| Date | Title | Description |
| Sign up to see | Sign up to see | Sign up to see |
| Mar 3, 2026 | 15 онлайн-сервисов, которые должен знать каждый сисадмин | Продолжаю серию статей про полезные инструменты для сисадминов. Сегодня расскажу про зарубежные сайты, которые точно должны быть в вашем шорт-листе. Читайте под катом и делитесь своими онлайн-сервисами по мониторингу, тестированию и оптимиз... |
| Feb 9, 2026 | OSINT для ленивых. Часть 3: Как ставить вопросы, так, чтобы получить на них ответы | Вам когда‑нибудь задавали вопросы типа такого: «Как сделать так, чтобы всё?», а ты такой: «Чего?!»
— Ну как сделать так, чтобы на кнопочку нажал и все вылезло?‑
WTF?
— Ну, кампутер, кнопочка... Знаешь? Тыц. И все вылезло. Как сделать?
‑???
... |
| Jan 28, 2026 | Moltbot (ex-Clawdbot). Разбор безопасности «убийцы Siri» — закрываем кормушку для хакера | TL;DR: Moltbot — это мощный инструмент, который в дефолтной конфигурации превращает ваш Mac Mini в общественный туалет для хакеров. Ниже — разбор векторов атак и гайд, как запереть этого лобстера в бронированном аквариуме.
Часть 1. Red Team... |
| Jan 27, 2026 | «Антивирус мёртв. Да здравствует антивирус!» | Сегодня классический антивирус то и дело списывают в утиль. Дескать, «это театр безопасности», «он бессилен против таргетированной атаки», «да его студент обойдет в два счета». Что же, антивирус и вправду никакая не броня и не всегда спасае... |
| Jan 27, 2026 | У ИИ-ассистента Clawdbot дыры в безопасности — исследователь вскрыл сотни серверов | Открытый ИИ-ассистент Clawdbot, набравший 60 000 звезд на GitHub за три дня, оказался в центре скандала с безопасностью. Исследователь Джеймисон О'Рейли обнаружил сотни публично доступных серверов без аутентификации — с API-ключами, токенам... |
| Jan 21, 2026 | OSINT и цифровой след | Всем привет! Меня зовут Максим, я специалист по информационной безопасности РТК-ЦОД. Хочу рассказать вам об Open Source Intelligence (далее везде буду сокращать до аббревиатуры OSINT) и его применении в повседневной жизни с разными целями. ... |
| Dec 11, 2025 | Декабрьский «В тренде VM»: уязвимости в Windows, библиотеке expr-eval, Control Web Panel и Django | Хабр, привет! На связи Александр Леонов, ведущий эксперт PT Expert Security Center и дежурный по самым опасным уязвимостям месяца. Мы с командой аналитиков Positive Technologies регулярно исследуем информацию об уязвимостях из баз и бюллете... |
| Dec 4, 2025 | В фокусе RVD: трендовые уязвимости ноября | Хабр, привет!
На связи команда инженер-аналитиков R-Vision. В ноябре нами было выявлено 13 трендовых уязвимостей. В дайджест вошли лишь те, что представляют наибольшую опасность по уровню риска, подтверждённой эксплуатации и практическому и... |
| Sep 4, 2025 | Build Practical Cyber Defense Skills with This 5-Course Bundle | TL;DR: This $19.99 cybersecurity bundle includes five courses and lifetime access to in-demand tools, techniques, and real-world training.
