Critical WordPress Plugin Bug Can Lock Admins Out of Websites
Threatpost - 1 April 2020, 6:03 pm
A second vulnerability could be used to prevent access to almost all of a site’s existing content, by simply redirecting visitors.Read More
Two Zoom Zero-Day Flaws Uncovered
Threatpost - 1 April 2020, 4:00 pm
The zero-day Zoom flaws could give local, unprivileged attackers root privileges, and allow them to access victims’ microphone and camera.Read More
Top Email Protections Fail in Latest COVID-19 Phishing Campaign
Threatpost - 1 April 2020, 1:27 pm
An effective spoofing campaign promises users important information about new coronavirus cases in their local area, scooting past Proofpoint and Microsoft Office 356 ATPs.Read More
Bill Gates’s YouTube ‘Bitcoin giveaway’ is a big fat scam
Naked Security - 1 April 2020, 1:15 pm
And no, Microsoft said, none of our verified accounts have been hijacked, vehemently denying early reports.Read More
QR code generator scam steals thousands in Bitcoin
Naked Security - 1 April 2020, 1:04 pm
Every once in a while an attack comes along that is so simple to set up, and yet so effective, that it makes your jaw drop. Here’s one.Read More
Microsoft’s Edge browser to get breached credential alerts
Naked Security - 1 April 2020, 11:29 am
Microsoft has announced a list of new security and privacy features it plans to add to forthcoming versions in an effort to take on its rivals.Read More
Watering-Holes Target Asian Ethnic Victims with Flash Update Decoy
Threatpost - 31 March 2020, 9:16 pm
About 10 compromised websites employ a multi-stage, targeted effort to fingerprint and compromise victims.Read More
Zoom Scrutinized As Security Woes Mount
Threatpost - 31 March 2020, 5:35 pm
The New York Attorney General has inquired about Zoom’s data security strategy, as the conferencing platform comes under heavy scrutiny for its privacy policies.Read More
8-Year-Old VelvetSweatshop Bug Resurrected in LimeRAT Campaign
Threatpost - 31 March 2020, 5:14 pm
An old RAT learns an old trick.Read More
Marriott International confirms data breach of up to 5.2 million guests
Naked Security - 31 March 2020, 3:41 pm
Marriott International has today announced that it has suffered a data breach affecting up to 5.2 million people.Read More
Millions of Guests Impacted in Marriott Data Breach, Again
Threatpost - 31 March 2020, 3:14 pm
The second breach in less than 24 months stemmed from employee account compromises.Read More
Patch now! Critical flaw found in OpenWrt router software
Naked Security - 31 March 2020, 2:18 pm
OpenWrt is an open source operating system used by millions of home and small business routers and embedded devices.Read More
Dharma ransomware source code on sale for $2,000
Naked Security - 31 March 2020, 2:17 pm
The source code for ransomware-as-a-service strain Dharma has been put up for sale by hackers.Read More
Data on almost every citizen of Georgia posted on hacker forum
Naked Security - 31 March 2020, 11:07 am
Where did it all come from? 4.9m records were posted on a hacking forum – and the country only has an estimated population of 3.7m.Read More
Researchers speed the death of ‘bad’ data in the race against good
Naked Security - 31 March 2020, 10:42 am
They have a way to inject ‘good’ data – i.e., accurate COVID-19 news or security patches – to outpace the spread of fake news or malware.Read More
Covid-19 Poll Results: One in Four Prioritize Health Over Privacy
Threatpost - 31 March 2020, 10:00 am
An informal Threatpost reader poll shows the majority of site visitors are privacy absolutists. But attitudes shift when the trade off is saving lives.Read More
“Instant bank fraud” warning spread on WhatsApp is a hoax
Naked Security - 31 March 2020, 8:25 am
No, we don’t know why people start hoaxes like this. You can do your bit by not forwarding them, not even “just in case”.Read More
5 tips for keeping your data safe this World Backup Day
Naked Security - 30 March 2020, 11:16 pm
The only backup you will ever regret… is the one you didn’t makeRead More
Nation-State Attacks Drop in Latest Google Analysis
Threatpost - 30 March 2020, 8:53 pm
Phishing and zero-days continue to be a core part of the APT arsenal.Read More
Zoom Kills iOS App’s Data-Sharing Facebook Feature
Threatpost - 30 March 2020, 7:27 pm
Zoom removed its Facebook SDK for iOS feature after a report found the app sending Facebook “unnecessary” user data.Read More

