Collaborate Disseminate
Verizon is the latest company to leak confidential data through an exposed Amazon S3 bucket. Continue reading Verizon Wireless Internal Credentials, Infrastructure Details Exposed in Amazon S3 Bucket
Samba released three security updates, including two related to SMB connections that could be abused by an attacker already on the network to hijack connections and manipulate traffic or data sent from a client. Continue reading Samba Update Patches Two SMB-Related MiTM Bugs
Joomla on Tuesday patched a critical LDAP injection vulnerability that had lingered in the content management system for eight years. Attackers could use this bug to steal admin login credentials. Continue reading Joomla Patches Eight-Year-Old LDAP Injection Vulnerability
A deep-learning network known as a GAN has been applied to passwords, and a tool called PassGAN significantly improves the ability to guess user passwords over tools such as Hashcat or John the Ripper. Continue reading Deep-Learning PassGAN Tool Improves Password Guessing
Apple released a number of patches, including a security update for iOS 11, which is available today. Continue reading iOS 11 Update includes Patches for Eight Vulnerabilities
The risks surrounding the latest Apache bug, called Optionsbleed, are limited given it can only be attacked under certain conditions. Apache, and many Linux distributions, have patched the flaw. Continue reading Risks Limited With Latest Apache Bug, Optionsbleed
An IDN homograph attack leveraging Adobe’s brand has been discovered, with the malicious site spreading the Betabot backdoor Continue reading IDN Homograph Attack Spreading Betabot Backdoor
F5 Labs has detected a WireX variant capable of launching UDP flood DDoS attacks. Continue reading WireX Variant Capable of UDP Flood Attacks
Thousands of resumes and job applications from U.S. military veterans, law enforcement, and others were leaked by a recruiting vendor in an unsecured AWS S3 bucket. Continue reading Military Contractor’s Vendor Leaks Resumes in Misconfigured AWS S3
As recently as Wednesday afternoon, a U.S. government website was hosting a malicious JavaScript downloader that led victims to installations of Cerber ransomware. The malware link has since been taken down. Continue reading US Government Site Was Hosting Ransomware