Troy Hunt

FEBRUARY 1, 2019

I'm pumping this weekly update out a little bit later, pushing it just before I get on the plane back home to Australia. I've just wrapped up a week in London with Scott doing all things NDC including a couple of days of workshops and a couple of talks each.

Risk 173

Risk 173

Security Boulevard

JUNE 28, 2023

Updated Password Policy Page Lo and behold… SharpWebServer Capturing a Hash in Redir Mode Yay, time to crack! Good targets for this might be the pages for weekly standup meetings or any pages that look to have been recently updated (AtlasReaper supports a few filtering options you might use). version Display version information.

Authentication 52

Authentication Passwords Penetration Testing Social Engineering 52

Security Boulevard

DECEMBER 27, 2021

See CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit) | Qualys Security Blog. The issue is Linux is embedded everywhere, yet many systems are rarely, and even never updated. CVE-2021-3156 sudo Vulnerability. Patches are available.

IoT 87

IoT Internet Internet Hacking 87

Security Boulevard

FEBRUARY 5, 2021

See CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit) | Qualys Security Blog. The issue is Linux is embedded everywhere, yet many systems are rarely, and even never updated. CVE-2021-3156 sudo Vulnerability. Patches are available.

IoT 112

IoT Internet Internet Hacking 112

Troy Hunt

APRIL 12, 2018

There's been 124 of those over the last year, including the weekly update ones. I received a very nice email this week: Congratulations, your nomination has been accepted to the Microsoft Regional Director program! Just over 2 years ago, I first became a Microsoft Regional Director.

InfoSec 158

InfoSec Technology Media Internet 158

Security Boulevard

MARCH 21, 2022

UKRAINE CRISIS | International Committee of the Red Cross (icrc.org) ?—?to NBU Opens Special Account to Raise Funds for Ukraine’s Armed Forces (updated) (bank.gov.ua) ?—?to The world crossed a threshold four weeks ago with Russia’s unprovoked war against Ukraine. This is not a matter of conflicting viewpoints.

Accountability 52

Accountability Banking Government 52

Security Boulevard

MARCH 24, 2022

3 ] The emails redirected victims to a website delivering fake antivirus updates that eventually downloaded Cobalt Strike beacons, or two custom Go malware variants named GraphSteel and GrimPlant. Threat Actor Update: Conti Ransomware Group Restored Operations. Ubisoft Cyber Security Incident Update.” Viasat Inc., Accessed: Mar.

Ransomware 56

Ransomware Malware Government Antivirus 56