For IT professionals, aspiring security analysts, or anyone looking to expand their technical skill-s... |
| Jul 24, 2025 | Knostic's AI Security Research Unveiled: 1,862 exposed MCP servers lack essential security measures | Knostic's research, "Exposing the Unseen: Mapping MCP Servers Across the Internet," found 1,862 exposed Model Context Protocol (MCP) servers, all of which were insecure and allowed unauthenticated access to internal tool listings.... |
| Jul 22, 2025 | Microsoft server hack hit about 100 organizations, researchers say | Microsoft server hack hit about 100 organizations, researchers say
By James Pearson and Raphael SatterJuly 21, 20259:58 PM UTCUpdated ago
Text
Small Text
Medium Text
Large Text
Share
X
Facebook
Linkedin
Email
Link
SummaryCompanies
Most hit ... |
| Jul 22, 2025 | SharePoint zero-day impact ripples around the world | A sweeping cyber espionage operation targeting Microsoft server software compromised about 100 organisations as of the weekend, two of the organisations that helped uncover the campaign said on Monday.
Microsoft on Saturday issued an alert ... |
| Jan 21, 2025 | Revolutionizing Remote Access: Overlay Networks and the Quest for Connectivity | In the digital age, connectivity is the lifeblood of innovation. But what happens when that connection is obstructed? Many home users face a common hurdle: NAT (Network Address Translation). This barrier, often imposed by Internet Service P... |
| Jan 21, 2025 | Navigating the Digital Maze: Overcoming NAT with Overlay Networks | In the digital age, connectivity is king. But what happens when your internet service provider (ISP) hides you behind a Network Address Translation (NAT) wall? It’s like being in a locked room with no key. You have a home server, perhaps a ... |
| Jan 20, 2025 | Использование оверлейных сетей для обхода NAT | У меня, как и у многих посетителей Хабра есть raspberry pi. А ещё, почти честные сто мегабит от провайдера домашнего интернета. Идея о маленьком домашнем сервере от такой комбинации появляется сама по себе. Но сервер он ведь на то и сервер,... |
| Dec 16, 2024 | Argus — мощный инструмент для разведки | Введение
Argus — это универсальный инструмент на Python, созданный для упрощения процесса сбора информации и проведения разведки. Благодаря удобному интерфейсу и набору мощных модулей, Argus позволяет эффективно и результативно исследовать ... |
| Nov 12, 2024 | The Evolving Landscape of Cybersecurity: A Deep Dive into OSINT and AI Defense Mechanisms | In the digital age, information is power. Cybersecurity is the fortress that protects this power. As threats evolve, so must our defenses. Two critical components in this landscape are Open Source Intelligence (OSINT) and advanced AI defens... |
| Nov 11, 2024 | Хитрости Красной команды | Введение
Пассивная разведка (OSINT)
Сосредоточьтесь на сборе информации о целевой компании и её сотрудниках. Ресурсы, которые могут быть полезны для этого (подробное объяснение приведено в разделе "ИНСТРУМЕНТЫ И МЕТОДЫ" ниже):
Веб... |
| Nov 10, 2024 | Практические варианты использования port knocking | Справа тоже есть сова (присмотритесь). Источник картинок: сайт kaifolog.ru и Alice McKay/Caters
Существуют различные варианты попыток защиты\сокрытия сервисов от "любопытных глаз". Основные: использование нестандартного порта, fai... |
| Oct 29, 2024 | The Thrill of the Hunt: Navigating the Bug Bounty Landscape | In the digital age, vulnerabilities lurk in every corner of the internet. Bug bounty programs are the modern-day treasure hunts, where ethical hackers seek out these hidden flaws for rewards. This article dives into the world of bug hunting... |
| Oct 29, 2024 | Вознаграждение в $20 300 за 200 часов хакерского марафона | Вернемся к июлю 2023 года: вместе с Мохаммадом Никуи мы решили посвятить 100 часов работе над публичной программой Bug Bounty на платформе BugCrowd. Мы занимались ею неполный рабочий день, уделяя по 4–6 часов ежедневно. Выбрали программу от... |
| Sep 28, 2024 | The Security Storm Brewing in Digital Finance and Blockchain Payments | The digital finance landscape is evolving rapidly. With the rise of digital financial assets (DFAs) and cross-border payments, blockchain technology is at the forefront. However, lurking beneath this shiny surface are significant security c... |
| Sep 25, 2024 | Актуальные проблемы безопасности ЦФА и трансграничных платежей на основе блокчейн технологий | Источник: https://www.freepik.com/
Тема трансграничных платежей и цифровых финансовых активов (ЦФА) последние годы активно поселилась в медиасфере. К сожалению, обсуждение в основном сводится к оценке финансовой выгоды и юридическим проблем... |
| Sep 17, 2024 | Nuclei Fu | В сегодняшней статье речь пойдет о Nuclei — это мощный open-source инструмент для поиска уязвимостей (DAST), который активно развивается благодаря поддержке сообщества.
