Race is On To Notify Owners After Public List of IoT Device Credentials Published

Researchers are in a full-out sprint to notify the owners of a substantial list of connected devices and associated telnet credentials that has been available on Pastebin since June but gone viral since Thursday when it was posted on Twitter. The list has more than 20,000 views as of Saturday...

August 18, 2017 – Morning Cyber Coffee Headlines – “New York Times” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 18, 2017 - Headlines These women want to fix cybersecurity’s massive...

Level up your cybersecurity journey with CLOUDSEC 2017

Beginning this month, Trend Micro will be hosting CLOUDSEC, one of the largest cybersecurity conferences across Asia-Pacific and Europe. The event features presentations and panel discussions from industry experts and thought leaders who will discuss high-level strategies, forward looking securit...

Network Time Protocol Daemon (ntpd) 'monlist' DoS

Binary data 700174.prm...

Russia boots off DailyStormer and CloudFlare removes DDoS protection

By Waqas It looks like the racist and neo-nazi website DailyStormer has no This is a post from HackRead.com Read the original post: Russia boots off DailyStormer and CloudFlare removes DDoS protection...

August 17, 2017 – Morning Cyber Coffee Headlines – “Davy Crockett” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 17, 2017 - Headlines Students offer hope for narrowing of skills gap in...

August 16, 2017 – Morning Cyber Coffee Headlines – “Elvis” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 16, 2017 - Headlines In Ukraine, a Malware Expert Who Could Blow the...

Blizzard Entertainment hit by massive DDoS attack

By Agan Uzunovic The web servers of Blizzard Entertainment have suffered a series of This is a post from HackRead.com Read the original post: Blizzard Entertainment hit by massive DDoS attack...

Booters with Chinese Characteristics: The Rise of Chinese Online DDoS Platforms

This post was authored by Dave LiebenbergIn the past few months, Talos has observed an uptick in the number of Chinese websites offering online DDoS services. Many of these websites have a nearly identical layout and design, offering a simple interface in which the user selects a target’s host,...

Blizzard Entertainment Hit With Weekend DDoS Attack

Blizzard Entertainment reported a crippling DDoS attack over the weekend creating chronic latency and connection issues for players of games Overwatch, World of Warcraft and others. The DDoS attack has since subsided, according to Blizzard, but users are still grousing on Twitter over lingering...

Someone DDoSed Ukraine’ national postal service for 48 hours

By Uzair Amir Ukrposhta, the national postal service of Ukraine came under a This is a post from HackRead.com Read the original post: Someone DDoSed Ukraine national postal service for 48 hours...

CyberSecurity Report: Threat Landscape Gets More Sophisticated

Destruction of service. Get acquainted with this newly-minted term, and with its acronym — DeOS. It’s a particularly disturbing type of cyber attack InfoSec teams may face regularly in the not too distant future. That’s one of the main findings featured in the Cisco 2017 Midyear Cybersecurity...

Artificial Inteligent Packet Inspection Engine: AIEngine

AIEngine is a next generation interactive/programmable Python/Ruby/Java packet inspection engine with capabilities of learning without any human intervention, NIDS Network Intrusion Detection System functionality, DNS domain classification, network collector, network forensics and many others...

Someone DDoSed Chinese Telecom Firm For 11 Days

By Waqas It seems like cyber criminals have taken the challenge to This is a post from HackRead.com Read the original post: Someone DDoSed Chinese Telecom Firm For 11 Days...

Two Popular IP Cameras Riddled With Vulnerabilities

Two consumer-grade IP-enabled security cameras manufactured by Loftek and VStartcam are riddled with nearly two dozen vulnerabilities that expose them to remote attacks. According to researchers, more than 1.3 million of the cameras are in use today, with 200,000 models located in the United...

Unikrn: Non-Cloudflare IPs allowed to access origin servers

Summary: Non-Cloudflare IPs allowed to access origin servers Description: Your origin servers are not blocking access from non-Cloudflare servers. This way crawlers can find your origin servers' IPs by checking random IPs until they found your origin servers. What makes this especially easy are...

Legislation Proposed to Secure Connected IoT Devices

A Senate bill introduced today would prioritize security in connected devices, requiring providers who sell to the U.S. government to implement measures that would have been an impediment to the IoT botnet-fueled attacks against DNS provider Dyn and webhost OVH. The Internet of Things Cybersecuri...

DDoS attacks in Q2 2017

News Overview The second quarter of 2017 saw DDoS attacks being more and more frequently used as a tool for political struggle. The Qatar crisis was accompanied by an attack on the website of Al Jazeera, the largest news network in the area, Le Monde and Le Figaro websites were targeted in the he...

Feds Seize BTC-E exchange website – CoinBase suffers DDoS attacks

By Waqas A couple of days ago it was reported that the 38-year-old Russian This is a post from HackRead.com Read the original post: Feds Seize BTC-E exchange website CoinBase suffers DDoS attacks...

Windows SMB Zero Day to Be Disclosed During DEF CON

LAS VEGAS—A 20-year-old Windows SMB vulnerability is expected to be disclosed Saturday during a talk at DEF CON. Microsoft has said it will not patch the vulnerability, which allows an attacker to remotely crash a Windows server with relative ease using only 20 lines of Python code and a Raspberr...