Zeus Sphinx Banking Trojan Arises Amid COVID-19
Threatpost - 30 March 2020, 6:19 pm
The malware is back after three years, looking to cash in on interest in government relief efforts around coronavirus.Read More
How to stay on top of coronavirus scams – and all the others too
Naked Security - 30 March 2020, 3:57 pm
The bad news is that you have to watch out for a plethora of new coronavirus cyberscams, as well as all the old stuff, too…Read More
Apple’s iOS 13.4 hit by VPN bypass vulnerability
Naked Security - 30 March 2020, 1:43 pm
It’s less than a week since iOS 13.4 appeared and already researchers have discovered a bug that puts at risk the privacy of VPN connections.Read More
Chrome may bring back ‘www’ with option to show full URLs
Naked Security - 30 March 2020, 12:41 pm
Google’s doing so grudgingly: it still thinks that showing too much will confuse users trying to assess a site’s security.Read More
Should governments track your location to fight COVID-19?
Naked Security - 30 March 2020, 12:00 pm
Google Maps data could help governments track patients that a newly-diagnosed COVID-19 sufferer has been in contact with.Read More
Google sent ~40K warnings to targets of state-backed attackers in 2019
Naked Security - 30 March 2020, 11:50 am
Google has seen a rising number of attackers impersonating news outlets and journalists to spread fake news among other reporters.Read More
Monday review – the hot 22 stories of the week
Naked Security - 30 March 2020, 9:41 am
From the return of the Martinelli WhatsApp hoax to the takedown of hacker forum Deer.io – and everything in between. It’s roundup time.Read More
Apple Unpatched VPN Bypass Bug Impacts iOS 13, Warn Researchers
Threatpost - 27 March 2020, 2:43 pm
The vulnerability can be exploited to reveal limited traffic data including a device’s IP address.Read More
Android apps are snooping on your installed software
Naked Security - 27 March 2020, 1:25 pm
Android apps are snooping on other software on your device – and that could tell shady advertising companies more about you than you’d like.Read More
Firefox 76 will have option to enforce HTTPS-only connections
Naked Security - 27 March 2020, 1:22 pm
The aim is to block the browser from reaching the small number of sites that cling to HTTP, closing security risks.Read More
Thousands of Dark Web sites deleted in attack on free hosting service
Naked Security - 27 March 2020, 11:50 am
It’s the second time that the popular Daniel’s Hosting platform was attacked in 16 months. This time, 7,600 Dark Web sites were obliterated.Read More
FBI takes down hacker platform Deer.io
Naked Security - 27 March 2020, 10:40 am
It was a top crooks’ market, with over 24,000 shops doing brisk business selling credentials for Netflix, Facebook, Twitter, and more.Read More
Critical CODESYS Bug Allows Remote Code Execution
Threatpost - 26 March 2020, 8:12 pm
CVE-2020-10245, a heap-based buffer overflow that rates 10 out of 10 in severity, exists in the CODESYS web server and takes little skill to exploit.Read More
Tupperware Cyberattack Stores Away Customer Payment Cards
Threatpost - 26 March 2020, 6:16 pm
The food container company’s main website had a card skimmer that scooped up online customers’ payment card data.Read More
Emerging APT Mounts Mass iPhone Surveillance Campaign
Threatpost - 26 March 2020, 5:49 pm
The malware, the work of a new APT called TwoSail Junk, allows deep surveillance and total control over iOS devices.Read More
As Zoom Booms, Incidents of ‘ZoomBombing’ Become a Growing Nuisance
Threatpost - 26 March 2020, 3:51 pm
Numerous instances of online conferences being disrupted by pornographic images, hate speech or even threats can be mitigated using some platform tools.Read More
Hackers Hijack Routers to Spread Malware Via Coronavirus Apps
Threatpost - 26 March 2020, 2:47 pm
The router DNS hijacking attacks have targeted more than a thousand victims with the Oski info-stealing malware.Read More
Tokyo Olympics Postponed, But 5G Security Lessons Shine
Threatpost - 26 March 2020, 9:49 am
Threatpost Senior Editor Tara Seals is joined by Russ Mohr, engineer and Apple evangelist at MobileIron along with Jerry Ray, COO at SecureAge, for a discussion about the now postponed Tokyo Games and its use of 5G and the myriad of security concerns Japan is preparing for.Read More
Apple Update Fixes WebKit Flaws in iOS, Safari
Threatpost - 25 March 2020, 9:07 pm
Apple’s security update included a slew of vulnerabilities in various components of iOS, macOS and Safari – the most severe of which could enable remote code execution.Read More
Chinese Hackers Exploit Cisco, Citrix Flaws in Massive Espionage Campaign
Threatpost - 25 March 2020, 3:57 pm
Researchers say that APT41’s exploits are part of one of the broadest espionage campaigns they’ve seen from a Chinese-linked actor “in recent years.”Read More

