How the Pentagon Keeps Its App Store Secure
Credit to Author: Lily Hay Newman| Date: Tue, 03 Jul 2018 17:23:08 +0000
To keep malware at bay, the GEOINT App Store has created a screening process that no commercial platform could ever match.
Read MoreComputer Security Articles
RSS Reader for Computer Security Articles
SCOTUS and Congress Leave the Right to Privacy Up for Grabs
Credit to Author: Louise Matsakis| Date: Tue, 03 Jul 2018 15:49:08 +0000
As the push for more digital privacy grows, the question is whether the courts or lawmakers will step up to protect our rights—or if it will fall through the cracks.
Read MoreObfuscated Coinhive shortlink reveals larger mining operation
Credit to Author: Jérôme Segura| Date: Tue, 03 Jul 2018 15:00:00 +0000
 | |
| A web miner injected into compromised sites is just the tip of the iceberg for an infrastructure hosting malicious Windows and Linux coin miners. Categories: Tags: cnhvcoinhiveminingmoneroshortlinks |
The post Obfuscated Coinhive shortlink reveals larger mining operation appeared first on Malwarebytes Labs.
Read MoreThe difference between red team engagements and vulnerability assessments | Salted Hash Ep 34
In this episode, host Steve Ragan talks with Phil Grimes, Professional Services Lead at RedLegg, about the challenges of educating customers — and building a partnership with them — to create successful red team engagements.
SSD Advisory – phpMyAdmin File Inclusion and Remote Code Execution
Credit to Author: SSD / Ori Nimron| Date: Mon, 02 Jul 2018 12:19:53 +0000
Vulnerabilities Summary Authenticated users can exploit a file inclusion vulnerability in phpMyAdmin which can then be combined with another vulnerability, to perform Remote Code Execution. In addition, authnticated attackers can view files and execute PHP files that located on the server by exploiting a bug in the part of the code that is responsible for … Continue reading SSD Advisory – phpMyAdmin File Inclusion and Remote Code Execution
Read MoreHack2Win eXtreme Warm Up
Credit to Author: SSD / Noam Rathaus| Date: Mon, 02 Jul 2018 10:55:25 +0000
In our upcoming Hack2Win eXtreme event in Hong Kong we will be asking contest participants to come and try their skills breaking into devices and software, showing their abilities in finding vulnerabilities in iOS and Android, as well as in Chrome and Firefox. In preparation for the event, we are launching a “warm up” event … Continue reading Hack2Win eXtreme Warm Up
Read MoreNew macro-less technique to distribute malware
Credit to Author: Jérôme Segura| Date: Mon, 02 Jul 2018 21:12:47 +0000
 | |
| The latest macro-less technique to distribute malware via Office documents does not involve exploits. Just a little bit of social engineering. Categories: Tags: deeplinkmacro-lessmalwareOfficesettingcontent-ms |
The post New macro-less technique to distribute malware appeared first on Malwarebytes Labs.
Read MoreAssessing Microsoft 365 security solutions using the NIST Cybersecurity Framework
Credit to Author: Microsoft Secure Blog Staff| Date: Mon, 02 Jul 2018 19:00:38 +0000
This blog is part of a series that responds to common questions we receive from customers about deployment of Microsoft 365 security solutions. In this series, youll find context, answers, and guidance for deployment and driving adoption within your organization. Check out our last blogNew FastTrack benefit: Deployment support for Co-management on Windows 10 devices.
Read More