Trump's North Korea Summit Inspires Spearphishing

Plus: cryptocurrency dust problems for DeleteCoinbase, leaked financial watch lists, and more of the week's top security news...

Submissions for talks at the 2019 Talos Threat Research Summit are now open

When Cisco Talos launched the first ever Talos Threat Research Summit last year, we never could have anticipated how popular it would be. Tickets sold out quickly, and our inaugural Talos-backed conference was packed in the days leading up to Cisco Live. This year, we are bringing back the Threat...

clinicalpsychology.psychologysummit.com XSS vulnerability

Open Bug Bounty ID: OBB-701059 Description| Value ---|--- Affected Website:| clinicalpsychology.psychologysummit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-7...

Inspiring Gender Diversity at Women of the Channel Leadership Summit

At Trend Micro we’re proud to be walking the talk on gender diversity — from our co-founder and CEO, Eva Chen, all the way down. It’s always been a keen part of our corporate culture, from the very beginning 30 years ago. But we also realize that there’s still a major diversity challenge facing t...

Coalfire Teams with Healthcare and Public Health Sector Coordinating Council (HSCC) for Fall Summit

The Department of Homeland Security DHS charged the Healthcare and Public Health Sector Coordinating Council HSCC with serving as a partnership between the private and public healthcare sectors. To that end, two unique councils were formed: The Healthcare and Public Health Government Coordinating...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I'm speaking at Data in Smarter Cities in New York City on October 23, 2018. I'm speaking at the Cyber Security Summit in Minneapolis, Minnesota on October 24, 2018. I'm speaking at ISF's 29th Annual World Congress in Las Vegas,...

SANS THIR Summit Wrap Up – “We Have 15 Minutes”

Heading back to San Diego before I get on another flight 30 hours later. Lots of people say "what are you crazy? Why do that?"…to which I say: "we cannot achieve any mission without sacrifice." Going to events like the SANS Threat Hunting IR summit remind just how many dedicated people we have on...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I'm giving a book talk on Click Here to Kill Everybody at the Ford Foundation in New York City, on September 5, 2018. The Aspen Institute's Cybersecurity & Technology Program is holding a book launch for Click Here to Kill Everybod...

Chinese Hackers Mount Espionage Campaign During Trump-Putin Summit

Cyberattackers, unsurprisingly, appear to be interested in Donald Trump as an intelligence target – as evidenced by an uncharacteristic spate of strikes against IoT devices in Finland during the American president’s summit there with Russia’s Vladimir Putin. According to researchers, the uptick w...

summit-mea.com XSS vulnerability

Open Bug Bounty ID: OBB-637485 Description| Value ---|--- Affected Website:| summit-mea.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Beers with Talos EP31 - Live from Cisco Live! - VPNFilter and Our First Summit Recap

Beers with Talos BWT Podcast Episode 31 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcast EP31 Show Notes: Recorded June 12, 2018 — This is a special episode for two reasons! To start, we...

Summit Remote Code Execution Vulnerability

Summit is a Node.js-based web framework. A security vulnerability exists in Summit 0.1.0 and later versions. The vulnerability can be exploited by an attacker to execute arbitrary code when the framework uses the PouchDB driver...

Meet Summit, world’s fastest AI-powered supercomputer

By Waqas Scientists at IBM along with researchers at Mellanox, Nvidia and RedHat have unveiled an Artificial This is a post from HackRead.com Read the original post: Meet Summit, world's fastest AI-powered supercomputer...

U.S. Builds World's Fastest Supercomputer – Summit

China no longer owns the fastest supercomputer in the world; It is the United States now. Though China still has more supercomputers on the Top 500 list, the USA takes the crown of "world's fastest supercomputer" from China after IBM and the U.S. Department of Energy's Oak Ridge National Laborato...

U.S. Builds World's Fastest Supercomputer – Summit

China no longer owns the fastest supercomputer in the world; It is the United States now. Though China still has more supercomputers on the Top 500 list, the USA takes the crown of "world's fastest supercomputer" from China after IBM and the U.S. Department of Energy's Oak Ridge National Laborato...

Talos Threat Research Summit Guide and Cisco Live Preview

The first Cisco Talos Threat Research Summit is coming up at Cisco Live! in Orlando, so we are providing a quick guide to all the activities going on at the summit and beyond. The response to the summit was stronger than we could have anticipated for the first year - it sold out fast! Next time, ...

Akamai Edge Security - Intelligent protection coming to a city near you!

Having knowledge and visibility is just as important as products and technology when it comes to detecting and combating the latest attacks on the Internet. At Akamai, we protect customers from many of the largest and most sophisticated attacks in the world, and we are launching a series of Akama...

CVE-2017-16020

Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name...

CVE-2017-16020

Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name...

Design/Logic Flaw

Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name...