Discussion of public breaches of security
Insignary had some research and created a report that looked into the binary code of most of the routers on the market. Technewsworld has a story… And Business Insider has a story The short story is that many router companies do not update their devices which would mean customers would have to upgrade firmware, which … Read more
Which Bloodhound might you ask? No not the Dog… But the following program in Kali Linux: Just a slightly different picture and meaning. Cobaltstrike has tested with it and this is his explanation: “BloodHound is a tool to analyze and understand Active Directory Trust Relationships. For an offensive practitioner, this tool can highlight the hops … Read more
Did you hear the latest in Cybersecurity news? No not the news that Pizza Hut was hacked Not the news Hyatt Hotels were hacked. BUT only the news that the supposed secure WPA2 Wifi Protocol is actually vulnerable to attacks. Which essentially means all current wifi access points are not secure. CERT has a list … Read more
A new Zero-Day attack is out available for attackers. this attack was discussed in the SANS website Internet Storm Center: https://isc.sans.edu/forums/diary/SMBLoris+the+new+SMB+flaw/22662/ SMBLoris – the new SMB flaw The article was written from reviewing a Threatpost article, but was ultimately triggered because of the DEFCon 2017 presentation: Notice the arrows on right with memory usage on … Read more
The FUD techniques are certain to come up again and again as they are effective (to a degree). FUD is a marketing technique to sow fear into cost conscious customers that are thinking of going to a competitor. Pushing safety in numbers and other uncertainty creates FUD in the mind of potential customers. Thus it … Read more
