Collaborate Disseminate
If you use the Firefox web browser, here’s an important update that you need to be aware of.
Starting today, Mozilla is activating the DNS-over-HTTPS security feature by default for all Firefox users in the U.S. by automatically changing their DNS ser… Continue reading Firefox enables DNS-over-HTTPS by default (with Cloudflare) for all U.S. users
OpenSMTPD has been found vulnerable to yet another critical vulnerability that could allow remote attackers to take complete control over email servers running BSD or Linux operating systems.
OpenSMTPD, also known as OpenBSD SMTP Server, is an open-so… Continue reading New OpenSMTPD RCE Flaw Affects Linux and OpenBSD Email Servers
Almost within a year after releasing Microsoft Defender Advanced Threat Protection (ATP) for macOS computers, Microsoft today announced a public preview of its antivirus software for various Linux distributions, including Ubuntu, RHEL, CentOS and Debia… Continue reading Microsoft Brings Defender Antivirus for Linux, Coming Soon for Android and iOS
Based on a Twitter thread from 19 Feb 2020, during which Phill Moore made the request, I updated RegRipper to check for “dirty” hives, and provided a warning that RegRipper does NOT automatically process Registry transaction logs. This can be an … Continue reading RegRipper Update
Smart doorbells and cameras bring a great sense of security to your home, especially when you’re away, but even a thought that someone could be spying on you through the same surveillance system would shiver up your spine.
Following several recent rep… Continue reading Ring Makes 2-Factor Authentication Mandatory Following Recent Hacks
I read a fascinating blog post recently that described something called RID hijacking, which can be used as a method for maintaining elevated privileges on a system. The PenTestLabs article not only outlines how to perform RID hijacking manually,… Continue reading RID Hijacking
In his book, “Call Sign Chaos”, Jim Mattis made the statement that ‘your own personal experiences are not enough to sustain you.” This statement was made in the context of reading for professional development, and it applies to much more than jus… Continue reading Using Intrusion Intelligence
Not long ago, I took at look at an image that Dr. Ali Hadi had put together to demonstrate an aspect of digital analysis to his students. Dr. Hadi’s blog post describes how the use of the ADSs, particularly when launching programs from ADSs,… Continue reading Update: Prefetch + Stealth ADS Analysis
A few hours after Adobe today released security updates for five of its widely-distributed software, Microsoft also issued its February 2020 Patch Tuesday edition with patches for a total of 99 new vulnerabilities.
According to the advisories, 12 of t… Continue reading Update Microsoft Windows Systems to Patch 99 New Security Flaws
An election campaigning website operated by Likud―the ruling political party of Israeli Prime Minister Benjamin Netanyahu―inadvertently exposed personal information of all 6.5 million eligible Israeli voters on the Internet, just three weeks before the… Continue reading App Used by Israel’s Ruling Party Leaked Personal Data of All 6.5 Million Voters