How businesses can view the Pentagon’s new cybersecurity standards
Fifth Domain - 28 March 2020, 1:32 am
What level of cyber hygiene makes the most sense for businesses to aspire to as part of the Cybersecurity Maturity Model Certification, the Department of Defense-mandated security framework? Here’s…Read More
Will coronavirus stall DoD’s Silicon Valley outreach efforts?
Fifth Domain - 27 March 2020, 4:05 pm
The Pentagon has been making inroads into the Silicon Valley-based venture capital community. Will COVID-19 force them to hit pause?Read More
Commission suggests creating reserve force of civilian cybersecurity experts
Fifth Domain - 26 March 2020, 6:52 pm
A new commission suggests several changes to address the government’s cybersecurity workforce problemsRead More
Who should be responsible for critical infrastructure’s cybersecurity?
Fifth Domain - 26 March 2020, 5:34 pm
A new survey asked IT professionals who they think should be tasked with securing critical infrastructure.Read More
Should government pay the ransom from digital hijacking?
Fifth Domain - 26 March 2020, 2:45 pm
The best protection against ransomware is prevention. But when it happens, how should the government deal with it?Read More
Amid pandemic, Pentagon urges ‘hyper-vigilance’ against foreign investment
Fifth Domain - 25 March 2020, 6:17 pm
The economic situation creates “greater attack surface” for foreign investment in key American companies, a top Defense Department official warned.Read More
One senator wants vendors to ensure their internet connectivity devices are secure
Fifth Domain - 25 March 2020, 4:39 pm
The senator also called on vendors to notify users of available security updates.Read More
Amazon opposes Pentagon’s proposal to reevaluate parts of its JEDI award
Fifth Domain - 24 March 2020, 9:26 pm
Amazon Web Services said the DoD’s proposal isn’t “fair and rational.”Read More
Trump administration must produce 5G security strategy under new law
Fifth Domain - 24 March 2020, 4:10 pm
The law requires the president to send a report to Congress on how the administration will address several 5G security challenges.Read More
How to protect sensitive military information in the age of COVID-19 teleworking
Fifth Domain - 24 March 2020, 2:29 pm
On Monday, officials at the U.S. Army Test and Evaluation Command in Maryland issued guidelines for how personnel should protect information.Read More
Europe eyes smartphone location data to stem virus spread
Fifth Domain - 24 March 2020, 1:30 pm
Several European nations are evaluating powerful but potentially intrusive tools for fighting the new coronavirus pandemic, a move that could put public health at odds with individual privacy.Read More
What COVID-19 can teach us about cyber resilience
Fifth Domain - 24 March 2020, 1:40 am
COVID-19 has created increased stress on our logistic, digital, public, and financial systems and this could in fact resemble what a major cyber conflict would mean to the general public.Read More
White House urges agencies to implement new authentication methods amid telework
Fifth Domain - 23 March 2020, 8:35 pm
Extended telework could mean agencies can’t hand out new identity verification cards.Read More
Pentagon loosens cash flow for industry, more measures likely coming
Fifth Domain - 23 March 2020, 2:45 pm
Industry will be getting more cash up front to help combat the impacts of the coronavirus.Read More
Pentagon declares defense contractors ‘critical infrastructure,’ must continue work
Fifth Domain - 20 March 2020, 10:47 pm
Defense contractors need to keep working, despite the viral outbreak, the department says.Read More
NIST asks for public comments on new cybersecurity risk management document
Fifth Domain - 20 March 2020, 3:15 pm
Public comments are open until April 20.Read More
The battle against disinformation is global
Fifth Domain - 20 March 2020, 3:03 pm
Disinformation-spewing online bots and trolls from halfway around the world are continuing to shape local and national debates by spreading lies online on a massive scale.Read More
Army postpones its industry day for a major cyber training contract
Fifth Domain - 20 March 2020, 12:52 am
The Army now plans to hold the industry day in late April.Read More
A new label to better protect critical infrastructure
Fifth Domain - 18 March 2020, 10:15 pm
A new report suggests that the federal government take steps to more actively defend networks of critical infrastructure operators.Read More
Barr says FBI probing cyber incident on federal network
Fifth Domain - 17 March 2020, 9:59 pm
U.S. national security officials said Monday there had been a “cyber incident” involving the computer networks of the Health and Human Services Department, but the networks were operating normally.Read More
Better data could be the missing link in cyber policy
Fifth Domain - 17 March 2020, 8:48 pm
Business and government are suffering from the lack of data on cyber incidents, members of a cyber policy group said.Read More
The Pentagon is handling cyber vulnerabilities inconsistently
Fifth Domain - 17 March 2020, 4:52 pm
A new Department of Defense Inspector General report finds DoD didn’t take all the necessary steps to mitigate vulnerabilities found by cyber red teams.Read More
Feds dropping case for 2 Russian companies in troll probe
Fifth Domain - 17 March 2020, 3:33 pm
Concord Management and Consulting LLC and Concord Catering were among three companies and 13 individuals charged in 2018 by special counsel Robert Mueller in a conspiracy to spread disinformation on…Read More
DoD networks face severe strains from telework
Fifth Domain - 16 March 2020, 11:49 pm
With an increased number of DoD employees teleworking, the network is being heavily taxed, a top cybersecurity official said.Read More
Ways government, industry can overcome a perpetual challenge
Fifth Domain - 16 March 2020, 9:54 pm
A recent report takes aim at improving information sharing between feds and the private sector to build a complete threat picture.Read More