Government meeting? Work call? Virtual happy hour? How to better secure that meetup
Fifth Domain - 31 March 2020, 9:00 pm
In this age of telework, dangers continue to lurk at home in digital meetups. But there are steps you can take to ensure privacy.Read More
The most resilient organizations follow outcome-based cybersecurity
Fifth Domain - 31 March 2020, 2:15 am
Compliance-based cyber is a comforting checklist of determining a risk profile, setting controls, and measuring compliance to controls. That’s become foundational to cyber security programs, but it’s…Read More
How businesses can view the Pentagon’s new cybersecurity standards
Fifth Domain - 30 March 2020, 7:41 pm
What level of cyber hygiene makes the most sense for businesses to aspire to as part of the Cybersecurity Maturity Model Certification, the Department of Defense-mandated security framework? Here’s…Read More
Pentagon seeks to classify future year defense spending plans
Fifth Domain - 30 March 2020, 3:16 pm
The Future Year Defense Program spending projections have been unclassified since 1989.Read More
Will coronavirus stall DoD’s Silicon Valley outreach efforts?
Fifth Domain - 27 March 2020, 4:05 pm
The Pentagon has been making inroads into the Silicon Valley-based venture capital community. Will COVID-19 force them to hit pause?Read More
Commission suggests creating reserve force of civilian cybersecurity experts
Fifth Domain - 26 March 2020, 6:52 pm
A new commission suggests several changes to address the government’s cybersecurity workforce problemsRead More
Who should be responsible for critical infrastructure’s cybersecurity?
Fifth Domain - 26 March 2020, 5:34 pm
A new survey asked IT professionals who they think should be tasked with securing critical infrastructure.Read More
Should government pay the ransom from digital hijacking?
Fifth Domain - 26 March 2020, 2:45 pm
The best protection against ransomware is prevention. But when it happens, how should the government deal with it?Read More
Amid pandemic, Pentagon urges ‘hyper-vigilance’ against foreign investment
Fifth Domain - 25 March 2020, 6:17 pm
The economic situation creates “greater attack surface” for foreign investment in key American companies, a top Defense Department official warned.Read More
One senator wants vendors to ensure their internet connectivity devices are secure
Fifth Domain - 25 March 2020, 4:39 pm
The senator also called on vendors to notify users of available security updates.Read More
Amazon opposes Pentagon’s proposal to reevaluate parts of its JEDI award
Fifth Domain - 24 March 2020, 9:26 pm
Amazon Web Services said the DoD’s proposal isn’t “fair and rational.”Read More
Trump administration must produce 5G security strategy under new law
Fifth Domain - 24 March 2020, 4:10 pm
The law requires the president to send a report to Congress on how the administration will address several 5G security challenges.Read More
How to protect sensitive military information in the age of COVID-19 teleworking
Fifth Domain - 24 March 2020, 2:29 pm
On Monday, officials at the U.S. Army Test and Evaluation Command in Maryland issued guidelines for how personnel should protect information.Read More
Europe eyes smartphone location data to stem virus spread
Fifth Domain - 24 March 2020, 1:30 pm
Several European nations are evaluating powerful but potentially intrusive tools for fighting the new coronavirus pandemic, a move that could put public health at odds with individual privacy.Read More
What COVID-19 can teach us about cyber resilience
Fifth Domain - 24 March 2020, 1:40 am
COVID-19 has created increased stress on our logistic, digital, public, and financial systems and this could in fact resemble what a major cyber conflict would mean to the general public.Read More
White House urges agencies to implement new authentication methods amid telework
Fifth Domain - 23 March 2020, 8:35 pm
Extended telework could mean agencies can’t hand out new identity verification cards.Read More
Pentagon loosens cash flow for industry, more measures likely coming
Fifth Domain - 23 March 2020, 2:45 pm
Industry will be getting more cash up front to help combat the impacts of the coronavirus.Read More
Pentagon declares defense contractors ‘critical infrastructure,’ must continue work
Fifth Domain - 20 March 2020, 10:47 pm
Defense contractors need to keep working, despite the viral outbreak, the department says.Read More
NIST asks for public comments on new cybersecurity risk management document
Fifth Domain - 20 March 2020, 3:15 pm
Public comments are open until April 20.Read More
The battle against disinformation is global
Fifth Domain - 20 March 2020, 3:03 pm
Disinformation-spewing online bots and trolls from halfway around the world are continuing to shape local and national debates by spreading lies online on a massive scale.Read More
Army postpones its industry day for a major cyber training contract
Fifth Domain - 20 March 2020, 12:52 am
The Army now plans to hold the industry day in late April.Read More
A new label to better protect critical infrastructure
Fifth Domain - 18 March 2020, 10:15 pm
A new report suggests that the federal government take steps to more actively defend networks of critical infrastructure operators.Read More
Barr says FBI probing cyber incident on federal network
Fifth Domain - 17 March 2020, 9:59 pm
U.S. national security officials said Monday there had been a “cyber incident” involving the computer networks of the Health and Human Services Department, but the networks were operating normally.Read More
Better data could be the missing link in cyber policy
Fifth Domain - 17 March 2020, 8:48 pm
Business and government are suffering from the lack of data on cyber incidents, members of a cyber policy group said.Read More
The Pentagon is handling cyber vulnerabilities inconsistently
Fifth Domain - 17 March 2020, 4:52 pm
A new Department of Defense Inspector General report finds DoD didn’t take all the necessary steps to mitigate vulnerabilities found by cyber red teams.Read More

