Security Affairs

JUNE 23, 2019

This one is mine. “With this in mind I tried inserting a script tag instead of an iframe into an email. Normally a JavaScript running in an iframe can only access the content within it, but Appleby discovered it was possible to execute JavaScript code inside the injected iframe to access data in the rest of the page.

Advertising 66

Advertising Authentication Hacking Malware 66

Security Boulevard

APRIL 26, 2022

In order to perform the threat actor attribution, we did a correlation of the below data points. Passive DNS data. Note: OSINT information related to the above data points was also used in correlation analysis. If we check the passive DNS data for this domain, we find two other IP address resolutions: 172.93.201[.]253

Phishing 52

Phishing DNS Cryptocurrency Accountability 52

SecureList

NOVEMBER 23, 2021

Data from the Brazilian Federation of Banks registered a considerable increase in crime (such as explosions at bank branches to steal money) and cybercrime (increased phishing and social-engineering attacks) against banking customers and banking infrastructure. If not ransomware, then DDoS or possibly both.

Cryptocurrency 104

Cryptocurrency Banking Cybercrime Ransomware 104

SiteLock

AUGUST 27, 2021

One of the most exciting things Jamie learned about Gutenberg is the use of / shorthand to autofill tags. This was another favorite of mine. Zac Gordon – Setup & Introduction to Gutenberg: Tooling And Terminology. Josh Pollock – Building Custom Gutenberg Blocks: From Static to Dynamic. Elementary, My Dear Coder.

Malware 98

Malware Education Security Awareness Engineering 98

ForAllSecure

FEBRUARY 2, 2022

But here’s the thing, after 16 guesses the data on the wallet would automatically erase. Nor am I going to wade into the debate about the ecological consequences of mining cryptocurrencies. Vranken: Well, mining means cracking a puzzle, which has a certain amount of time and that takes like 10 seconds or something.

Cryptocurrency 52

Cryptocurrency InfoSec Software Encryption 52

Troy Hunt

AUGUST 7, 2018

John has a background in payment systems and he's seen more than his fair share of attacks against them, particularly those which scrape card data straight out of the client side. Literally whilst John and I were recording this course, visitors to their site were being served this script and having their card data siphoned off.

Banking 125

Banking 125

SecureList

SEPTEMBER 15, 2022

It is openly available on underground hacker forums for just a few hundred dollars, a relatively small price tag for malware. The second is a miner, which makes sense, since the main target audience, judging by the video, is gamers — who are likely to have video cards installed that can be used for mining.

Passwords 96

Passwords Hacking Malware Software 96

Troy Hunt

JUNE 30, 2022

Every time this very blog loads Font Awesome from Cloudflare's CDN, for example, it's verified against the hash in the integrity attribute of the script tag (view source for yourself). We also use hashes when implementing subresource integrity (SRI) on websites to ensure external dependencies haven't been modified.

Passwords 308

Passwords Identity Theft Consumer Services Password Management 308

Troy Hunt

JUNE 15, 2023

Here's mine: One of the problems the dashboard approach helps tackle is unsubscribing on an individual domain basis. We can't add a meta tag. Let me illustrate by example: in January this year, I loaded a rather large breach into HIBP: New scraped data: Twitter had over 200M accounts scraped from a vulnerable API in 2021.

Accountability 232

Accountability Small Business InfoSec DNS 232

ForAllSecure

SEPTEMBER 21, 2021

The FTC claims that spy phones secretly harvested and shared data on people's physical movements phone news online activities through a hidden hack. Vamosi: This definition is precise and well suited for apps that record or transmit data in secret. So, according to the coalition against stalkerware. But what about IoT devices?

Technology 52

Technology Software Surveillance Media 52

ForAllSecure

MAY 13, 2022

Smart Meters provide the data to support a cleaner future, showing how much energy is being used and how much this will cost you. In particular, he was reading the data off of the various smart meters learning when they were last shut off. I logged all that data. You know, it's I was talking about this and the data and whatever.

Engineering 52

Engineering Energy and Utilities Computers and Electronics Firmware 52

ForAllSecure

NOVEMBER 13, 2020

So, that was, that was a really, the turning point for me because I realized that okay if we're going to move all these servers that we spent so much time on hardening and security, securing behind a perimeter, now we are just putting it on somebody else's data center, without questioning what we're doing. Anyone want to tag along?

Hacking 40

Hacking InfoSec Internet Internet 40

ForAllSecure

NOVEMBER 12, 2020

So, that was, that was a really, the turning point for me because I realized that okay if we're going to move all these servers that we spent so much time on hardening and security, securing behind a perimeter, now we are just putting it on somebody else's data center, without questioning what we're doing. Anyone want to tag along?

Hacking 40

Hacking InfoSec Internet Internet 40

ForAllSecure

NOVEMBER 12, 2020

So, that was, that was a really, the turning point for me because I realized that okay if we're going to move all these servers that we spent so much time on hardening and security, securing behind a perimeter, now we are just putting it on somebody else's data center, without questioning what we're doing. Anyone want to tag along?

Hacking 40

Hacking InfoSec Internet Internet 40

Troy Hunt

JUNE 10, 2019

Back in 2013, I was beginning to get the sense that data breaches were becoming a big thing. Around this time the Adobe data breach happened and that got me really interested in this segment of the industry, not least because I was in there. HIBP's brand is intrinsically tied to mine and at present, it needs me to go along with it.

Data breaches 279

Data breaches Passwords InfoSec Accountability 279

Troy Hunt

MARCH 3, 2021

I've investigated hundreds of data breaches over the years (there are 514 of them in Have I Been Pwned as I write this), and for the most part, the situation with Gab is just another day on the internet. More specifically, I care about the data that's been exposed in the breach, especially when that data may include my own (I'm very serious).

Passwords 363

Passwords Data breaches InfoSec Risk 363