Demonstrating the Capital One breach on your own AWS account Security News & Discussion

---

• Demonstrating the Capital One breach on your own AWS account
• Various Android Apps allow anyone to remotely edit db/prefs due to debugging library in prod
• Threat intelligence, building your citadel
• PCG Random number generators are flawed and easy to predict
• Call your tier-one support engineer a "hacker" for fixing a problem your system designers couldn't figure out? Good luck finding that zero-day exploit I told you about.
• NCSC Cyber Security Body Of Knowledge Published.
• cve-search/git-vuln-finder - Finding potential software vulnerabilities from git commit messages
• GitHub - quark-engine/quark-engine: An Obfuscation-Neglect Android Malware Scoring System
• Microsoft Edge (Chromium) - EoP via XSS to Potential RCE

Demonstrating the Capital One breach on your own AWS account Posted: 29 Dec 2019 03:10 AM PST submitted by /u/sanitybit [link] [comments]

Various Android Apps allow anyone to remotely edit db/prefs due to debugging library in prod Posted: 29 Dec 2019 02:46 AM PST submitted by /u/Deletescape [link] [comments]

Threat intelligence, building your citadel Posted: 29 Dec 2019 10:28 AM PST submitted by /u/0xsha [link] [comments]

PCG Random number generators are flawed and easy to predict Posted: 29 Dec 2019 10:06 AM PST submitted by /u/mgostIH [link] [comments]

Call your tier-one support engineer a "hacker" for fixing a problem your system designers couldn't figure out? Good luck finding that zero-day exploit I told you about. Posted: 29 Dec 2019 01:47 PM PST submitted by /u/_vavkamil_ [link] [comments]

NCSC Cyber Security Body Of Knowledge Published. Posted: 28 Dec 2019 05:11 PM PST submitted by /u/1nt3rnalv01d [link] [comments]

cve-search/git-vuln-finder - Finding potential software vulnerabilities from git commit messages Posted: 28 Dec 2019 07:10 AM PST Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commits which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE IDs are present, those are added automatically in the output. https://github.com/cve-search/git-vuln-finder submitted by /u/adulau [link] [comments]

GitHub - quark-engine/quark-engine: An Obfuscation-Neglect Android Malware Scoring System Posted: 25 Dec 2019 11:06 PM PST submitted by /u/krnick [link] [comments]

Microsoft Edge (Chromium) - EoP via XSS to Potential RCE Posted: 24 Dec 2019 11:41 AM PST submitted by /u/Titokhan [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States