Category:

Reviews

Best PHP Web Shells

By Sunny Hoi January 28, 2019

By Sunny Hoi

In this review, we will take a look at the best PHP web shells available to…
Best Shock Mounts For Sennheiser MKH 416

By Sunny Hoi January 19, 2019

By Sunny Hoi

Introduction Broadcast professionals who recently bought a Sennheiser MKH 416 or have been using the included…
Marshall Woburn II Bluetooth Speaker Review

By Sunny Hoi December 10, 2018

By Sunny Hoi

Introduction It’s been a couple of years that the Marshall brand has been transiting from music amplifiers…
Amazon Kindle Oasis Leather Cover (2018) Review

By Sunny Hoi November 21, 2018

By Sunny Hoi

When the 2nd generation Kindle Oasis was released in 2017, Amazon crafted leather and fabric cover…
Amazon Kindle Oasis (2017) Review

By Sunny Hoi November 20, 2018

By Sunny Hoi

If there is one thing that Amazon does exceptionally well, it is crafting e-readers. Amazon’s latest…
Imperva Incapsula WAF & CDN Review

By Sunny Hoi November 3, 2017

By Sunny Hoi

What Is Imperva Incapsula? Imperva Incapsula is a security-oriented CDN that provides industry-leading web application security…
Beyerdynamic T1 2nd Generation Review

