Shodan’ Malware Hunter to Expose Command & Control Centers of Botnets

By Jahanzaib Hassan Recorded Future, a threat intelligence company together with Shodan, which is an internet search engine connecting services to internet devices, have created an online crawler which they call the Malware Hunter. What does it do? The Malware Hunter is a program that sends out...

Dan Geer: Cybersecurity, Humanity's Future "Conjoined"

Given the intertwinement of technology with communication, politics, economies and overall human progress, it seems to go hand-in-hand that cybersecurity must be elevated in parallel. Dan Geer, considered atop the food chain of security thinkers, said during last week’s Source Boston conference...

WikiLeaks Reveals CIA Tool 'Scribbles' For Document Tracking

Update WikiLeaks released details on what it said is a Central Intelligence Agency document tracking program called Scribbles, part of the agency’s effort to keep tabs on documents leaked to whistleblowers and journalists. Scribbles allegedly embeds a web beacon-style tag into watermarks located ...

Tracing Spam: Diet Pills from Beltway Bandits

Reading junk spam messages isn't exactly my idea of a good time, but sometimes fun can be had when you take a moment to check who really sent the email. Here's the simple story of how a recent spam email advertising celebrity "diet pills" was traced back to a Washington, D.C.-area defense...

CVE-2016-6818

SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service data deletion, or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor...

Sql injection

SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service data deletion, or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor...

CVE-2016-6818

SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service data deletion, or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor...

CVE-2016-6818

SAP Business Intelligence platform before January 2017 is vulnerable to SQL injection via crafted SQL queries, allowing remote attackers to obtain sensitive information, modify data, cause a DoS by data deletion, or launch administrative operations and potentially OS commands. Root cause: insuffi...

Spread banking Trojan the Office 0day vulnerabilities-vulnerability warning-the black bar safety net

Micro-step online Threat Intelligence briefing Number: TB-2017-0003 Report confidence: 90 TAG: Microsoft, Office, 0day, vulnerabilities, phishing mails, Dridex TLP: yellow only accept the report of the Organization for internal use Date: 2017-04-11 Update Micro-step online to GMT 4 May 11, to the...

5 Red Flags That Tell You Vendors Are Lying About AI

This is the original version of this article: The term Artificial Intelligence has become a buzzword that people use in sales pitches all the time. You will hear about it in the latest ad copy for new gadgets and programs. It also happens to be the most important tool in the cyber security field...

Lines Around Cyber Threat Intelligence Sharing Blurring

SINT MAARTEN—The rift between between threat intelligence services, private companies, and the government is getting muddier around information sharing. Catherine Lotrionte, the Associate Director of the Institute for Law, Science and Global Security at Georgetown University, described the some o...

OSINT Gathering Tool: Inquisitor

OSINT Gathering Tool Inquisitor is a simple for gathering information on companies and organizations through the use of Open Source Intelligence OSINT sources. The key features of Inquisitor include: 1. The ability to cascade the ownership label of an asset e.g. if a Registrant Name is known to...

Google’s lessons in security: bring together security engineering and incident response

Last week during Google Next conference, we have heard an interesting talk where a google security PM, Andy Chang, explained what Google has learned from preventing, detecting and responding to cyber attacks over the years. Not surprisingly, Google is paying a lot of attention to securing the...

Google’s lessons in security: bring together security engineering and incident response

Last week during Google Next conference, we have heard an interesting talk where a google security PM, Andy Chang, explained what Google has learned from preventing, detecting and responding to cyber attacks over the years. Not surprisingly, Google is paying a lot of attention to securing the...

CVE-2016-8960

IBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to adopt the Capabilities of a higher-privilege user by intercepting the higher-privilege user's cookie value from its HTTP request and then reusing it in subsequent requests. IBM Reference : 1993718...

CVE-2016-8960

IBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to adopt the Capabilities of a higher-privilege user by intercepting the higher-privilege user's cookie value from its HTTP request and then reusing it in subsequent requests. IBM Reference : 1993718...

CVE-2016-8960

The CVE-2016-8960 issue affects IBM Cognos products and describes a privilege-escalation flaw where a user with lower capabilities can adopt a higher-privilege set by intercepting and reusing a higher-privilege cookie in HTTP requests. Connected IBM bulletins specify affected ranges: Cognos Analy...

Open Source Smart Gateway: FalconGate

Open Source Smart Gateway Cyber attacks are on the raise. Hacker and cyber criminals are continuously improving their methods and building new tools and Malware with the purpose of hacking your network, spying on you and stealing valuable data. Recently a new business model has become popular amo...

inquisitor - OSINT Gathering Tool for Companies and Organizations

Inquisitor is a simple for gathering information on companies and organizations through the use of Open Source Intelligence OSINT sources. The key features of Inquisitor include: 1. The ability to cascade the ownership label of an asset e.g. if a Registrant Name is known to belong to the target...

Supply Chain Security: Akamai from a Customer's Risk Perspective

Managing risk is a key aspect of any business. This becomes more complicated when additional parties, such as vendors are brought into the mix. One of the strongest pieces of guidance on managing vendors that customers have brought to Akamai comes from the US Office of the Comptroller of the...