Troy Hunt

MARCH 1, 2018

I've written extensively about how HIBP has grown over the years and doing so has been a cornerstone of the philosophy of how I've run the service - with maximum transparency. As this service has grown, it's become an endless source of material from which I've drawn upon for conference talks, training and indeed many of my blog posts.

Government 188

Government Data breaches Passwords Authentication 188

Security Boulevard

JUNE 21, 2021

For many applications, 56-bits is the maximum, as they use the remaining 8-bits for tags. The post When we’ll get a 128-bit CPU appeared first on Security Boulevard. We already have machines needing petabytes (at least 50-bits worth) of storage.

Mobile 68

Mobile Technology Marketing 68

McAfee

APRIL 20, 2021

Each year, MITRE Engenuity conducts independent evaluations of cybersecurity products to help government and industry make better decisions to combat security threats and improve industry’s threat detection capabilities. To do so, we believe in the importance of put ting our security solutions through rigorous testing.

Threat Detection 90

Threat Detection Cybersecurity Government Network Security 90

SecureList

OCTOBER 28, 2021

This summer Kaspersky experts took part in the Machine Learning Security Evasion Competition ( MLSEC ) — a series of trials testing contestants’ ability to create and attack machine learning models. Our Anti-Malware Evasion team consisted of two data scientists — Alexey Antonov and Alexey Kogtenkov — and security expert Maxim Golovkin.

Phishing 62

Phishing Malware Architecture Technology 62

CyberSecurity Insiders

FEBRUARY 25, 2022

Maintain software with the latest security updates. Alien Labs is tracking IOCs associated with the geo-political conflict in Eastern Europe, through tagged pulses that track incident and related threat intelligence. Windows SMB Server Maximum Concurrent Requests Set To Maximum Value. Recommended actions. YARA RULES.

Ransomware 119

Ransomware Encryption Malware Backups 119

SecureList

APRIL 5, 2023

Archive with phishing kits posted in a Telegram scam channel Contents of a free phishing kit archive Phishers also share stolen personal data with their subscribers, tagging it with information on whether it was verified or not. This makes it easy for our cyberthreat detection technology to discover them.

Phishing 114

Phishing Marketing Scams Accountability 114

eSecurity Planet

APRIL 13, 2022

Despite all the security measures you might take, a codebase can be the weakest link for any business’s cybersecurity. While this guide focuses on sanitizing and validating inputs, other elements such as the server’s configurations must also be taken into account to secure forms. Also read: Top Code Debugging and Code Security Tools.

Accountability 109

Accountability Firewall Cybersecurity Security Awareness 109

Security Affairs

FEBRUARY 25, 2021

A Chinese security researcher published a PoC code for the CVE-2021-21972 vulnerability in VMware Center, thousands of vulnerable servers are exposed online. A Chinese security researcher published the Proof-of-concept exploit code for the CVE-2021-21972 RCE vulnerability affecting VMware vCenter servers. Pierluigi Paganini.

Technology 71

Technology Ransomware Hacking Cybercrime 71

ForAllSecure

SEPTEMBER 21, 2021

What role might the security industry have in identifying or even stopping it? Welcome to the hacker mind, in original podcast from for all security. I'm a principal on the security team at Cybereason, and I'm also a digital forensics instructor at the SANS Institute, Grooten: Martijn Grooten. So I hope you'll stick around.

Technology 52

Technology Software Surveillance Media 52

SecureList

AUGUST 10, 2022

VileDropper’s exact execution flow depends on the security products that are installed on the targeted computer, but most of the time, it copies itself to another file, relaunches itself, and deletes its original copy. This may have been done to better bypass the detection of some security solutions.

Cryptocurrency 87

Cryptocurrency Encryption Social Engineering Passwords 87

Pen Test Partners

OCTOBER 9, 2023

Introduction This guide deals with threat modelling and early stages of development so that security issues and controls are identified before committing to manufacturing. Current attack methods, and the pitfalls we find in embedded designs, have been highlighted so that a finished product is as secure as it can be. Secure Boot 3.5.

IoT 52

IoT Firmware Mobile Manufacturing 52

eSecurity Planet

JANUARY 12, 2024

The top log management services offer troubleshooting and operational efficiency through seamless integration, secure log handling, advanced security analytics, and more. Cloud security: Gains visibility into AWS, Azure, Salesforce, and Google Cloud Platform. Monitors changes in cloud infrastructure for data security.

Technology 110

Technology Encryption Threat Detection Marketing 110

Security Boulevard

OCTOBER 19, 2022

The most recent one was patched with SAP Security Note #3239152 in SAP’s October 2022 Patch Day. The vulnerability is tagged with a CVSS score of 9.6 A list of supported hash algorithms and current limitations for the salt size and the maximum number of iterations can be found in SAP Note #991968. . .

Passwords 64

Passwords Risk Phishing Architecture 64

LRQA Nettitude Labs

OCTOBER 18, 2023

Built into the Microsoft C++ compiler and runtime, CastGuard is a pivotal security enhancement designed to significantly reduce the number of exploitable Type Confusion vulnerabilities in applications. This is why this bug class is so pernicious – it’s easy to violate the type contract, especially in complex codebases.

Engineering 91

Engineering 91

ForAllSecure

AUGUST 14, 2019

The CyberWire Daily podcast delivers the day's cyber security news into a concise format. Dave Bittner: [00:00:03] A contractor for Russia's FSB security agency was apparently breached. Dave Bittner: [00:00:03] A contractor for Russia's FSB security agency was apparently breached. It's time to build your security the same way.

Energy and Utilities 52

Energy and Utilities Penetration Testing Government Education 52

ForAllSecure

AUGUST 14, 2019

The CyberWire Daily podcast delivers the day's cyber security news into a concise format. Dave Bittner: [00:00:03] A contractor for Russia's FSB security agency was apparently breached. Dave Bittner: [00:00:03] A contractor for Russia's FSB security agency was apparently breached. It's time to build your security the same way.

Energy and Utilities 40

Energy and Utilities Penetration Testing Government Education 40

ForAllSecure

AUGUST 14, 2019

The CyberWire Daily podcast delivers the day's cyber security news into a concise format. Dave Bittner: [00:00:03] A contractor for Russia's FSB security agency was apparently breached. Dave Bittner: [00:00:03] A contractor for Russia's FSB security agency was apparently breached. It's time to build your security the same way.

Energy and Utilities 40

Energy and Utilities Penetration Testing Government Education 40

SecureList

NOVEMBER 14, 2022

Last June, Google’s TAG team released a blog post documenting attacks on Italian and Kazakh users that they attribute to RCS Lab, an Italian offensive software vendor. Verdict: prediction fulfilled ✅ Explosion of attacks against cloud security and outsourced services. No other country followed suit.

Firmware 106

Firmware Surveillance Mobile Telecommunications 106