Archive - December 2019

Bug Bounty Radar // December 2019 31 December 2019 at 15:32 UTC New Years Resolution: Organizations push for proactive approach to security 31 December 2019 at 13:56 UTC First externally discovered flaws in Microsoft Edge (Chromium) uncovered 31 December 2019 at 10:45 UTC Year in Review: Security needs a reboot in 2020 30 December 2019 at 13:01 UTC The year in #StupidSecurity – 2019’s biggest security and privacy blunders 30 December 2019 at 10:30 UTC #SocialSec – Hot takes on this week’s biggest cybersecurity news (Dec 27) 27 December 2019 at 16:01 UTC Swig Security Review 2019: Part II 27 December 2019 at 12:17 UTC Apple makes bug bounty program public and lifts payout ceiling to $1.5m 24 December 2019 at 14:00 UTC Ransomware attacks prompt push for US schools cybersecurity bill 24 December 2019 at 11:30 UTC Three members of $100m GozNym cybercrime ring sentenced 23 December 2019 at 15:30 UTC Swig Security Review 2019: Part I 23 December 2019 at 10:30 UTC #SocialSec – Hot takes on this week’s biggest cybersecurity news (Dec 20) 20 December 2019 at 15:01 UTC Breaking out of the Shellcode: Jeff Moss on Mr. Robot and hacking movies 20 December 2019 at 13:01 UTC Top 10 best hacking films of all time 20 December 2019 at 10:31 UTC Online tools help consumers protect against Magecart 19 December 2019 at 13:28 UTC Telerik UI for ASP.NET AJAX vulnerable to RCE attacks 19 December 2019 at 10:30 UTC Emoji rendering differences enough to identify devices and browsers 18 December 2019 at 17:30 UTC Fashion rental company HURR Collective exposed user information through misconfigured plugin 18 December 2019 at 14:13 UTC Ryuk ransomware implicated in City of New Orleans shutdown 18 December 2019 at 12:57 UTC Path confusion: Web cache deception threatens user information online 17 December 2019 at 15:02 UTC Google charts progress in developing Site Isolation browser technology 17 December 2019 at 11:24 UTC HITCON 2019 winners book their place for DEFCON 2020 16 December 2019 at 17:31 UTC F-Secure: Wireless presentation system riddled with flaws 16 December 2019 at 16:14 UTC Nginx hits back at copyright infringement claim over open source software  16 December 2019 at 14:00 UTC Most MikroTik routers fail to get patched a month after severe security issues disclosed 16 December 2019 at 11:15 UTC #SocialSec – Hot takes on this week’s biggest cybersecurity news (Dec 13) 13 December 2019 at 17:34 UTC Tracking prevention in Safari WebKit levels up 13 December 2019 at 16:14 UTC What is DDoS? A complete guide 13 December 2019 at 14:40 UTC German ISP challenges GDPR fine issued over inadequate customer ID checks 12 December 2019 at 16:44 UTC From DNS hijacking to domain fronting – SANS security pros offer retrospective on 2019 threat predictions 12 December 2019 at 15:14 UTC Security.txt – IESG issues final call for comment on proposed vulnerability reporting standard 12 December 2019 at 13:26 UTC ‘Alexa, hack my serverless technology’ – attacking web apps with voice commands 11 December 2019 at 16:48 UTC Plundervolt attack unpins Intel chip security enclaves 11 December 2019 at 15:32 UTC Chrome 79 launches with password protection and dozens of security fixes 11 December 2019 at 12:40 UTC Snatch ransomware reboots PCs in Safe Mode to skirt antivirus defenses 10 December 2019 at 18:00 UTC Safer-Eval library branded ‘harmful’ with no patch planned 10 December 2019 at 16:34 UTC SwigCast, Episode 4: MAGECART 10 December 2019 at 15:19 UTC NordVPN launches bug bounty program following security incident 10 December 2019 at 13:04 UTC A guide to DNS-over-HTTPS – how a new web protocol aims to protect your privacy online 09 December 2019 at 15:55 UTC When the screens went black: How NotPetya taught Maersk to rely on resilience – not luck – to mitigate future cyber-attacks 09 December 2019 at 12:09 UTC The best hacks from Black Hat Europe 2019 06 December 2019 at 16:23 UTC #SocialSec – Hot takes on this week’s biggest cybersecurity news (Dec 6) 06 December 2019 at 15:15 UTC HackerOne awards $20,000 bug bounty after leaking session cookie to hacker 06 December 2019 at 10:21 UTC Behind the story: Investigative journalist Geoff White highlights fragile ties between security and the media 05 December 2019 at 16:19 UTC Barq: Post-exploitation framework plays havoc with AWS infrastructure 05 December 2019 at 16:01 UTC Black Hat Europe: New tool offers Metasploit-like framework for hacking into drones 05 December 2019 at 14:01 UTC Offensive hacking tool maintains API security 05 December 2019 at 11:51 UTC False flag cyber operations likely to further muddle the complex attribution puzzle 05 December 2019 at 10:14 UTC SMS phishing: TapIt framework enables large-scale social engineering campaigns 04 December 2019 at 17:32 UTC Hack that lifts limits on contactless card payments debuts at Black Hat‪‬‬ Europe‬ 2019 04 December 2019 at 16:46 UTC Black Hat Europe 2019: Facebook’s Amanda Rousseau on rabbit holes, red team ops, and challenging security assumptions 04 December 2019 at 15:56 UTC WHID Elite: Weaponized USB gadgets boast multiple features for the stealthy red teamer 04 December 2019 at 14:19 UTC Attack detection: Zhouhe uses machine learning to hunt for network traffic threats 04 December 2019 at 12:32 UTC Imminent Monitor spyware operation undone by OpSec mistakes 03 December 2019 at 17:39 UTC CISA: US federal agencies to publish vulnerability disclosure policy 03 December 2019 at 15:48 UTC Ransomware slingers ramp up attacks on back-up devices 03 December 2019 at 10:39 UTC Android vulnerability StrandHogg shatters user privacy, impacts top 500 apps 02 December 2019 at 17:08 UTC Malvertising is on the decline but serious security issues remain 02 December 2019 at 11:25 UTC