A peculiarity in SAML libraries has left many single-sign-on (SSO) implementations vulnerable to abuse. It allows an attacker that has gained any authenticated access to trick the system into grantingRead More →
Normally, each malware has a specific purpose according to the hacker that programs it. Recently, the mining software that uses victims’ hardware to mining cryptocurrencies is trend, although we alsoRead More →
Icebreaker Automates network attacks against Active Directory to deliver you plaintext credentials when you’re inside the network but outside of the Active Directory environment. Cyber security researchers explain that Icebreaker perform 5Read More →
Ransomware is one of the most important threats facing Internet users. Its rate alerts much to both companies and users. Hackers take advantage of the most popular sectors and whereRead More →
Open Bug Bounty consists of a team of no more than 10 researchers from several countries with backgrounds in IT, cyber security and law, who work to verify vulnerabilities, promptly notify websiteRead More →
Android P, the next major version of Android, could be weeks away from an official unveiling, and although its core user-facing features are still unknown to us, we are discovering many little tidbits thanksRead More →
Card-Not-Present fraud is still a problem, however. The US began its transition to chip-based credit cards in earnest in October 2015, after high-profile credit card hacks in the previous years atRead More →
More than 10,000 credit and debit card holders have been affected by a data breach reported by Punjab National Bank (PNB). Cyber security experts believe that the card details of customersRead More →
SamSam ransomware in January infected vulnerable networks in hospitals, city councils, educational facilities and transportation systems. Now SamSam ransomware is back and the Colorado Department of Transportation is its mostRead More →
Drupal developers patched two critical vulnerabilities this week in versions 7 and 8 of its content management system platform. Overall, Drupal patched seven vulnerabilities including four rated moderately critical and two flawsRead More →
A few months ago, the National Institute of Standards and Technology (NIST) published Framework for Improving Critical Infrastructure Cyber security, commonly known as Cybersecurity Framework. This framework came with manyRead More →
The Android spyware was used to steal personal data of victims – The campaign also shows why users should never use their real photos on Facebook. There are almostRead More →
Malware detection by learning and retrieving information for Android Overview MADLIRA is a tool for Android malware detection. According to cyber security professionals, this tool consists of two components: the TFIDF componentRead More →
DNS requests are one of the elements that most often spy on third-party applications and services. Every time we visit a website, before connecting directly to it, a request isRead More →
Dr. Mine is a script programmed in NodeJS designed specially to help the detection of the cryptocurrency mining in the different webs that we are going to visit. According to cyberRead More →
Katie Harbath, Facebook’s global director of policy program says it that the company will start sending postcards by snail mail to verify buyers of ads related to United States elections.Read More →
Researchers said they found cyptojacking code hidden on the Los Angeles Times’ interactive Homicide Report webpage that was quietly harnessing visitors’ CPUs to mine Monero cryptocurrency. The cryptojacking incident wasRead More →
Certificates registered in names of real corporations are surprisingly easy to come by. The Stuxnet worm that targeted Iran’s nuclear program almost a decade ago was a watershed piece ofRead More →
Developers are in the process of releasing updates to fix the critical flaws. Two versions of uTorrent, one of the Internet’s most widely used BitTorrent apps, have easy-to-exploit vulnerabilities thatRead More →
Tunna is a union of tools that will wrap any TCP communication over HTTP. It can be used to bypass network restrictions in environments completely protected by firewalls. Summary InRead More →