Category:

Wireless Security

How To Detect Nmap SMB Brute-Force Attack Using Wireshark

By Sunny Hoi March 12, 2019

By Sunny Hoi

Advantages of Nmap SMB Brute We will use the Nmap smb-brute script which tries to guess…
How To Perform A Man-In-The-Middle Attack Using Ettercap In Kali Linux

By Sunny Hoi January 26, 2019

By Sunny Hoi

Professional penetration testers deploy various tools during their penetration tests. When an IT security professional has…
Top 10 Holiday Gifts For Hackers In 2018

By Sunny Hoi December 4, 2018

By Sunny Hoi

The holidays are coming. This means that we’ve curated a shopping list of the top 10…
How To Crack WPA/WPA2 Wi-Fi Passwords Using Aircrack-Ng In Kali

By Sunny Hoi September 14, 2017

By Sunny Hoi

Introduction (The Ultimate Guide To Cracking WPA/WPA2 Wireless Networks) This article teaches you how to easily…
How To Change Your MAC Address And Computer Name In macOS

By Sunny Hoi August 5, 2017

By Sunny Hoi

Two Methods For Changing The MAC Address in macOS This article presents two methods for cloning…
Why Restaurants Are The Perfect Target For Hackers

By Sunny Hoi July 24, 2017

By Sunny Hoi

Introduction Any business that connects to the cyberspace is at risk of being a target for…
The Solution To CIA’s OutlawCountry Exploit

By Sunny Hoi July 4, 2017

By Sunny Hoi

What The CIA’s OutlawCountry Malware Can Do To Your Computer A CIA spy can make use…
Which Is Better: TOR over VPN Or VPN over TOR?

