2447 matches found
Good Bots In. Bad Bots Out.
More than half of Internet traffic today comes from bots. These non-human visitors crawl the web constantly, their numbers are increasing, and they are getting smarter and more human-like by the minute. Imperva has been tracking these trends for more than five years, in an ongoing statistical stu...
Disdain exploit kit and a side of social engineering deliver Neutrino Bot
Today we picked up new activity from an exploit kit that was first discovered back in August of this year. The Disdain exploit kit, simply identified by a string of the same name found in its source code, is being distributed again after a short interruption via malvertising chains. Disdain EK...
Low Resource Defeat of reCaptcha’s Audio Challenge: unCaptcha
Across the Internet, hundreds of thousands of sites rely on Google’s reCaptcha system for defense against bots in fact, Devpost uses reCaptcha when creating a new account. After a Google research team demonstrated a near complete defeat of the text reCaptcha in 2012, the reCaptcha system evolved ...
Yelp: Leaking sensitive information lead to compromise employer API keys
The configuration file of an internal IRC bot which included credentials to internal services and some external services used by Yelp developers was inadvertently included by an employee in a personal public GitHub repository. The repository was taken down and the affected credentials rotated...
IDN Homograph Attack Spreading Betabot Backdoor
An IDN homograph attack leveraging Adobe’s brand has been discovered, with the malicious site spreading the Betabot backdoor and ultimately infecting compromised machines with cryptocurrency-mining and data-stealing malware. Attacks using internationalized domain name homographs rely on users...
Wallarm to sponsor OWASP AppSec USA
If you are a SecOps or DevOps professional you can not miss the application security event of the year: AppSec USA, September 19–22nd at Disney Coronado Spring Resort, Orlando, FL Use the code: UNLM50WLLRM to register to get $50 discount. You will get great information on the new security tools a...
kgb-bot denial of service vulnerability
kgb-bot is an Internet Relay Chat package. A security vulnerability exists in kgb-bot version 1.33-2. A remote attacker could exploit this vulnerability to cause a denial of service crash...
CVE-2015-1554
kgb-bot 1.33-2 allows remote attackers to cause a denial of service crash...
DEBIAN-CVE-2015-1554
kgb-bot 1.33-2 allows remote attackers to cause a denial of service crash...
CVE-2015-1554
kgb-bot 1.33-2 allows remote attackers to cause a denial of service crash...
UBUNTU-CVE-2015-1554
kgb-bot 1.33-2 allows remote attackers to cause a denial of service crash...
Code injection
kgb-bot 1.33-2 allows remote attackers to cause a denial of service crash...
CVE-2015-1554
kgb-bot 1.33-2 allows remote attackers to cause a denial of service crash...
CVE-2015-1554
kgb-bot 1.33-2 allows remote attackers to cause a denial of service crash...
CVE-2015-1554
CVE-2015-1554 affects kgb-bot 1.33-2. A remote attacker can cause a denial of service (crash). The available connected sources confirm this behavior; no patch/version remediation details are provided in the supplied documents. If exploitation details or fixes are published in the connected record...
US Army Researching Bot Swarms
The US Army Research Agency is funding research into autonomous bot swarms. From the announcement: The objective of this CRA is to perform enabling basic and applied research to extend the reach, situational awareness, and operational effectiveness of large heterogeneous teams of intelligent...
Terror EK actor experiments with URL shortener fraud
Terror EK is an exploit kit made from a mishmash of stolen code and with very limited distribution. In the past few months, we have seen a few minor updates to its code base which remains largely simplistic in comparison to professional-grade exploit kits of the past such as Angler EK, or...
SambaCry exploit analysis-exploit warning-the black bar safety net
“2017 5 May 24, Samba released a 4. 6. 4 version, in the middle fix a serious remote code execution vulnerability, the vulnerability number CVE-2017-7494, the vulnerability affects Samba 3.5.0 after to 4. 6. 4/4. 5. 10/4. 4. 14 in the middle of all versions. SambaCry vulnerability is a scale spre...
Phabricator: IRC-Bot exposes information
You can setup the IRC-Bot, and set it into private channels, so that it posts only information about tasks into private channels. Example: T698 T698: Task title - https://url.example.org/T698 The problem is, that, if the bot is online in IRC, you can send him task numbers via private messages, an...
Securitybot - Distributed alerting for the masses!
Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster and more...