Мы обсудим самые важные изменения в Nuclei за последний год и поделимся... |
| Jul 15, 2024 | Сколько всего серверов Google Global Cache в России? | Краткий очерк о способе и результатах оценки количества серверов, размещенных на сетях крупнейших российских операторов связи.Ответ сразу
Оператор Количество серверов Количество городов
Ростелеком 348 54
ВымпелКом (билайн) 214 42
МТС 176 15... |
| Jul 12, 2024 | Over 16,400 Private and State-Owned Businesses Exposed to RegreSSHion Vulnerability | Over 16,400 Private and State-Owned Businesses Exposed to RegreSSHion Vulnerability
Fri, Jul 12, 2024 12:00 CET Report this content
Copenhagen, Denmark, July 12, 2024 - A critical security flaw known as RegreSSHion (CVE-2024-6387) has put o... |
| May 8, 2024 | Critical vulnerabilities in BIG-IP appliances leave big networks open to intrusion | Enlarge
Getty Images reader comments 36
Researchers on Wednesday reported critical vulnerabilities in a widely used networking appliance that leaves some of the world’s biggest networks open to intrusion.
The vulnerabilities reside in BIG-I... |
| Apr 28, 2024 | Джентльменский набор OSINT | Привет, Хабр! Вы наверняка много раз слышали про OSINT, интернет-расследования или интернет-разведка. И часто в этой самой разведке нам требуется автоматизировать поиск информации, или хотя бы упростить алгоритм расследования объекта.
В это... |
| Apr 22, 2024 | Как бы я взломал Рунет? | В сегодняшней статье мы поделимся результатами более чем годового проекта СайберОК, посвященного анализу защищенности периметра Рунета.
Исследование содержит в себе подробную статистику по некоторым кейсам, аналитические выводы, а также кру... |
| Apr 10, 2024 | Путешествие в глубины сети с Shodan – поисковой системой, открывающей двери в неизведанное | Введение
Как говорится, добрый день! Сегодня я хотел бы поведать вам небольшую тайну. Мало кто знает, но неправильная настройка устройств тоже является уязвимостью и зачастую большинство атака производятся именно за счёт этого. Так как в да... |
| Apr 10, 2024 | Трендовые уязвимости марта: обновляйтесь и импортозамещайтесь | Хабр, привет! Я Александр Леонов, и мы с командой аналитиков Positive Technologies каждый месяц изучаем информацию о недостатках безопасности из баз, бюллетеней безопасности вендоров, социальных сетей, блогов, телеграм-каналов, баз эксплойт... |
| Apr 9, 2024 | Thousands of LG TVs are vulnerable to takeover—here’s how to ensure yours isn’t one | Enlarge
Getty Images reader comments 98
As many as 91,000 LG TVs face the risk of being commandeered unless they receive a just-released security update patching four critical vulnerabilities discovered late last year.
The vulnerabilities a... |
| Jan 10, 2024 | Actively exploited 0-days in Ivanti VPN are letting hackers backdoor networks | Enlarge
Getty Images reader comments 7
Unknown threat actors are actively targeting two critical zero-day vulnerabilities that allow them to bypass two-factor authentication and execute malicious code inside networks that use a widely used ... |
| Nov 23, 2023 | Бородатый обманщик. Методика TARPIT в защите и нападении | Существует стратегия информационной безопасности, суть которой сводится к непропорциональному расходованию ресурсов атакующей стороны. Ресурсов вычислительных, временных и человеческих.
