Threatpost News Wrap, September 2, 2016

Mike Mimoso, Tom Spring, and Chris Brook discuss the news of the week, including the MedSec/Muddy Waters story, how the Angler EK was traced back to the Lurk Gang, Fairware hitting Linux servers, and the Bashlite IoT malware. Continue reading Threatpost News Wrap, September 2, 2016

How do I report a security vulnerability about a trusted certificate authority?

I stumbled across a huge security vulnerability in a Certificate Authority that is trusted by all modern browsers and computers.

Specifically, I am able to get a valid signed certificate for a domain I don’t own. If I had th… Continue reading How do I report a security vulnerability about a trusted certificate authority?

How to communicate a positive feeling about ethical hacking to non technical people? [closed]

Summary:

For most non technical people, who hear about computer security either in the news because of some giant breach or in the movies, there are two kind of hackers:

The professional people hired by often large company… Continue reading How to communicate a positive feeling about ethical hacking to non technical people? [closed]