Security Operations
New Forensics challenge by Honeynet project
If you enjoy challenges, especially forensic ones – here is another one brought by Honeynet project. It is suitable even for beginners :). The solutions should be submitted by 30th of March so hurry up 🙂
Why the shoemaker walks barefoot?
For a long time I’ve refrained from commenting on the HBGary case. And that’s because everyone already spoke out louder their own opinions. So I thought that everything is already said. Today I found small chunk of time to read some RSS feed entries left behind of my reading schedule. One of them a “The…
Online Banking targeted by new Zeus version for Windows mobile
For those of you that never heard for Zeus trojan – this is special bread that targets online banking users, stealing their credentials. It does implement pretty old idea for key logging. Zeus botnet however is huge and estimated to contain millions of compromised computer. Internet is full of detailed information. The trojan is active…
Long live GSM insecurity
During the second day of the 27th Chaos Communication Congress Karsten Nohl and Sylvain Munaut demonstrated why gsm calls and messaging should be considered insecure more than ever. For details visit the congress website. Enjoy!
Mozilla launches bug hunting program
Bug hunting programs seem to gain more and more popularity those days. The new kid on the block is the Mozilla one, which official guidelines can be find on https://www.mozilla.org/security/bug-bounty.html So for all of you hunters I would like to wish you good luck and happy hunting 😉 Enjoy!
Statistics and Crime reduction technologies
IBM statistical based CRUSH system is going to be tested in real life: http://www.techwatch.co.uk/2010/07/26/police-to-use-%E2%80%9Cminority-report%E2%80%9D-style-crime-prediction-software/
Basic information security attack types
Purely technical The attacker count on weaknesses in protocol implementation, application, OS, firmware etc.. Those attacks can be easily automated and if the vulnerability is well known pretty easy to defend of. On the other hand the attack can come basically from any part of the world and is very hard to trace, because it…
Don’t ever do this 🙂
To miss the target and to hit someone else instead can happen easily in a mil operation, but to deface a site believing that it is your real target and to make a mistake should be a shame for every so called hacker. The lesson from the story: http://www.itproportal.com/portal/news/article/2010/9/1/algerian-hackers-attack-wrong-website/ Do your homework!
Acrobat Reader under siege again or Why to update Acrobat Reader?
Adobe still fights the ripples from the vulnerability announced on 15.12.2009. All the versions prior 9.2 are vulnerable to malicious Javascripts that allow shell execution attack to be successfully performed. The colleagues from Trend Micro had spotted a new malware able to exploit this particular vulnerability. More info on: http://blog.trendmicro.com/unpatched-adobe-vulnerability-is-still-being-exploited-in-the-wild/
Pangolin – нова програмка за тестване на сигурността на база данни
NOSEC anonced a new DB security testing tool, called Pangolin. The free version of the product is able to test only Microsoft databases – have to find a way to crack it. Let’s hope that Pangolin will behave better than Matrix assessment tool. Enjoy http://www.nosec.org/en/pangolin.html
Recent Posts
Tags
bruteforce bug bounty bug hunting Burp Suite d3 data leak data recovery dictionary entropy pool fix fuzzing hackaday image processing Journalistic tools log analysis malware mindmap online courses Practical Reverse Engineering randomness sandbox skype SQL injection SSL technical visualisaiton visualisation Vulnerability Management Wanda the fish Zeus