Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- How the belgian police failed to identify ISIS terrorists
- IT technicians performing illegal customer computer searches for FBI
- The spy with no name
For the more technical
- 33C3 recordings
- Technical analysis of CryptoMix/CryptFile2 ransomware
- Reverse engineering Toshiba R100 BIOS
- Stolen passwords fuel cardless ATM fraud in US
- The FBI hack that wasn’t
- Analysis of a driver disabling AV
- Iranian APT campaign analysis
- Analysis of DragonOK APT campaign
- Overview of SS7 security flaws
- Bruteforcing local WordPress websites
- Phishing with fake PDF login
- New hashcat 3.30 released
- Government’s first report on Russia and DNC is woefully inadequate
- How the JAR report did more harm than good
- About the indicators in JAR report
- Analysis of a related incident
- Analysis of CVE-100033 (PHPMailer)
- Technical details on the Fancy Bear Android malware (poprd30.apk)
- The GRU-Ukraine artillery hack that may never have happened
- RCE in Western Digital MyCloud NAS
- Box.com data leak
- Exploiting MS16-098
- Kaspersky: SSL interception differentiates certificates with a 32bit hash
- Ultrasound tracking to deanonymize Tor users
- KeepKey’s CEO hacked
- [PDF] Classification of smartphone users using internet traffic
- Exploiting blind SQL injections with Burp Collaborator
- Explore hidden networks with double pivoting
- List of EU security conferences in 2017
- OS X malware in 2016
- QNAP NAS heap overflow
- How and why the leap second affected Cloudflare DNS
- Cache-timing attacks on OpenSSL
- Format string vulnerabilities in Python
- Crashing iPhones with a single text
- JTAG explained
- Attacking Nexus 6 and 6P custom boot modes
- Introduction to IoT hardware hacking
- Lateral movement using the MMC20 application COM object
- Tool for finding secrets on GitHub
- Buffer overflow explained
Did you enjoy this list? You can retweet it and subscribe to one of our feeds on Twitter, Facebook or RSS.
One thought on “IT Security Weekend Catch Up – January 7, 2017”