By Sunny Hoi June 1, 2017

By Sunny Hoi

Introduction There has always been a lack of clarity in relation to the privacy and anonymity…
What To Do Before Moving A Site From HTTP To HTTPS

By Sunny Hoi May 9, 2017

By Sunny Hoi

Unencrypted HTTP used to be adequate for blogs and websites that didn’t request for any sensitive…
5 Best Entry-Level IT Certifications

By Sunny Hoi May 3, 2017

By Sunny Hoi

In a world where information technology is increasingly becoming more significant in our lives, work experience…

Load More Posts

MSSQLi-DUET - SQL Injection Script For MSSQL That Extracts Domain Users From An Active Directory Environment Based On RID Bruteforcing
KitPloit - PenTest & Hacking Tools - 1 April 2020, 11:30 am
SQL injection script for MSSQL that extracts domain users from…Read More
Awspx - A Graph-Based Tool For Visualizing Effective Access And Resource Relationships In AWS Environments
KitPloit - PenTest & Hacking Tools - 31 March 2020, 8:30 pm
auspex [ˈau̯s.pɛks] noun: An augur of ancient Rome, especially one…Read More
Pulsar - Network Footprint Scanner Platform - Discover Domains And Run Your Custom Checks Periodically
KitPloit - PenTest & Hacking Tools - 31 March 2020, 11:30 am
Pulsar is an automated network footprint scanner for Red Teams,…Read More
CVE-2020-0796 - Windows SMBv3 LPE Exploit #SMBGhost
KitPloit - PenTest & Hacking Tools - 31 March 2020, 12:50 am
Windows SMBv3 LPE Exploit Authors Daniel García Gutiérrez (@danigargu) Manuel…Read More
CVE-2020-0796 - CVE-2020-0796 Pre-Auth POC
KitPloit - PenTest & Hacking Tools - 31 March 2020, 12:47 am
(c) 2020 ZecOps, Inc. – https://www.zecops.com – Find Attackers’ Mistakes…Read More
R00Kie-Kr00Kie - PoC Exploit For The CVE-2019-15126 Kr00K Vulnerability
KitPloit - PenTest & Hacking Tools - 30 March 2020, 8:30 pm
DisclaimerThis is a PoC exploit for the CVE-2019-15126 kr00k vulnerability.This…Read More
One-Lin3r v2.1 - Gives You One-Liners That Aids In Penetration Testing Operations, Privilege Escalation And More
KitPloit - PenTest & Hacking Tools - 30 March 2020, 11:30 am
One-Lin3r is simple modular and light-weight framework gives you all…Read More
Project iKy v2.4.0 - Tool That Collects Information From An Email And Shows Results In A Nice Visual Interface
KitPloit - PenTest & Hacking Tools - 29 March 2020, 10:02 pm
Project iKy is a tool that collects information from an…Read More
SauronEye - Search Tool To Find Specific Files Containing Specific Words, I.E. Files Containing Passwords
KitPloit - PenTest & Hacking Tools - 29 March 2020, 12:00 pm
SauronEye is a search tool built to aid red teams…Read More
Webkiller v2.0 - Tool Information Gathering
KitPloit - PenTest & Hacking Tools - 28 March 2020, 8:10 pm
Tool Information Gathering Write With Python.PreView ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗…Read More

CVE-2020-10864 April 1, 2020
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to trigger a reboot via RPC from a Low Integrity process.
CVE-2020-10861 April 1, 2020
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to achieve Arbitrary File Deletion from Avast Program Path via RPC, when Self Defense is Enabled.
CVE-2020-10863 April 1, 2020
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to trigger a shutdown via RPC from a Low Integrity process via TempShutDownMachine.
CVE-2020-10862 April 1, 2020
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to achieve Local Privilege Escalation (LPE) via RPC.
CVE-2020-10860 April 1, 2020
An issue was discovered in Avast Antivirus before 20. An Arbitrary Memory Address Overwrite vulnerability in the aswAvLog Log Library results in Denial of Service of the Avast Service (AvastSvc.exe).