I was 7 words away from being spear-phished Security News & Discussion

I was 7 words away from being spear-phished
In Transactional Memory, No One Can Hear You Scream: Attacking Intel's Transactional Synchronization Extensions
Sooty v1.2 released. New Features include reputation checks for VirusTotal, AbuseIPDB, BadIP;s, check for Tor Exit Nodes, compare file hashes and retrieve reports, analysis of emails and links, and query HaveIBeenPwned.
EA Games Vulnerability - Check Point Research
Slurp: An s3 bucket enumerator has been re-written and re-released
How to get started with threat modeling, before you get hacked
MFSocket: A Chinese surveillance tool
Anteater - CI/CD Security Checks

I was 7 words away from being spear-phished

Posted: 26 Jun 2019 06:10 AM PDT

submitted by /u/businesstrout
[link] [comments]

In Transactional Memory, No One Can Hear You Scream: Attacking Intel's Transactional Synchronization Extensions

Posted: 26 Jun 2019 09:44 AM PDT

Sooty v1.2 released. New Features include reputation checks for VirusTotal, AbuseIPDB, BadIP;s, check for Tor Exit Nodes, compare file hashes and retrieve reports, analysis of emails and links, and query HaveIBeenPwned.

Posted: 26 Jun 2019 02:03 AM PDT

submitted by /u/compSecurity
[link] [comments]

EA Games Vulnerability - Check Point Research

Posted: 26 Jun 2019 07:54 AM PDT

submitted by /u/DemanHD
[link] [comments]

Slurp: An s3 bucket enumerator has been re-written and re-released

Posted: 26 Jun 2019 11:20 AM PDT

I released slurp back in December of 2017 and it was featured in SANS NewsBites; pretty cool. But, there where some bugs with it, such as connection dropping and so forth. I have since rewritten slurp to be more of a targeted tool instead of a passive surveillance tool (I removed certstream).

I believe this change is to the benefit of the community; because, I have since added a method to scan S3 buckets if you have AWS credentials (~/.aws/credentials); this method is very fast and will give you results quickly. But, if you lack that kind of access the good old fashioned domain/keyword scanning is still there and works as expected.

As usual, all tools I write are strong copyleft; so slurp stays GPLv3 with the benefit that it will help the community.... or anyone who accidentally left buckets public facing.

You can find the project here: https://github.com/hehnope/slurp

submitted by /u/Smooth_Mess
[link] [comments]

How to get started with threat modeling, before you get hacked

Posted: 26 Jun 2019 01:40 PM PDT

submitted by /u/Wirbelwind
[link] [comments]

MFSocket: A Chinese surveillance tool

Posted: 26 Jun 2019 11:39 AM PDT

submitted by /u/Titokhan
[link] [comments]

Anteater - CI/CD Security Checks

Posted: 26 Jun 2019 10:29 AM PDT

submitted by /u/lhinds
[link] [comments]