Troy Hunt

DECEMBER 3, 2023

Search for your account across multiple breaches [link] — Have I Been Pwned (@haveibeenpwned) December 4, 2013 And then, as they say, things kinda escalated quickly. And now, a 10th birthday blog post about what really sticks out a decade later. "Have I been pwned?" " by @troyhunt is now up and running.

Data breaches 363

Data breaches Passwords Internet Internet 363

Cisco Security

AUGUST 29, 2022

In part one of this issue of our Black Hat USA NOC (Network Operations Center) blog, you will find: Adapt and Overcome. A major concern for the sponsors in their booths was that as the Expo Hall filled with excited attendees, the connectivity of the 900+ iOS devices used for lead management dropped. to fine tune the network.

Engineering 70

Engineering Wireless Malware DNS 70

Troy Hunt

JUNE 15, 2023

Because I already know who is monitoring which domains and the email address they're using for notifications, that same email address can be used to verify your identity and drop you straight into the dashboard. We can't add a meta tag. We don't have any of those 4 aliases on our domain. We can't upload a file.

Accountability 232

Accountability Small Business InfoSec DNS 232

Troy Hunt

JUNE 30, 2022

Every time this very blog loads Font Awesome from Cloudflare's CDN, for example, it's verified against the hash in the integrity attribute of the script tag (view source for yourself). The 1 hash that won't yield any search results (until Google indexes this blog post.) is the middle one.

Passwords 308

Passwords Identity Theft Consumer Services Password Management 308

Cisco Security

AUGUST 28, 2023

XDR (eXtended Detection and Response) Integrations At Black Hat USA 2023, Cisco Secure was the official Mobile Device Management, DNS (Domain Name Service) and Malware Analysis Provider. Or, is from a briefing or a demo in the Business Hall? Typically, a CTB deployment requires a broker node and a manager node.

Wireless 60

Wireless DNS Mobile Technology 60

Cisco Security

MAY 26, 2022

In part one of this issue of our Black Hat Asia NOC blog, you will find: . Meraki MR, MS, MX and Systems Manager by Paul Fidler . Spanning tree loops and routing loops happen in an instant and can ruin your whole day, but over the 2nd week in May, I made a different kind of loop. Two Meraki MX routers/security appliances.

Wireless 79

Wireless Mobile Engineering Firewall 79

NopSec

JUNE 18, 2013

Obviously, Unified VRM is a Vulnerability Risk Management solution and not a silver bullet covering every single control in the 20 critical security controls list. However, a lot of Unified VRM functionality can be easily mapped to that list. We will address one control on each blog post.

Wireless 40

Wireless Penetration Testing Risk Architecture 40

Security Boulevard

OCTOBER 19, 2022

The vulnerability is tagged with a CVSS score of 9.6 A list of supported hash algorithms and current limitations for the salt size and the maximum number of iterations can be found in SAP Note #991968. . . Details about the report can be found in our blog post How Do You Check Old Hashes in Your ABAP System?

Passwords 62

Passwords Risk Phishing Architecture 62

Kali Linux

MARCH 28, 2023

Final Fresh Start For the next few years, the team was busy working away, doing what they do best. Upstream direction By also using another OS as your base, you often follow their direction for their project. It was not the best way to manage or maintain packages. The team had their new challenge to try and overcome.

InfoSec 52

InfoSec Penetration Testing Architecture Software 52

Troy Hunt

JUNE 10, 2019

Search for your account across multiple breaches [link] — Have I Been Pwned (@haveibeenpwned) December 4, 2013 I’ll save the history lesson for the years between then and today because there are presently 106 blog posts with the HIBP tag you can go and read if you’re interested, let me just talk briefly about where the service is at today. .

Data breaches 279

Data breaches Passwords InfoSec Accountability 279

Troy Hunt

FEBRUARY 11, 2018

This tag was in the source code over at secure.donaldjtrump.com/donate-homepage yet it was pulling script directly off Igor Escobar's GitHub repository for the project. What could you do if you could modify that script and subsequently cause your own arbitrary JavaScript to execute on Trump's website? Easy answer - almost anything.

Government 245

Government Risk Software Technology 245