Добро пожаловать под кат если вас интересует:
Как затр... |
| Sep 22, 2023 | IoT и его криптонит | В одной из предыдущих статей я уже затрагивал тему IoT. В этой статье речь тоже пойдёт об этой концепции. При этом топик опять же затрагивает вопросы безопасности, но в более широком смысле.
В общем «интернет вещей» можно представить в виде... |
| Sep 21, 2023 | Анализируем домен компании с помощью OSINT | В начале сентября мы перенесли облако NGcloud на новый домен. Перед миграцией проанализировали домен с помощью инструментов OSINT. Зачем? Потому что из сведений о домене хакеры могут добыть массу информации: начиная от данных владельца и за... |
| Aug 2, 2023 | US, Norway say hackers have been exploiting Ivanti zero-day since April | Hackers exploited a zero-day flaw in Ivanti’s mobile endpoint management software undetected for at least three months, U.S. and Norwegian cybersecurity agencies have warned.
It was confirmed last week that hackers had compromised multiple ... |
| Aug 2, 2023 | OpenSSH против SSH | Рис. 1. Разные реализации SSH, источник: Shodan
Формально протокол SSH определён в ряде стандартов RFC (список ниже). В то же время есть много реализаций этого протокола. OpenSSH — самая популярная из них, хотя не единственная. Например, во... |
| Jul 25, 2023 | Ivanti rushes to patch zero-day used to breach Norway’s government | Hackers exploited a zero-day flaw in Ivanti’s mobile endpoint management software to compromise a dozen Norwegian government agencies — and thousands of other organizations could also be at risk.
The Norwegian Security and Service Organizat... |
| Jun 21, 2023 | Atlanta search engine startup Danti emerges from stealth mode with almost $3M | |
| May 31, 2023 | Researchers tell owners to “assume compromise” of unpatched Zyxel firewalls | Enlarge
Getty Images reader comments 24 with
Firewalls made by Zyxel are being wrangled into a destructive botnet, which is taking control of them by exploiting a recently patched vulnerability with a severity rating of 9.8 out of a possibl... |
| May 27, 2023 | A BitTorrent Client WebUI Shouldn’t Be Shared With The Entire Internet | The word ‘open’ in a connected world can be something positive. Open source, for example, or open library. On other occasions the opposite can be true; unnecessary ports left open on a router springs to mind.
For millions of people using de... |
| Mar 16, 2023 | Как начать заниматься багхантингом веб-приложений. Часть 2 | В прошлый раз мы рассказали о том, что такое платформы и программы багбаунти, какой базовый инструментарий может использовать багхантер, чтобы облегчить или автоматизировать поиск, привели реальные примеры уязвимостей из старых версий прило... |
| Dec 22, 2022 | Создаем кибер-разведку в компании на основе OSINT | Привет, Хабр!
Каждый день приходят новости, что ту или иную компанию взломали хакеры, получили дампы или зашифровали данные. Защищаться от киберугроз, выстраивая целую инфраструктуру из всевозможных средств защиты, хорошо и нужно, но никогд... |
| Sep 20, 2022 | 150+ хакерских поисковых систем и инструментов | Все таргетированные хакерские атаки начинаются с разведки. Социальные инженеры, красные команды и отдельные пентестеры также собирают информацию о своих целях перед тем, как перейти к активным действиям. Им помогают десятки инструментов и х... |
| Jul 14, 2022 | Search engine startup You nabs $25M in funding
Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsin ... | You, a startup challenging Google LLC in the search engine market, today disclosed that it has closed a $25 million funding round led by Radical Ventures.
