CIRA Canadian Shield DNS released Security News & Discussion

---

• CIRA Canadian Shield DNS released
• The Cycle of Adversary Pursuit - To track a fast-moving adversary over time, FireEye exploit organic intrusion data, pivot to other data sets, and make that knowledge actionable for analysts and incident responders, enabling new discoveries and assessments on the actor
• OWASP Firmware Security Testing Methodology
• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars
• How to exploit parser differentials - GitLab File Disclosure
• OWASP IoTGoat; a deliberately insecure firmware
• Awesome risk quantification
• CVE-2020-10560 OSSN Arbitrary File Read
• Attacking HelpDesks Part 1: RCE Chain on DeskPro, with Bitdefender as a Case Study
• Impact of DNS over HTTPS (DoH) on DNS Rebinding Attacks

CIRA Canadian Shield DNS released Posted: 31 Mar 2020 09:57 AM PDT submitted by /u/Objectivetruth1 [link] [comments]

The Cycle of Adversary Pursuit - To track a fast-moving adversary over time, FireEye exploit organic intrusion data, pivot to other data sets, and make that knowledge actionable for analysts and incident responders, enabling new discoveries and assessments on the actor Posted: 31 Mar 2020 08:18 AM PDT submitted by /u/digicat [link] [comments]

OWASP Firmware Security Testing Methodology Posted: 30 Mar 2020 09:09 PM PDT submitted by /u/scriptingxss [link] [comments]

Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars Posted: 31 Mar 2020 02:24 AM PDT submitted by /u/dukeofmola [link] [comments]

How to exploit parser differentials - GitLab File Disclosure Posted: 31 Mar 2020 01:08 AM PDT submitted by /u/albinowax [link] [comments]

OWASP IoTGoat; a deliberately insecure firmware Posted: 30 Mar 2020 02:48 PM PDT submitted by /u/scriptingxss [link] [comments]

Awesome risk quantification Posted: 30 Mar 2020 11:47 PM PDT submitted by /u/yaraz [link] [comments]

CVE-2020-10560 OSSN Arbitrary File Read Posted: 30 Mar 2020 03:29 PM PDT submitted by /u/kev-thehermit [link] [comments]

Attacking HelpDesks Part 1: RCE Chain on DeskPro, with Bitdefender as a Case Study Posted: 30 Mar 2020 02:51 PM PDT We decided to look at the most popular on-premise helpdesk solutions. In this article we explain how we managed to find and exploit multiple vulnerabilities that eventually lead to remote code execution (RCE) at DeskPro software utilized by thousands of organizations using Bitdefender as a case study. https://blog.redforce.io/attacking-helpdesks-part-1-rce-chain-on-deskpro-with-bitdefender-as-case-study/ submitted by /u/RedForceSec [link] [comments]

Impact of DNS over HTTPS (DoH) on DNS Rebinding Attacks Posted: 30 Mar 2020 09:07 AM PDT submitted by /u/PhysicalMap9 [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States