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image. (CVSS:4.3) (Last Update:2016-12-03)
  • CVE-2015-2789 March 30, 2015
    Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder. (CVSS:4.4) (Last Update:2016-12-03)
Hack4Charity 2014 © Logo by Umair Khan