A number of other investors participated as well. Breyer Capital, Norwest Venture Par... |
| Jun 29, 2022 | How to de-anonymize fraudulent Tor web servers | Image: sharafmaksumov/Adobe Stock
Cybercriminals generally need to use online servers, be it to collect stolen data, communicate with an infected machine via malware or host phishing pages. One of the common techniques used by these threat ... |
| May 8, 2022 | Honeypot, типы и обнаружение | часть 1 Типы брандмауэров
часть 2 Варианты обхода брандмауэров
часть 3 IDS Системы обнаружения вторжений
часть 4 Варианты обхода IDS
Honeypot — это форма защиты, сильно отличающаяся от двух последних, о которых мы только что говорили. Сильн... |
| May 5, 2022 | F5 BIG-IP systems vulnerable to remote takeover | Application security and delivery vendor F5 has issued patches for its BIG-IP platform, to address a critical bug that could be abused to remotely take over vulnerable systems.
The flaw lies in representational state transfer (REST) interfa... |
| Apr 24, 2022 | ЧудESA защиты корпоративной почты или внедрение свободных почтовых шлюзов на базе Proxmox Mail Gateway | Средства межсетевого экранирования стали де-факто атрибутом любой сетевой инфраструктуры. Почтовому трафику тоже необходимы средства фильтрации. Поэтому в современных релеях реалях тяжело представить почтовую инфраструктуру организации без ... |
| Apr 18, 2022 | CouchDB, Erlang и печеньки — RCE на дефолтных настройках | В этой короткой статье я хочу поделиться о том как получить RCE на системе с установленной CouchDB на большинстве инсталляций в локальной сети или во внешней сети, не защищенных брандмауэром. Для справки, в Shodan таких нашлось около полуто... |
| Mar 18, 2022 | Microsoft releases open source Trickbot scanner for Mikrotik routers | Microsoft's Defender for Internet of Things Research Team and Threat Intelligence Centre have jointly released an open source forensic tool for popular Mikrotik routers that have been hacked to act as proxy servers for the Trickbot malware ... |
| Feb 22, 2022 | Phosphorus Cybersecurity raises $38 million to secure IoT devices | Join today's leading executives online at the Data Summit on March 9th. Register here.
Today, Nashville, Tennessee-based internet of things (IoT) security startup, Phosphorus Cybersecurity, announced it had closed a $38 million series A fun... |
| Feb 22, 2022 | Phosphorus Cybersecurity raises $38 million to secure IoT devices | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
Today, Nashville, Tennessee-based internet of thi... |
| Jan 22, 2022 | Blackline Safety : Considering a Wi-Fi gas detector? | Wi-Fi connectivity may open the door to risk
Wireless gas detection is no longer a well-intentioned promise - the wireless Internet of Things (IoT), combined with leading gas detection, delivers the ability to keep your teams safe, around t... |
| Dec 16, 2021 | OSINT или разведка по открытым источникам | Поиск по открытым источникам — это методология сбора и анализа данных, находящихся в открытом доступе, для получения дополнительной информации о цели.
