Security Boulevard

JANUARY 28, 2022

What exactly is OMEMO? Compared to OTR (Off-the-Record) which basically allows single-user type of secure and encrypted communication the OMEMO protocol actually allows multi-user type of data and information exchange further strengthening the protocol's position on the market for secure mobile IM (instant messaging) applications.

Encryption 105

Encryption Cybercrime Social Engineering Mobile 105

Troy Hunt

NOVEMBER 23, 2020

IoT and IP Addresses So, what happens when you start filling your home with IoT things? You end up assigning a lot of IP addresses; here's what it looks like in Ubiquiti's UniFi dashboard : Clearly, I have a long way to go before exhausting available IPV4 addresses on this subnet so that's not something that worries me right now.

Firmware 341

Firmware IoT Wireless Manufacturing 341

Duo's Security Blog

MARCH 18, 2022

We recently explored in the blog the National Cyber Security Center’s (NCSC) newly revised Cyber Essentials scheme , and how its specific post-pandemic “Bring Your Own Device” policies have led to some publications labeling the change “BYOD 2.0.” You can learn more about this topic in Duo’s Two-Factor Authentication Evaluation Guide.

Authentication 100

Authentication Mobile VPN Risk 100

Cisco Security

AUGUST 28, 2023

Cisco Telemetry Broker Deployment Cisco Telemetry Broker (CTB) routes and replicates telemetry data from a source location(s) to a destination consumer(s). CTB transforms data protocols from the exporter to the consumer’s protocol of choice and because of its flexibility CTB was chosen to pump data from the Black Hat network to SCA.

Wireless 69

Wireless DNS Mobile Technology 69

Kali Linux

MARCH 28, 2023

Slax - Starting to take it seriously What had started off as a “quick small thing” for single assessment, had started to gain traction. At the time, cooperation on “Open-Source projects” was very different to what it is today, as it was “I made this thing, I’m sharing it.”

InfoSec 52

InfoSec Penetration Testing Architecture Software 52

CyberSecurity Insiders

MARCH 13, 2021

As Charlotte Jacoby, Head of Office for Division for Infrastructure Development in Denmark, succinctly puts it; “ It is important to recognize that there will always be someone out there who can’t manage the solution. As discussed in a previous blog, digital identities have never been so relevant in the era of a pandemic.

Government 129

Government Mobile Technology Marketing 129

Cisco Security

MAY 27, 2022

In part one of our Black Hat Asia 2022 NOC blog , we discussed building the network with Meraki: . Since the Black Hat NOC uses Slack for messaging, we decided to create a Slack bot that NOC staff could use to interact with the Meraki infrastructure as well as Palo Alto Panorama using the SecureX Orchestration remote appliance.

Malware 82

Malware Accountability DNS Technology 82

ForAllSecure

MARCH 30, 2022

In hacking, what is it like to go down a rabbit hole, to keep uncovering more and more access to places you really shouldn’t have access to? Mr. Robot’s a good show, for the most part, but what is it really like to start down one path and find that it leads to another path and then another, and then another.

Firewall 52

Firewall Authentication Encryption Accountability 52

ForAllSecure

FEBRUARY 9, 2016

Results Overview. In the interest of openness, the data from the qualification has been released so that anyone can perform their own analysis. The scoring information is available here and the data submitted by the teams (patches, POVs, etc) is available here. In that case, the end result would have been a whopping 325.83

Engineering 52

Engineering Internet Internet Architecture 52

ForAllSecure

FEBRUARY 9, 2016

RESULTS OVERVIEW. In the interest of openness, the data from the qualification has been released so that anyone can perform their own analysis. The scoring information is available here and the data submitted by the teams (patches, POVs, etc) is available here. In that case, the end result would have been a whopping 325.83

Engineering 40

Engineering Internet Internet Architecture 40

ForAllSecure

FEBRUARY 9, 2016

Results Overview. In the interest of openness, the data from the qualification has been released so that anyone can perform their own analysis. The scoring information is available here and the data submitted by the teams (patches, POVs, etc) is available here. In that case, the end result would have been a whopping 325.83

Engineering 40

Engineering Internet Internet Architecture 40

Security Boulevard

NOVEMBER 18, 2021

The current API top ten are Broken Object-Level Authorization , Broken User Authentication , Excessive Data Exposure , Lack of Resources & Rate Limiting , Broken Function-Level Authorization , Mass Assignment , Security Misconfiguration , Injection , Improper Assets Management , and Insufficient Logging & Monitoring.

Authentication 64

Authentication Accountability Passwords Engineering 64

SecureList

OCTOBER 26, 2021

The summaries are based on our threat intelligence research and provide a representative snapshot of what we have published and discussed in greater detail in our private APT reports. This campaign was also covered by researchers at Zscaler in a blog post. ReconHellcat is a little-known threat actor that was spotted publicly in 2020.

Malware 142

Malware Government Surveillance Spyware 142

Fox IT

MAY 4, 2021

We’ll start with an overview of its origins and current operations before providing a deep dive technical analysis of the RM3 variant. But if you would like to understand the rather tortured history of this particular malware a little better, the research and blog posts on the subject by Check Point are a good starting point.

Banking 98

Banking Malware Encryption Architecture 98