Hack4Charity

information security & technology for everyone

Menu

Skip to content
  • ~Ab0ut uS~
  • ~Pr0j3cts~
    • Change Log
    • Malware Analysis
    • Plex Server
    • Database 101
  • ~h3Lp 0uT~
  • ~s3rV1ceS~
    • ~c0mmun1ty s3rV1ceS~
    • ~pr0f3ssi0naL s3rv1ceS~
  • ~d1scl@im3r~
  • ~c0nT@ct uS~

ISC StormCast for Wednesday, December 18th 2019

18 December 2019, 7:33 pm

By Johannes B. Ullrich, Ph.D. Discovering DNS over HTTPS
https://isc.sans.edu/forums/diary/Is+it+Possible+to+Identify+DNS+over+HTTPs+Without+Decrypting+TLS/25616/
Ring Camera Weaknesses
https://www.vice.com/en_us/article/epg4xm/amazon-ring-camera-security
WhatsApp DoS Bug
https://research.checkpoint.com/2019/breakingapp-whatsapp-crash-data-loss-bug/
More Here      

Filed under Uncategorized | Permalink

Post navigation

« ISC StormCast for Wednesday, December 18th 2019
ISC StormCast for Wednesday, December 18th 2019 »

Twitter Feeds

Twitter
owasp
owasp
@owasp

On the next @Owasp_DevSlop, @symops' founders will discuss the trend of workflow automation via declarative code and compare and contrast the practice of workflow automation in the context of CI/CD, low-code business applications, and security workflows. 🔗evt.to/ohouoeuw pic.twitter.com/qkIK…

reply retweet favorite
1:48 am · June 3, 2021 ·
Retweeted by an2ni
Twitter
Binni Shah
Binni Shah
@binitamshah

sysmon-modular : A repository of sysmon configuration modules : github.com/olafharto… credits @olafhartong pic.twitter.com/dmka…

reply retweet favorite
1:31 am · May 31, 2021 ·
Retweeted by an2ni
Twitter
(ISC)²
(ISC)²
@ISC2

Partner Event: Learn about tomorrow's security strategies at @RSAConference. The world's most comprehensive cybersecurity conference returns as a virtual experience May 17 - 20. (ISC)² members, register with code 1U1ISC2FD for exclusive savings: ow.ly/ebXf30rFWvy #RSAC pic.twitter.com/Vnvj…

reply retweet favorite
10:53 pm · May 3, 2021 ·
Retweeted by an2ni
Twitter
Paul Asadoorian
Paul Asadoorian
@securityweekly

Teleworking Challenges? Extend your enterprise network security controls - Register & Watch On-Demand Now! ow.ly/2hJb50CNGWP pic.twitter.com/RGV3…

reply retweet favorite
10:53 pm · May 3, 2021 ·
Retweeted by an2ni
Twitter
(ISC)²
(ISC)²
@ISC2

Do you know how to bridge the gap between security and agility, building security into the #DevOps cycle and making it an integral part of the process? See if you have what it takes with this short 10-question quiz. Take quiz: ow.ly/WWET50ElSE8 #cybersecurityeducation pic.twitter.com/q0Ow…

reply retweet favorite
2:13 pm · April 25, 2021 ·
Retweeted by an2ni
Twitter
CSA
CSA
@CSAsingapore

QNAP has issued a security advisory to address two critical vulnerabilities affecting QNAP Network Attached Storage (NAS). Read the alert here. csa.gov.sg/singcert/…

reply retweet favorite
4:05 am · April 24, 2021 ·
Retweeted by an2ni
Twitter
(ISC)²
(ISC)²
@ISC2

There’s a fine line between collecting required vs. necessary data. Rather than walk that tightrope, government bodies have worked to promulgate regulations to protect all the data that, if leaked, may jeopardize an individual. More on the blog: ow.ly/GX0850EcKsg pic.twitter.com/XUW7…

reply retweet favorite
4:39 am · April 10, 2021 ·
Retweeted by an2ni
Twitter
(ISC)²
(ISC)²
@ISC2

The 2021 Cloud Security Report will provide the latest cloud security trends and data points that will help gauge how your own organization compares with others. Take the survey now and get your voice heard: ow.ly/V8jy50EbrVv #cloudsecurity pic.twitter.com/Ns5A…

reply retweet favorite
4:37 am · April 10, 2021 ·
Retweeted by an2ni
Twitter
CSA
CSA
@CSAsingapore

Learn more about protecting against data breaches here: csa.gov.sg/singcert/…

reply retweet favorite
11:35 am · April 6, 2021 ·
Retweeted by an2ni
Twitter
Binni Shah
Binni Shah
@binitamshah

The Facebook Phone Numbers Are Now Searchable in Have I Been Pwned : troyhunt.com/the-fac… credits @troyhunt Visit for data breach verification : haveibeenpwned.com

reply retweet favorite
11:31 am · April 6, 2021 ·
Retweeted by an2ni
Twitter
Evolve Security
Evolve Security
@TheEvolveSec

Don't forget to register for our free #EvolveSec @Meetup this Friday 3/19 led by our OSCP Bootcamp Instructor, Ramandeep Singh (OSCE, OSCP, OSWP, CHFI, CEH, Security+). Register now! bit.ly/3bWx6f5

reply retweet favorite
2:53 am · March 16, 2021 ·
Retweeted by an2ni
Twitter
owasp
owasp
@owasp