В данной статье расскажем о том, какими методами и средствами можно собирать информацию и... |
| Nov 22, 2021 | Как нас могут логировать общедоступными методами | DISCLAIMER: Данная статья написана в ознакомительных целях и не является руководством к неправомерным действиям или обучающим материалом для сокрытия правонарушений.Логирование действий пользователей в ОРД
Логирование действий пользователей... |
| Nov 16, 2021 | Разбор одного таска или как найти сайт по favicon.ico? | На написание данной статьи меня подтолкнуло участие в соревнованиях по информационной безопасности - Capture the Flag (CTF). Это был MCTF 2021 , проводимый Московским Техническим Университетом Связи и Информатики.Логотип MCTFТаск - Next Lev... |
| Oct 13, 2021 | JFrog : Don't let Prometheus Steal your Fire | Background
Prometheus is an open-source, metrics-based event monitoring and alerting solution for cloud applications. It is used by nearly 800 cloud-native organizations including Uber, Slack, Robinhood, and more. By scraping real-time metr... |
| Oct 5, 2021 | Open Intelligence Gathering: Light and Dark | A few weeks ago, I asked my manager, Chris Bareford, if he would approve the purchase of a licence to use the https://www.shodan.io open intelligence platform. I was both vague and detailed enough to justify the purchase, something about ga... |
| Jul 29, 2021 | How to ensure your vendors are cybersecure to protect you from supply chain attacks | Image: Jaiz Anuar/Shutterstock
There aren’t many sure things in life, and, sadly, one of them is how criminals—cyber or otherwise—always leverage the victim’s weakest link to ensure their success. TechRepublic’s Tom Merritt, in his article,... |
| Jun 29, 2021 | Indian tech startup exposed Byju’s student data | India-based technology startup Salesken.ai has secured an exposed server that was spilling private and sensitive data on one of its customers, Byju’s, an education technology giant and India’s most valuable startup.
The server was left unpr... |
| Jun 24, 2021 | An internal code repo used by New York State’s IT office was exposed online | A code repository used by the New York state government’s IT department was left exposed on the internet, allowing anyone to access the projects inside, some of which contained secret keys and passwords associated with state government syst... |
| May 28, 2021 | SECUREWORKS CORP.
SecureWorks : USAID-Themed Phishing Campaign Leverages U.S. Elections Lure | USAID-Themed Phishing Campaign Leverages U.S. Elections Lure The targeted organizations are likely of interest to foreign intelligence services, suggesting the intent is espionage. The campaign may be linked to the threat group responsible ... |
| Feb 25, 2021 | Code-execution flaw in VMware has a severity rating of 9.8 out of 10 | Enlarge
Getty Images reader comments 56 with 44 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Hackers are mass-scanning the Internet in search of VMware servers with a newly disclosed code-executi... |
| Nov 5, 2020 | Network access to over 7,000 organizations for sale on hacker forums | Hackers have breached 7,500 organizations and are selling network access on multiple Russian hacker forums.
An investigation by CyberNews.com reveals compromised networks located in the USA, Canada, and Australia which include educational, ... |
| Nov 2, 2020 | Dr. Strangenet—or, how I stopped worrying and embraced the WFH IT apocalypse | Enlarge / We all work from home now. We are the cloud.
Aurich Lawson / Getty Images reader comments 181 with 110 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit The Future of Collaboration
The old w... |
| Aug 17, 2020 | How one attack campaign steals and sells RDP credentials | Image: iStockphoto/stevanovicigor
With so many people still working from home, organizations and employees are more dependent than ever on remote access to internal PCs and networks. That means more users who need to tap into Remote Desktop... |
| Jul 29, 2020 | How to protect your website’s database from hackers | Image: iStock/Vladimir_Timofeev
Website databases contain a treasure trove of confidential information, including usernames, email addresses, phone numbers, and passwords (albeit encrypted passwords…hopefully). Such databases are a tempting... |
| Jul 22, 2020 | Ongoing Meow attack has nuked >1,000 databases without telling anyone why | Enlarge
David Sutterlütti / Flickr reader comments 127 with 100 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
More than 1,000 unsecured databases so far have been permanently deleted in an ongoing... |
| Jun 5, 2020 | Are cyber attacks really as advanced as we think? [Q&A] | When organizations suffer a cyberattack it's often described by them as 'advanced'. But just how good does an attack need to be to breach defenses?
We spoke to Matt Walmsley, head of EMEA marketing at threat detection and response platform ... |
| May 1, 2020 | How ransomware attacks are making the most of the COVID-19 crisis [Q&A] | Ransomware is a business that's thriving in the current climate, but what's behind this and what wider problems do attacks create for businesses?
