Malaysian Data Breach Leaves Stolen Data Online for a ‘Long Time’

A 2014 data breach may have left the personal details for tens of millions of Malaysians for sale online for “a long time,” according to Vijandren Ramadass, the founder of tech portal Lowyat.net, who uncovered the data leak. According to a New York Times report, “Malaysia said on Wednesday it was...

Bargains and brotherhood: The underground Digital Souks of the Middle East

The release of our report “Digital Souks: A glimpse into the Middle Eastern and North African underground” marks the 12th in our Cybercriminal Underground Economy Series CUES. Having previously published several papers covering the Japanese, French, German, North American, Chinese, Russian and...

World’s largest child porn site was run by police for undercover op

By Carolina Dark web is home to explicit and illegal content including child This is a post from HackRead.com Read the original post: Worlds largest child porn site was run by police for undercover op...

An (un)documented Word feature abused by attackers

A little while back we were investigating the malicious activities of the Freakyshelly targeted attack and came across spear phishing emails that had some interesting documents attached to them. They were in OLE2 format and contained no macros, exploits or any other active content. However, a clo...

Girls Who Code: That's a Wrap!

The Summer Immersion Program for Girls Who Code at Akamai wrapped up this past week. The girls finished their final projects and presented them at a graduation ceremony attended by friends and family as well as supporters and mentors from Akamai. The girls were divided into five teams for their...

Researchers Figure Out How to Blind ISPs from Smart Home Device Traffic

Researchers have come up with a way to blind ISPs and attackers in a man-in-the-middle position to network traffic emanating from smart home devices. Smart devices such as sleep monitors, electric switches, security cameras and many others require an internet connection to function properly. They...

CVE-2017-12816

In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality by using Android IPC...

CVE-2017-12816

In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality by using Android IPC...

10 Tips for Effective Threat Hunting

Editor’s Note: The text appears in the free eBook: “Threat Hunting for Dummies.” Consider the fact that attackers don’t think of their success as optional. Given that, effectiveness and success of a threat hunting program are critical. Organizations that start a threat hunting program have succes...

Explained: the Dark Web

You may have seen the Dark Web referenced in popular TV shows and have gotten the wrong idea, or if you already knew about it, you may have snorted in derision. It’s also sometimes called the Deep Web, when in fact the Dark Web is only a part of the Deep Web. Terminology Surface Web is what we...

UBUNTU-CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

CVE-2017-7531

Affected software: Moodle 3.3. Vulnerable component: course overview block. Root cause: information disclosure via the course overview block that reveals activities in hidden courses. Impact: potential viewing of hidden-course activities. Public details: CVE-2017-7531 and associated descriptions ...

A .NET malware abusing legitimate ffmpeg

There is a growing trend among malware authors to incorporate legitimate applications in their malicious package. This time, we analyzed a malware downloading a legitimate ffmpeg. Using this application, this simple spyware written in .NET got a powerful feature. Most of the malware is sufficient...

NSA Insider Security Post-Snowden

According to a recently declassified report obtained under FOIA, the NSA's attempts to protect itself against insider attacks aren't going very well: The N.S.A. failed to consistently lock racks of servers storing highly classified data and to secure data center machine rooms, according to the...

UTstarcom WA3002G4 - Unauthenticated DNS Change Exploit

shell !/bin/bash UTstarcom WA3002G4 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once modified...

Beetel BCM96338 Router - Unauthenticated DNS Change Exploit

shell !/bin/bash Beetel BCM96338 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

D-Link ADSL DSL-2640B SEA_1.01 Unauthenticated Remote DNS Changer

!/bin/bash D-Link ADSL DSL-2640B SEA1.01 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...