Collaborate Disseminate
By Alex Kirk, Corelight Global Principal for Suricata More than 15 years after Gartner declared that “IDS is dead” because it was too noisy to be effectively managed, alert fatigue continues to be a central theme of life in modern SOCs, with a majority… Continue reading Beating alert fatigue with integrated data
It’s charging subpar password security and lousy user notification: Zynga has yet to notify users to warn them of the breach, the suit says. Continue reading Zynga faces class action suit over massive Words With Friends hack
There’s a new, practical, collision attack against SHA-1: In this paper, we report the first practical implementation of this attack, and its impact on real-world security with a PGP/GnuPG impersonation attack. We managed to significantly reduce the co… Continue reading New SHA-1 Attack
There’s a new, practical, collision attack against SHA-1: In this paper, we report the first practical implementation of this attack, and its impact on real-world security with a PGP/GnuPG impersonation attack. We managed to significantly reduce the complexity of collisions attack against SHA-1: on an Nvidia GTX 970, identical-prefix collisions can now be computed with a complexity of 261.2rather than264.7,… Continue reading New SHA-1 Attack
The serial hacker GnosticPlayers is claiming to have ransacked Zynga’s user data – including names, emails and passwords. Continue reading 218 million Words With Friends players lose data to hackers
Last week, the Scientific Working Group on Digital Evidence published a draft document — "SWGDE Position on the Use of MD5 and SHA1 Hash Algorithms in Digital and Multimedia Forensics" — where it accepts the use of MD5 and SHA-1 in digital forensics applications: While SWGDE promotes the adoption of SHA2 and SHA3 by vendors and practitioners, the MD5 and… Continue reading MD5 and SHA-1 Still Used in 2018
What does the Disqus data breach tell us about security? Continue reading Learning from the Disqus data breach
Todd Klindt and Shane Young talk about two-factor authentication hitting home in the last week and we remind you all to go turn it on yourself. Then discuss a new PowerShell Video Shane made that shows you how to copy, move, and delete SharePoint Online files using PowerShell and we hit on new features for OneDrive for Business and AD Group management for Office 365.
The post SharePoint Podcast Episode #329 — Well-Known and Irritating to One and All appeared first on Petri.
Continue reading SharePoint Podcast Episode #329 — Well-Known and Irritating to One and All
“Please exercise care” with colliding PDFs, researchers advise software developers. Continue reading Watershed SHA1 collision just broke the WebKit repository, others may follow
The first collision in the SHA-1 hash function has been found. This is not a surprise. We’ve all expected this for over a decade, watching computing power increase. This is why NIST standardized SHA-3 in 2012. EDITED TO ADD (2/24): Website for the collision. (Yes, this brute-force example has its own website.)… Continue reading SHA-1 Collision Found