We had a socially-distanced chat with Chris Morales, head of security analytics at network det... |
| Apr 17, 2020 | Microsoft: Do this to secure your remote desktop users | https://d1rytvr7gmk1sx.cloudfront.net/wp-content/uploads/2020/03/20200304_Larry_Bill_Coronavirus.mp4
Microsoft has warned of the risks associated with allowing remote access to desktop services while working from home, publishing guidance o... |
| Nov 7, 2019 | Open-Source Vulnerabilities risk an App’s Security: What’s the Solution? | Ernest Hamilton, Tech Times 07 November 2019, 01:11 pm
(Photo : Open-Source Vulnerabilities risk an App’s Security: What’s the Solution?)
Google Chrome - the most popular browser - recently faced a far-reaching security risk. According to Z... |
| Aug 21, 2019 | The year-long rash of supply chain attacks against open source is getting worse | Wired UK/Shuttershock reader comments 84 with 55 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
A rash of supply chain attacks hitting open source software over the past year shows few signs of aba... |
| Jul 22, 2019 | Exchange QuickBit Confirms Data Breach May Impact 300K Users | QuickBit, a Swedish cryptocurrency exchange listed on the NGM Nordic MTF market, allegedly leaked 300,000 customer records via an unprotected MongoDB database. The exchange confirmed the event in a series of updates on their investor relati... |
| May 22, 2019 | Thousands of vulnerable TP-Link routers at risk of remote hijack | Thousands of TP-Link routers are vulnerable to a bug that can be used to remotely take control of the device, but it took more than a year for the company to publish the patches on its website.
The vulnerability allows any low-skilled attac... |
| May 12, 2019 | Two years after WannaCry, a million computers remain at risk | Two years ago today, a powerful ransomware began spreading across the world.
WannaCry spread like wildfire, encrypting hundreds of thousands of computers in more than 150 countries in a matter of hours. It was the first time that ransomware... |
| May 2, 2019 | Hundreds of Orpak gas station systems can be easily hacked thanks to hardcoded passwords | Homeland Security’s cybersecurity agency says a popular gas station software contains several security vulnerabilities that require “low skill” to exploit.
The advisory, posted by the Cybersecurity and Infrastructure Security Agency (CISA),... |
| Apr 25, 2019 | A new cryptocurrency mining malware uses leaked NSA exploits to spread across enterprise networks | Two years after highly classified exploits built by the National Security Agency were stolen and published, hackers are still using the tools for nefarious reasons.
Security researchers at Symantec say they’ve seen a recent spike in a new m... |
| Jan 11, 2019 | An unsecured database exposed the personal details of 202M job seekers in China | The personal details belonging to more than 202 million job seekers in China, including information like phone numbers, email addresses, driver licenses and salary expectations, were freely available to anyone who knew where to look for as ... |
| Dec 13, 2018 | Popular avatar app Boomoji exposed millions of users’ contact lists and location data | Popular animated avatar creator app Boomoji, with more than five million users across the world, exposed the personal data of its entire user base after it failed to put passwords on two of its internet-facing databases.
The China-based app... |
| Oct 19, 2018 | Buggy software in popular connected storage drives can let hackers read private data | Security researchers have found flaws in four popular connected storage drives that they say could let hackers access a user’s private and sensitive data.
The researchers Paulos Yibelo and Daniel Eshetu said the software running on three of... |
| Oct 17, 2018 | Trivial authentication bypass in libssh leaves servers wide open | Enlarge
starwars.com reader comments 80 with 70 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
There’s a four-year-old bug in the Secure Shell implementation known as libssh that makes it trivial f... |
| Sep 19, 2018 | Password bypass flaw in Western Digital My Cloud drives puts data at risk | A security researcher has published details of a vulnerability in a popular cloud storage drive after the company failed to issue security patches for over a year.
Remco Vermeulen found a privilege escalation bug in Western Digital’s My Clo... |
| Sep 14, 2018 | Cryptocurrency mining attacks using leaked NSA hacking tools are still highly active a year later | It’s been over a year since highly classified exploits built by the National Security Agency were stolen and published online.