Don't let this special Anniversary membership offer pass by. Visit: owasp.org/membership… pic.twitter.com/EGKR…

reply retweet favorite
4:57 pm · March 12, 2021 ·
Retweeted by an2ni
Twitter
Benjamin Ang
Benjamin Ang
@benjaminang

Thoughtful article by @ict4peace SELF-DEFENCE AGAINST #CYBERATTACKS? – DIGITAL AND KINETIC DEFENCE IN LIGHT OF ARTICLE 51 UN-CHARTER buff.ly/305oNrS "focus of military #cyber defence strategies should be...de-escalation by protecting cyber infrastructure and networks" pic.twitter.com/y0Pz…

reply retweet favorite
12:16 am · March 9, 2021 ·
Retweeted by an2ni
Twitter
CSA
CSA
@CSAsingapore

Even if you receive a WhatsApp message from a familiar contact, never give away your WhatsApp account verification code, personal information, banking details and OTPs. Learn more about WhatsApp hijacking and how you can secure your account here: facebook.com/CSAsing… twitter.com/straits_…

reply retweet favorite
12:16 am · March 9, 2021 ·
Retweeted by an2ni
Twitter
NCSC UK
NCSC UK
@NCSC

Dr Deborah Petterson explains why fresh perspectives are vital in the cyber security industry #IWD2021 #ExtraordinaryWomen pic.twitter.com/Khmf…

reply retweet favorite
12:16 am · March 9, 2021 ·
Retweeted by an2ni
Twitter
MAS
MAS
@MAS_sg

MAS and The Association of Banks in Singapore has jointly issued a paper on managing new #risks that could emerge from extensive #remoteworking arrangements adopted by financial institutions amid the COVID-19 pandemic.   Read: mas.gov.sg/news/medi…

reply retweet favorite
10:36 am · March 2, 2021 ·
Retweeted by an2ni
Twitter
Center for Internet Security (CIS)
Center for Internet Security (CIS)
@CISecurity

Join CIS and @qualys to discuss SaaS #cybersecurity policy and implementation. Register now! bit.ly/3snnjoV

reply retweet favorite
7:07 pm · March 1, 2021 ·
Retweeted by an2ni
Twitter
NCSC UK
NCSC UK
@NCSC

Protecting SMS messages used in critical business processes ncsc.gov.uk/guidance… pic.twitter.com/aODV…

reply retweet favorite
9:43 am · February 23, 2021 ·
Retweeted by an2ni
Twitter
VMware Carbon Black
VMware Carbon Black
@vmw_carbonblack

.@TAKellermann joins @moneyfm893 to discuss recent revisions to Singapore’s Technology Risk Management Guidelines, the greater impact on digitalization for the financial industry, and the elevation of the CISO role. 🎧 Listen here: bit.ly/3jNle2R

reply retweet favorite
5:06 pm · February 15, 2021 ·
Retweeted by an2ni
Twitter
CSA
CSA
@CSAsingapore

SonicWall has confirmed a zero-day vulnerabilityin their SMA Series 10.x codebase. The security patch to address this vulnerability is now available. Read the alert here: csa.gov.sg/singcert/…

reply retweet favorite
5:51 am · February 4, 2021 ·
Retweeted by an2ni
Follow @an2ni

Now Reading

Coming up - the meat of this ebook with regards to WebApp Pentesting Methodology & Tricks...
Check this Malware Analysis out for the meantime..

RSS Hacking & Cracking

  • Is OneCoin A Scam? - Technical Analysis May 2, 2017 Rafay
  • How Pakistan's Critical Infrastructure Was Hacked? - Technical Analysis April 11, 2017 Rafay

RSS Tenable Security

  • Microsoft Teams: Vulnerability in Microsoft Power Apps Service Allows Theft of Emails, Files and More June 14, 2021
    A flaw in Microsoft Power Apps could allow attackers to steal emails, Teams messages and OneDrive files. Background Microsoft recently patched a vulnerability in Microsoft Teams, a business communication platform that has surged in popularity with the shift to a remote workforce, recording 145 million daily active users in April 2021. The vulnerability, which was […]
    Security Response Team

RSS Security WebCasts @ SANS

  • Vendor Sponsored: Network Security in the Cloud - 2021-06-30 14:30:00 June 30, 2021
  • Vendor Sponsored: A Case Study and a Checklist: Open Source vs Commercial vulnerability scanning - 2021-06-29 19:30:00 June 29, 2021
  • Vendor Sponsored: Achieving Data Privacy via Data Security - 2021-06-29 17:00:00 June 29, 2021
  • Vendor Sponsored: Memory Forensics Made Easy - 2021-06-29 14:30:00 June 29, 2021

RSS Latest Threat Tracking

  • Are You Vulnerable To Ransomware? 6 Questions to Ask Yourself May 5, 2021
    As the ransomware epidemic continues to spread, ask yourself how vulnerable your business is to cyber-extortion. Because ransomware incidents can severely impact business processes and leave organizations without the data they need to operate and deliver mission-critical services. A vulnerability assessment is a good first step to strengthening your defenses. Fending off ransomware attacks requires […]
    Lahn Bain

RSS Latest Vulnerability Exposures

  • CVE-2015-2790 March 30, 2015
    Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image. (CVSS:4.3) (Last Update:2016-12-03)
  • CVE-2015-2789 March 30, 2015
    Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder. (CVSS:4.4) (Last Update:2016-12-03)
Hack4Charity 2014 © Logo by Umair Khan