U.S. Dept Of Defense: CSRF to ATO at https://█████/user/account [HtUS]

hello dod security team today while i was doing pentest on your scope i came across https://████████/user/account so i register and after that tried to edit my data and the data was in json request so i simple change content-type to content-type application/x-www-form-urlencoded and the data was...

The Pentagon Has Set Up a UFO Office

Plus: An Apple lawsuit, a GoDaddy breach, and more of the week's top security news...

RE:WIRED 2021: Jen Easterly Wants Hackers to Help US Cyber Defense

The retired Army officer played offense at the NSA and the Pentagon. Now she's learning to play defense...

More Detail on the Juniper Hack and the NSA PRNG Backdoor

We knew the basics of this story, but its good to have more detail. Heres me in 2015 about this Juniper hack. Heres me in 2007 on the NSA backdoor...

What the Pentagon’s New UFO Report Reveals About Humankind

The document says less about the search for life in the universe, and more about our current cultural climate and distrust of expertise...

Aliens and UFOs: A Final Frontier for Social Engineers

Buried deep within the most recent round of COVID-19 stimulus legislation was a little provision with potentially explosive consequences: The Pentagon has six months to release a full report on what they know about the existence of what they term Unidentified Aerial Phenomena UAP — or UFOs to the...

The strangest cybersecurity events of 2020: a look back

This year is finally coming to an end, and it only took us about eight consecutive months of March to get here. There is a ton to talk about, and that’s without even discussing the literal global pandemic. You see, 2020s news stories were the pressure-cooker product of mania, chaos, and the...

A week in security (December 21- December 27)

Last week on Malwarebytes Labs we warned our readers about not so festive social media scams, how Emotet returned just in time for Christmas, we tried out some free online games your kids are playing and here’s what happened, and our VideoBytes episode talked about what penetration testing tools...

A Ransomware Gang Bought Facebook Ads to Troll Its Victim

Covid-19 research hacking, the Pentagon's Photoshop antics, and more of the week's top security news...

The Pentagon’s Hand-Me-Downs Helped Militarize Police. Here’s How

Over several decades, the 1033 program has shipped over $7.4 billion of Defense Department property to more than 8,000 law enforcement agencies...

This Bot Hunts Software Bugs for the Pentagon

Mayhem emerged from a 2016 government-sponsored contest at a Las Vegas casino hotel. Now it's used by the military...

The Pentagon Hasn't Fixed Basic Cybersecurity Blind Spots

Five years ago, the Department of Defense set dozens of security hygiene goals. A new report finds that it has abandoned or lost track of most of them...

The Pentagon's AI Chief Prepares for Battle

Lt. Gen. Jack Shanahan doesn't want killer robots—but he does want artificial intelligence to occupy a central role in warfighting...

WhatsApp Hack Targeted Officials in More Than 20 Countries

NSO Group exploits, Counter-Strike money laundering, and a Pentagon scam are among the week’s top security news...

Cardiac Biometric

MIT Technology Review is reporting about an infrared laser device that can identify people by their unique cardiac signature at a distance: A new device, developed for the Pentagon after US Special Forces requested it, can identify people without seeing their face: instead it detects their unique...

In Project Maven's Wake, the Pentagon Seeks AI Tech Talent

The Defense Department wants to use AI in warfare. In the aftermath of Project Maven, it still needs Big Tech’s help...

pentagon-group.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-705973 Description| Value ---|--- Affected Website:| pentagon-group.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The Pentagon Is Publishing Foreign Nation-State Malware

This is a new thing: The Pentagon has suddenly started uploading malware samples from APTs and other nation-state sources to the website VirusTotal, which is essentially a malware zoo that's used by security pros and antivirus/malware detection engines to gain a better understanding of the threat...

Threatpost News Wrap Podcast for Nov. 9

Midterm elections aside, it has been a busy week in the infosec world. On Monday, the Pentagon suddenly started uploading malware samples from APTs and other nation-state sources to the website VirusTotal. On Wednesday, Cisco in an advisory revealed that it had “inadvertently” shipped an in-house...

Pentagon Draws Back the Veil on APT Malware with Sudden Embrace of VirusTotal

The Pentagon has suddenly started uploading malware samples from APTs and other nation-state sources to the website VirusTotal, which is essentially a malware zoo that’s used by security pros and antivirus/malware detection engines to gain a better understanding of the threat landscape. The Cyber...