One of the tools, dubbed EternalBlue, can covertly break into almost any Windows machine around the world. It did... |
| Jun 12, 2018 | Running Kodi on Amazon Fire TV or Fire TV Stick? You're at risk from cryptocurrency mining malware | Amazon’s Fire TV products are very popular with Kodi users, because it’s easy to install the media center software on it, along with any streaming add-ons.
Users of Kodi boxes are used to hearing of potential dangers -- some threats of whic... |
| May 30, 2018 | SECURITY.FYI: VPNFilter What YOU Need To Know | High impact cyber security news is continuing its exploration into mainstream media coverage and last weeks VPNFilter announcement made for interesting reading.
Talos, Cisco’s threat intelligence organisation, announced the uncovering of a ... |
| Apr 27, 2018 | HPE servers targeted by ransomware criminals | Security researchers are reporting that servers with management interfaces exposed to the internet are being attacked by ransomware criminals who encrypt the files on the hardware in order to extort money out of victims.
Iranian UBCERT rese... |
| Apr 11, 2018 | UK Businesses Face Growing Cyber Threats | A report published on Tuesday by the National Cyber Security Centre has revealed that cyber attacks on UK businesses increased last year.
According to the report, British businesses face increasing threats from ransomware, data breaches and... |
| Jan 31, 2018 | New Tool Automatically Finds and Hacks Vulnerable Internet-Connected Devices | Hacking isn’t always hard. Some lower-tier hackers use programs to automatically churn through breached login details to break into other accounts, and some penetration testing tools are designed to streamline processes so hackers can get t... |
| Jan 26, 2018 | Vulnerable industrial controls directly connected to Internet? Why not? | Siemens reader comments 134 with 71 posters participating, including story author
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Yesterday, Siemens issued an update to a year-old product vulnerability warning for its SI... |
| Jun 4, 2017 | 'ExplodingCan' NSA exploit menaces thousands of servers | Researchers have documented another exploit linked to the NSA that is being used by attackers to target Microsoft Windows 2003 servers running the Internet Information Services version 6.0 web server.
It follows in the footsteps of the Wann... |
| May 6, 2017 | The hijacking flaw that lurked in Intel chips is worse than anyone thought | Enlarge
Intel reader comments 131 with 86 posters participating, including story author
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
A remote hijacking flaw that lurked in Intel chips for seven years was more severe t... |
| Mar 3, 2017 | Brinquedo conectado à internet vaza dados de crianças | Ah, a internet das coisas… Imagine o cenário: você, pai, vê o anúncio de um bicho de pelúcia que permite que você converse com o seu filho remotamente. Vocês conseguem trocar mensagens de voz por um aplicativo conectado ao brinquedo, que re... |
| Feb 6, 2017 | Mass attack worldwide on internet-exposed printers | An unknown hacker has taken it upon himself to warn users that their unprotected internet-connected printers can be remotely exploited, by printing out warning messages from the devices.
Over the weekend, several users took to social media ... |
| Jan 31, 2017 | The overlooked security threat in your office: printers | Commonly used office printers and multi-function devices can be exploited to leak information and execute code, presenting multiple attack vectors that are often overlooked, a security researcher has found.
Jens Müller from the Ruhr-Univers... |
| Jan 24, 2017 | Thousands of Australian servers are still vulnerable to Heartbleed | Around three years after the serious Heartbleed bug was discovered in the OpenSSL crypto library, thousands of servers in Australia remain vulnerable.
Heartbleed can be exploited to silently to leech data remotely and has since been patched... |
| Jan 13, 2017 | FTC Sues D-Link For Pretending To Give A Damn About Hardware Security | If you’ve been paying attention, you’ve probably noticed that the so-called Internet of Things isn’t particularly secure. Hardware vendors were so excited to market a universe of new internet-connected devices, they treated things like priv... |