By Sunny Hoi August 8, 2017

By Sunny Hoi

Introduction I purchased the Beyerdynamic T1 2nd Gen headphones from Amazon Canada for $1,101 (before tax) a…
How To Setup Imperva Incapsula With Sucuri WAF

By Sunny Hoi July 7, 2017

By Sunny Hoi

Why Setup And Use Imperva Incapsula CDN And WAF With Another Cloud-Based WAF Like Sucuri CloudProxy…
How To Setup Cloudflare CDN And Sucuri WAF To Protect Origin Server

By Sunny Hoi April 9, 2017

By Sunny Hoi

One method I adopt to protect my server infrastructure/hide origin server IP is using both Cloudflare…
Sucuri CloudProxy Firewall Review

By Sunny Hoi November 1, 2016

By Sunny Hoi

What is Sucuri CloudProxy (Firewall)? Sucuri CloudProxy incorporates a state-of-the-art Web Application Firewall (WAF), Intrusion Detection…

Load More Posts

Project iKy v2.4.0 - Tool That Collects Information From An Email And Shows Results In A Nice Visual Interface
KitPloit - PenTest & Hacking Tools - 29 March 2020, 10:02 pm
Project iKy is a tool that collects information from an…Read More
SauronEye - Search Tool To Find Specific Files Containing Specific Words, I.E. Files Containing Passwords
KitPloit - PenTest & Hacking Tools - 29 March 2020, 12:00 pm
SauronEye is a search tool built to aid red teams…Read More
Webkiller v2.0 - Tool Information Gathering
KitPloit - PenTest & Hacking Tools - 28 March 2020, 8:10 pm
Tool Information Gathering Write With Python.PreView ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗…Read More
InQL Scanner - A Burp Extension For GraphQL Security Testing
KitPloit - PenTest & Hacking Tools - 28 March 2020, 12:00 pm
A security testing tool to facilitate GraphQL technology security auditing…Read More
Mssqlproxy - A Toolkit Aimed To Perform Lateral Movement In Restricted Environments Through A Compromised Microsoft SQL Server Via Socket Reuse
KitPloit - PenTest & Hacking Tools - 27 March 2020, 9:00 pm
mssqlproxy is a toolkit aimed to perform lateral movement in…Read More
ProjectOpal - Stealth Post-Exploitation Framework For Wordpress
KitPloit - PenTest & Hacking Tools - 27 March 2020, 12:00 pm
Stealth post-exploitation framework for Wordpress CMSOfficial ProjectOpal Repository.What is it…Read More
Tinfoil Chat - Onion-routed, Endpoint Secure Messaging System
KitPloit - PenTest & Hacking Tools - 27 March 2020, 12:49 am
Tinfoil Chat (TFC) is a FOSS+FHD peer-to-peer messaging system that…Read More
ConEmu - Customizable Windows Terminal With Tabs, Splits, Quake-Style, Hotkeys And More
KitPloit - PenTest & Hacking Tools - 27 March 2020, 12:45 am
ConEmu-Maximus5 is a Windows console emulator with tabs, which represents…Read More
Ninja - Open Source C2 Server Created For Stealth Red Team Operations
KitPloit - PenTest & Hacking Tools - 26 March 2020, 8:30 pm
Ninja C2 is an Open source C2 server created by…Read More
RapidPayload - Metasploit Payload Generator
KitPloit - PenTest & Hacking Tools - 26 March 2020, 12:00 pm
Framework RapidPayload – Metasploit Payload Generator Requirements OpenJDK 8 (JAVA),…Read More

CVE-2020-10940 March 27, 2020
Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.
CVE-2020-10939 March 27, 2020
Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation.
CVE-2020-6095 March 27, 2020
An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.
CVE-2020-10952 March 27, 2020
GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images.
CVE-2020-10953 March 27, 2020
In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue.