Author: Blog

Written by Jeff Stone
Mar 30, 2020 | CYBERSCOOP

Tim Manley didn’t even know who to call.

Basic security hygiene, such as patching and updates are time-consuming and never-ending for IT security personnel.

Hello and welcome! My name is John Strand. In this video, we’re going to be talking about using SpiderTrap to entrap and ensnare any web application pentesters or hackers that are trying to come into your web applications.

Cities and states around the country are ordering shelter in place notices. Non-essential businesses are shutting their doors in order to limit physical contact and flatten the curve of the coronavirus.. Hospitals, doctor’s offices, restaurants, and grocery stores remain open. In many places, so do independent repair stores. As America’s office workers have started working from home en mass, independent repair stores have become more important than ever.

These are unprecedented times, and everyone is going through a testing period, with more than 3 billion people locked down all over the world.

The boom in working from home has become a bonanza for cyber attackers. Each time an employee connects to the corporate network from their home they create an access point that can often be exploited. With Windows Active Directory (AD) still being the core identity and access platform for businesses around the world, the single best thing you can do to improve security is to protect the remote use of these Active Directory credentials.

In a couple of my recent diaries, we discussed two small unpatched vulnerabilities/weaknesses in Windows. One, which allowed us to brute-force contents of folders without any permissions[1], and another, which enabled us to change names of files and folders without actually renaming them[2]. Today, we’ll add another vulnerability/weakness to the collection – this one will allow us to cause a temporary DoS condition for the Explorer process (i.e. we will crash it) and/or for other processes. It is interesting since all that is required for it to work is that a user opens a link or visits a folder with a specially crafted file.

Today is National Vietnam War Veteran’s Day, set on March 29th because in 1973 it was the last day American combat troops were in the Republic of Vietnam. The White House in 2012 gave a Presidential Proclamation to create a national day for Vietnam War veterans.

Is there a comparison between the Age of Discovery and drivers for the exploration and commercialization of space? One could argue that minerals on asteroids could be seen as the present-day equivalent of the Age of Discovery’s highly-prized Asian spices. And that actually getting these 16th century spices back to Europe was arguably just as arduous and seemingly difficult as any initiative to return exotic materials from a near-Earth asteroid… Risk is inherent in any off-world human voyage. But when it comes to safety, today’s technology and current knowledge of in situ conditions on Mars itself will arguably give future explorers an inherent edge over Magellan’s generation.

Lawmakers and security experts have long warned of security flaws in the underbelly of the world’s cell networks. Now a whistleblower says the Saudi government is exploiting those flaws to track its citizens across the U.S. as part of a “systematic” surveillance campaign.

Hello folks, welcome back (or hi for the first time) to The Station, a weekly newsletter dedicated to the all the ways people and packages move around this world. I’m your host, Kirsten Korosec, senior transportation reporter at TechCrunch.

The company became a household name in July 2015, when hackers stole data on 32 million cheating spouses. The leak of sensitive data led to spouses discovering that their significant others were cheating. Divorces, breakups, and suicides ensued. The hackers also exposed that Ashley Madison used bots posing as attractive young women to lure men into engaging more with the site. The company says it has since beefed up its security and rid itself of the bots. And now it’s more than double the size it was at the time of the hack, with over 65 million members last year. During 2019, the company added 15,500 new members a day. More recently, in the midst of the COVID-19 pandemic, it has been adding 17,000 new members a day.

Today we will be taking a look at how we can dump Wireless Credentials. We will cover Credential Dumping, Red Teaming, Different ways we can get those pesky wireless credentials.

In case you’re one of those computer shoppers who instinctively turns up their nose at the very mention of the word refurbished, here are a couple myths worth dispelling.

PoshC2 is an open-source remote administration and post-exploitation framework that is publicly available on GitHub. The server-side components of the tool are primarily written in Python, while the implants are written in PowerShell. Although PoshC2 primarily focuses on Windows implantation, it does contain a basic Python dropper for Linux/macOS.

Amazon has been replacing all of our keyboards for some time now, along with our mice and our failed cables, and even entire PCs. IT has been changing steadily from kids taking elevators up from the sub-basement to Amazon Prime trucks rolling-up to your mailbox. At the same time, our network providers have been working to limit their truck rolls entirely. Stop by the Comcast storefront to get your cable modem, because nobody is going to come to install it if you aren’t the first person living there to have cable…

Thanks to 0xdade for publishing these outstanding Shmoocon 2020 Convention videos via the 0xdade YouTube channel and the 0xdade Shmoocon 2020 Playlist for everyone to view, learn and, of course, enjoy.

TechCrunch is out hunting for bright spots in the startup world as we all come to grips with the pandemic — particularly where checks are actually being written despite everything.

The relationship between the United Kingdom and Australia is not usually a flashpoint in international relations. After all, the two allies share a common language, ancestry, and monarch. So what caused a dustup recently that saw a senior Australian parliamentarian rebuke the British foreign secretary, and for a group of Australian MPs to then cancel a trip to London in protest?

As the world continues to adjust to the reality of the new coronavirus, scammers are increasingly taking advantage as well. But one Twitch streamer has been calling them out before a live audience of thousands. And as health care systems become increasingly overwhelmed, the Army Corps of Engineers has drawn up plans to convert hotels, dorms, and even convention centers into makeshift hospitals.