Hack the Pentagon DOD Bug Bounty

MIAMI—Lisa Wiswell’s phone rang off the hook last summer in the throes of the OPM hack. But she wasn’t just answering questions from those whose security clearance and personal data disappeared into the Chinese ether; there were also hackers on the other end of the line offering their help...

Personal Data of 50 Million Turkish Citizens Leaked Online

Personal details of nearly 50 Million Turkish citizens, including the country's President Recep Tayyip Erdogan, have been compromised and posted online in a massive security breach. A database, which contains 49,611,709 records, appeared on the website of an Icelandic group on Monday, offering...

Piano lessons for kids - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Piano lessons for kids published at the 'play' market has multiple vulnerabilities...

How to Draw - Easy Lessons - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application How to Draw - Easy Lessons published at the 'play' market has multiple vulnerabilities...

Piano Lessons: Vivaldi - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Piano Lessons: Vivaldi published at the 'play' market has multiple vulnerabilities...

Learn Guitar Lessons Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Learn Guitar Lessons Free published at the 'play' market has multiple vulnerabilities...

Classic Piano Lessons - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Classic Piano Lessons published at the 'play' market has multiple vulnerabilities...

Classic Piano Lesson Beethoven - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Classic Piano Lesson Beethoven published at the 'play' market has multiple vulnerabilities...

Best Piano Lessons Kids - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Best Piano Lessons Kids published at the 'play' market has multiple vulnerabilities...

Piano Lessons: Mozart - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Piano Lessons: Mozart published at the 'play' market has multiple vulnerabilities...

Quick and Easy German Lessons - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Quick and Easy German Lessons published at the 'play' market has multiple vulnerabilities...

German lessons (free & fun) - Corrupted files, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application German lessons free & fun published at the 'play' market has multiple vulnerabilities...

2014-2015 Professional Reading Round-Up

At an earlier point in my career, I used to read a lot of technical security books. From 2006 to 2012 I published a series of Best Book Bejtlich Read posts. Beginning in 2013 I became much more interested in military-derived strategy and history, dating back to my studies at the Air Force Academy...

How to Build a Successful Incident Response Plan

The fight to protect your company’s data isn’t for the faint of heart. As an embattled IT warrior, with more systems, apps, and users to support than ever before, keeping everything up and running is a battle in itself. When it comes to preventing the worst-case scenario from happening, you need...

Deliberately Insecure Web Application: OWASP WebGoat

WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. You can install and practice with WebGoat in either J2EE or WebGoat for .Net in ASP.NET. In each lesson, users must demonstrate their understanding of a security issue by...

tsmim Lessons Library (show.php) SQL Injection

No description provided by source. =================================================================================== tsmim lessons library sql injection Vulnerabilities =================================================================================== Exploit Title: tsmim lessons library sql...

The Lesson of eBay

After every major cyber breach, security professionals are asked about the lessons we can learn from them. While the technical details of the eBay attack arent yet public, we can already learn lessons about from companys public statements and its communications to its customers...

How I Got Here: Robert "Rsnake" Hansen

Dennis Fisher talks with Robert Hansen, a renowned security researcher, about his early days climbing telephone poles to clip into phone lines, how he got his start in the security world, the evolution of [email protected] from early webrings and what he’s learned along the way. Download: 07rsnake.mp3...

Cyber Security Fraud in the Banking Industry: Lessons Learned in OCC Examiner Training

In late October 2011, Coalfire participated in a day of IT audit training with about 35 bank examiners. As you would expect, we covered a lot of previously hot topics. The conversation changed as we started talking about the amount of fraud being realized by community banks and credit unions...

Tsmim Lessons Library - show.php SQL Injection

Tsmim Lessons Library - show.php SQL Injection =================================================================================== tsmim lessons library sql injection Vulnerabilities =================================================================================== Exploit Title: tsmim lessons...