June 2019 – Security

Third Time’s a Charm (A brief history of a gay marriage)

June 28, 2019 by Lesley Lurie

Lesley Lurie

Happy Pride from Proudflare, Cloudflare’s LGBTQIA+ employee resource group. We wanted to share some stories from our members this month which highlight both the struggles behind the LGBTQIA+ rights movement and its successes. This first story is from Lesley. The moment that crystalised the memory of that day…crystal blue afternoon,…

Third Time’s a Charm (A brief history of a gay marriage)

June 28, 2019 by Lesley Lurie

Lesley Lurie

How to Use Burp & FoxyProxy to Easily Switch Between Proxy Settings

June 28, 2019 by drd_

drd_

One of the best ways to dig into a website and look for vulnerabilities is by using a proxy. By routing traffic through a proxy like Burp Suite, you can discover hidden flaws quickly, but sometimes it's a pain to turn it on and off manually. Luckily, there is a…

How to Use Metasploit’s Timestomp to Modify File Attributes & Avoid Detection

June 28, 2019 by drd_

drd_

It is said that the best way to avoid detection when hacking is to leave no trace, and often that means not touching the filesystem at all. But realistically, in most cases, it's impossible not to interact with the filesystem in one way or another. The next best thing to…

Top 10 Browser Extensions for Hackers & OSINT Researchers

June 28, 2019 by Kody

Kody

While modern browsers are robust and provide a lot of functionality, they can be unlocked to do some pretty spectacular things with browser extensions. For hackers and OSINT researchers, these tools can be used to defeat online tracking, log in to SSH devices, and search the internet for clues during…

Microsoft to Require Multi-Factor Authentication for Cloud Solution Providers

June 28, 2019 by BrianKrebs

BrianKrebs

It might be difficult to fathom how this isn’t already mandatory, but Microsoft Corp. says it will soon force all Cloud Solution Providers (CSPs) that help companies manage their Office365 accounts to use multi-factor authentication. The move comes amid a noticeable uptick in phishing and malware attacks targeting CSP employees and…

How to Perform a Pass-the-Hash Attack & Get System Access on Windows

June 27, 2019 by drd_

drd_

Passwords on Windows are stored as hashes, and sometimes they can be tough to crack. In certain situations, though, we can get around that by using the hash as is, with no need to know the plaintext password. It's especially interesting if we can manage to get the hash of…

Podcast Episode 26: How Hackers Find Vulnerabilities in WordPress with Ryan Dewhurst

June 27, 2019 by Kathy Zant

Kathy Zant

Ryan Dewhurst is an ethical hacker and penetration tester who has developed a number of tools that make finding vulnerabilities in WordPress much easier. Penetration testers are professional ethical hackers that find vulnerabilities so they can be patched before they are exploited. Ryan is one of three contributors to WPScan,…

Breach at Cloud Solution Provider PCM Inc.

June 27, 2019 by BrianKrebs

BrianKrebs

A digital intrusion at PCM Inc., a major U.S.-based cloud solution provider, allowed hackers to access email and file sharing systems for some of the company’s clients, KrebsOnSecurity has learned. El Segundo, Calif. based PCM [NASDAQ:PCMI] is a provider of technology products, services and solutions to businesses as well as state and…

VirusTotal, Chronicle and Google Cloud

June 27, 2019June 27, 2019 by Bernardo.Quintero

Bernardo.Quintero

It's been more than seven years since Google acquired VirusTotal, and more than one year since we moved to Chronicle. Today we have another update: Chronicle is joining Google Cloud. This update, like our move to Google a few years back, does not change the mission or focus of VirusTotal.…

How Google adopted BeyondCorp

June 27, 2019July 3, 2019 by Scott Westover

Scott Westover

Posted by Lior Tishbi, Program Manager and Puneet Goel, Product Manager, Justin McWilliams, Engineering Manager It's been almost five years since we released the first of multiple BeyondCorp papers, describing the motivation and design principles that eliminated network-based trust from our internal networks. With that anniversary looming and many organizations…

The deep-dive into how Verizon and a BGP Optimizer Knocked Large Parts of the Internet Offline Monday

June 26, 2019 by Martin J Levy

Martin J Levy

A recap on what happened MondayOn Monday we wrote about a painful Internet wide route leak. We wrote that this should never have happened because Verizon should never have forwarded those routes to the rest of the Internet. That blog entry came out around 19:58 UTC, just over seven hours…

The deep-dive into how Verizon and a BGP Optimizer Knocked Large Parts of the Internet Offline Monday

June 26, 2019 by Martin J Levy

Martin J Levy

Google Public DNS over HTTPS (DoH) supports RFC 8484 standard

June 26, 2019June 26, 2019 by Google Security PR

Google Security PR

Posted by Marshall Vale, Product Manager and Alexander Dupuy, Software EngineerEver since we launched Google Public DNS in 2009, our priority has been the security of DNS resolution. In 2016, we launched a unique and innovative experimental service -- DNS over HTTPS, now known as DoH. Today we are announcing…

New Module and Type: Cassandra

June 26, 2019 by BinaryEdge

BinaryEdge

This week the new module and type of data we're releasing is Cassandra. Cassandra is a database technology used for high availability and scalability by multiple companies worldwide. Cassandra is in use at Constant Contact, CERN, Comcast, eBay, GitHub, GoDaddy, Hulu, Instagram, Intuit, Netflix, Reddit, The Weather Channel, and over…

1 2 3 … 7 Next »