Home
> Uncategorized > Security News
Security News
- Want to know what what the story is behind the latest Microsoft security patches? Take a look at The Laws of Vulnerabilities or Security Street.
- Nessus 5.0 was released this week.
- SSL has been in the news this week, in part because of weaknesses in how pseudo random number generators have been used to generate the keys. See the work of Heninger et. al. or the work of Lenstra et. al.
- Recent versions of sudo- 1.8.0 through 1.8.3p1 are vulnerable to a format string attack. Explanations of how to exploit it are now in the wild.
- Pentestmonkey has a new post describing mimikatz and how to use the tool to pull plain text passwords from logged in windows users.
Categories: Uncategorized
Comments (0)
Trackbacks (0)
Leave a comment
Trackback
Darknet
- padre – Padding Oracle Attack Exploiter Tool
- Privacy Implications of Web 3.0 and Darknets
- DataSurgeon – Extract Sensitive Information (PII) From Logs
- Pwnagotchi – Maximize Crackable WPA Key Material For Bettercap
- HardCIDR – Network CIDR and Range Discovery Tool
- Socialscan – Command-Line Tool To Check For Email And Social Media Username Usage
- CFRipper – CloudFormation Security Scanning & Audit Tool
- CredNinja – Test Credential Validity of Dumped Credentials or Hashes
- assetfinder – Find Related Domains and Subdomains
- Karkinos – Beginner Friendly Penetration Testing Tool
Windows Security
- An error has occurred; the feed is probably down. Try again later.
Security Focus Vulnerabilities
- An error has occurred; the feed is probably down. Try again later.
Security Bloggers Network
- An error has occurred; the feed is probably down. Try again later.
Krebs on Security
- Barracuda Urges Replacing — Not Patching — Its Email Security Gateways
- Service Rents Email Addresses for Account Signups
- Ask Fitis, the Bear: Real Crooks Sign Their Malware
- Discord Admins Hacked by Malicious Bookmarks
- Phishing Domains Tanked After Meta Sued Freenom
- Interview With a Crypto Scam Investment Spammer
- Russian Hacker “Wazawaka” Indicted for Ransomware
- Re-Victimization from Police-Auctioned Cell Phones
- Microsoft Patch Tuesday, May 2023 Edition
- Feds Take Down 13 More DDoS-for-Hire Services
CyberOperations 