Spotlight on Malware DGA Communication Technique

Written by Avi Aminov and Or Katz Overview Imagine you are standing in the middle of a crowded train station and want to have a private conversation with an old friend. You've been waiting for the perfect time to contact him and get some advice on how to move forward with some important life...

2017 Verizon Data Breach Report (DBIR): Key Takeaways

The much-anticipated, tenth-anniversary edition of the Verizon DBIR has been released http://www.verizonenterprise.com/verizon-insights-lab/dbir/2017/, once again providing a data-driven snapshot into what topped the cybercrime charts in 2016. There are just under seventy-five information-rich...

Lynis 2.4.0 - Security Auditing Tool for Unix/Linux Systems

We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration. Lynis is an open source security auditin...

Evil Defenders - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Evil Defenders published at the 'play' market has multiple vulnerabilities...

Goblin Defenders 2 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Goblin Defenders 2 published at the 'play' market has multiple vulnerabilities...

Krafteers - Tomb Defenders - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Krafteers - Tomb Defenders published at the 'play' market has multiple vulnerabilities...

Jamie Butler on Detecting Targeting Attacks

In a conversation from RSA Conference, Mike Mimoso talks to Endgame chief technology officer Jamie Butler about what’s new–if anything–with targeted attacks, the proliferation of ransomware, and what defenders are doing about detecting attacks on their networks. Download: JamieButlerRSA.mp3 Music...

Modern Defenders Share, Visualize and Succeed

TENERIFE, Spain – Network defenders who rely solely on lists of assets to protect are running a fool’s errand. Instead, it’s crucial to think in graphs to not only visualize threats, but also to understand network edges, and dependencies between assets and accounts in order to be able to capture...

Guidance for Defending Against Destructive Malware

The Information Assurance Directorate of the National Security Agency NSA has released a report on Defensive Best Practices for Destructive Malware. This report details several steps network defenders can take to detect, contain, and minimize destructive malware infections. US-CERT encourages use...

Detekt - scans your Windows computer for traces of known surveillance spyware

Detekt is a free tool that scans your Windows computer for traces of FinFisher and Hacking Team RCS, commercial surveillance spyware that has been identified to be also used to target and monitor human rights defenders and journalists around the world. In recent years we have witnessed a huge...

WHMCS Control 2 (announcements.php) SQL Injection

No description provided by source. Software: WHMCS control 2 Sql Injection Vulnerability: Remote Sql Injection Google Dork: Powered by WHMCompleteSolution - or inurl:WHMCS or' announcements.php Off. site: www.MiXaTy.com Author Author: Islam DefenDers Date: 2.5.2010 Contact: email:...

joomla component com_manager 1.5.3 - (id) SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------------------------- Joomla Component commanager 1.5.3 id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Islam DefenDers Mr.HaMaDa Site :...

The Next Leap Forward in Cyber Defense: Taking Action to Help Defeat Adversaries

It is often said that attackers have an advantage, because the defenders have to protect every part of their systems all the time, while the attacker only has to find one way in. This argument oversimplifies the security landscape and the real strength that defenders can achieve if they work...

Model Predicts Optimal Timing of a Cyber Conflict

Security researchers from the Ford School of Public Policy at the University of Michigan have published a mathematical model they said will produce the proper timing for the delivery of offensive cyberweapons. Defenders can also make use of the model to understand attackers and when an targeted...

IE Zero Day Watering Hole Attack Injects Malware into Memory

Microsoft may be promising a relatively light Patch Tuesday release tomorrow, but that doesn’t mean its researchers and developers won’t have their hands full. Not only is Microsoft busy on a patch for the TIFF zero day vulnerability reported two weeks ago, but now another previously unreported...

webTrain CMS Username Enumeration

Software: webTrain CMS Vulnerability: Username Enumeration Google Dork: "To prevent spam, please answer the simple math question below." Off. site: www.MiXaTy.com Author Author: Islam DefenDers Date: 4.7.2011 Contact: email: [email protected] Username Enumeration Exploit: http://site/admin err...

WHMCS Control 2 SQL Injection

Software: WHMCS control 2 Sql Injection Vulnerability: Remote Sql Injection Google Dork: Powered by WHMCompleteSolution - or " inurl:WHMCS or' announcements.php Off. site: www.MiXaTy.com Author Author: Islam DefenDers Date: 2.5.2010 Contact: email: [email protected] Sql Injection Exploit:...

WHMCS Control 2 (announcements.php) SQL Injection Vulnerabilities

Exploit for php platform in category web applications ================================================================= WHMCS Control 2 announcements.php SQL Injection Vulnerabilities ================================================================= Software: WHMCS control 2 Sql Injection...

WHMCompleteSolution (WHMCS) Control 2 - announcements.php SQL Injection

WHMCompleteSolution WHMCS Control 2 - announcements.php SQL Injection Software: WHMCS control 2 Sql Injection Vulnerability: Remote Sql Injection Google Dork: Powered by WHMCompleteSolution - or " inurl:WHMCS or' announcements.php Off. site: www.MiXaTy.com Author Author: Islam DefenDers Date:...

WHMCompleteSolution (WHMCS) Control 2 - 'announcements.php' SQL Injection

Software: WHMCS control 2 Sql Injection Vulnerability: Remote Sql Injection Google Dork: Powered by WHMCompleteSolution - or " inurl:WHMCS or' announcements.php Off. site: www.MiXaTy.com Author Author: Islam DefenDers Date: 2.5.2010 Contact: email: [email protected] Sql Injection Exploit:...