@infosec_blogs

Eclectic Twitter stream dump of Infosec blogs. Compiled by @StegoPax

Joined February 2015
  • Tweets17.8K
  • Following0
  • Followers721
"Must support human behaviour, not blaming people" We need to educate support people, not use them as scapegoats. #CYBERUK17 @ncsc
5
4
Clever. xitter.cf/DidierStevens/status/8…
Didier Stevens@DidierStevens7 Dec 2016
Just analyzed a maldoc with .vbs code that sleeps 5 minutes before downloading payload. Is immune to sandbox time acceleration by ...
GCHQ have just dropped Stroom onto Github: github.com/gchq/stroom

GitHub - gchq/stroom: Stroom is a highly scalable data storage, processing and analysis platform.

Stroom is a highly scalable data storage, processing and analysis platform. - gchq/stroom

github.com
Microsoft Says Russian Hackers Using Unpatched Windows Bug Disclosed by Google: Google's ... bit.ly/2eTB7VT Via @TheHackersNews
1
IPv6 Source Address Selection: As we all know an IPv6 enabled host can have multiple add... bit.ly/2fDqnvR Via @Enno_Insinuator
3
An information disclosure flaw still impacts SAP Systems to the Internet: Experts from E... bit.ly/2ecGRWF Via @securityaffairs
NullCrew member sentenced to 45 months in prison: A Tennessee man has been sentenced to ... bit.ly/2fcUfNa Via @helpnetsecurity
The digital world should mean a change in mindset on security for businesses: Businesses... bit.ly/2fcTaoo Via @helpnetsecurity
65% of Windows devices still running Windows 7, released in 2009: To analyze the current... bit.ly/2ecEset Via @helpnetsecurity
Simplifying SSH keys and SSL Certs Management across the Enterprise using Key Manager Plu... bit.ly/2eczoHa Via @TheHackersNews
1
Breaking News: I’m a Vendor Shill: Got this comment on my Network Automation RFP Requirements b... bit.ly/2eyCdDp Via @ioshints
Industry reactions: UK government cyber security strategy: Yesterday, the UK government ... bit.ly/2f9d5qt Via @helpnetsecurity
1
Security Now (MP3): SN 584: Your Questions, Steve's Answers 242: Leo and Steve discuss an o... bit.ly/2eTdXPc Via @securitycast
SANS Internet Storm Center Daily Network Security and Information Security Podcast: ISC Sto... bit.ly/2eSSohL Via @securitycast
Hacker Public Radio: HPR2153: Splitting a Block of Bees Wax: I need to cut a block of wax.... bit.ly/2eSUQVx Via @securitycast
Maldoc With Process Hollowing Shellcode: Last week I came across a new Hancitor maldoc sam... bit.ly/2exJmni Via @DidierStevens

Maldoc With Process Hollowing Shellcode

Last week I came across a new Hancitor maldoc sample. This sample contains encoded shellcode that starts a new (suspended) explorer.exe process, injects its own code (an embedded, encoded exe) and …

blog.didierstevens.com
10
1
9
Microsoft says you'll have to wait another week for critical Windows zero-day patch: The Russian... bit.ly/2exy3M4 Via @gcluley

Microsoft says you’ll have to wait until next week for Windows zero-day fix

Russian-linked Fancy Bear hacking group said to be exploiting flaw in targeted attacks.

grahamcluley.com
Brakeing Down Security podcast: 2016-043: BSIMMv7, a teachable moment, and our new Slack Ch... bit.ly/2fbFOca Via @securitycast

BrakeSec Education Podcast: 2016-043: BSIMMv7, a teachable moment,...

  **Brakeing Down Security has a Slack channel now... just go to and follow the instructions to have the bot add you to our show's official channel.** Every year, organizations come out with industry...

brakeingsecurity.com
Only You Can Prevent Internet DDoS: Friday, October 21, 2016, will likely go down in the his... bit.ly/2fbztxh Via @TripwireInc
Overlayfs Privilege Escalation: This Metasploit module attempts to exploit two different CV... bit.ly/2eSfPYM Via @packet_storm
1
Load more