Monthly Archives: December 2019

Phases of intelligence-led penetration testing

December 31st, 2019 📆 | 8463 Views ⚑

An intelligence-led penetration testing can be defined as an assessment for a valuable addition of cyber threat intelligence in the

Tagged with: intelligence • penetration • phases • testing

Linux Kernel 5.0.0-rc7 f2fs Filesystem ttm_page_alloc.c. ttm_put_pages memory corruption

December 31st, 2019 📆 | 1535 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $5k-$25k 4.72- A vulnerability was found in Linux

Tagged with: alloc • corruption • filesystem • kernel • linux • memory • pages

RavnAir says more flight delays and cancellations possible after cyberattack

December 31st, 2019 📆 | 5851 Views ⚑

An Alaska air carrier that suffered a cyberattack has experienced more disruption than initially projected. The RavnAir Group on Dec.

Tagged with: after • cancellations • cyberattack • delays • flight • possible • ravnair

Nagios XI 5.6.9 nocscreenapi.php host/hostgroup/servicegroup cross site scripting

December 31st, 2019 📆 | 4232 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: cross • hostgroup • nagios • nocscreenapi • scripting • servicegroup

China’s New Encryption Law Orders Corporate Inspections

December 31st, 2019 📆 | 7690 Views ⚑

A new law taking effect on the first day of the New Year will apply sweeping new rules to data

Tagged with: china • corporate • encryption • inspections • orders

libsixel 1.8.4 fromgif.c gif_out_code memory corruption

December 31st, 2019 📆 | 6885 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $0-$5k 4.51 A vulnerability was found in libsixel

Tagged with: corruption • fromgif • libsixel • memory

Digital Lighting Artist Program – Student Montage – Winter 2020

December 31st, 2019 📆 | 7058 Views ⚑

The four month Digital Lighting Artist Certificate at Lost Boys | School of Visual Effects is an accelerated and highly

Tagged with: arnold • artist • CG lighting • digital • digital lighting • katana • lighting • lost boys • montage • program • renderman • school of VFX • student • Visual Effects • Vray • winter

Hackers used ransomware in truckstop.com virus – DC Velocity

December 31st, 2019 📆 | 6490 Views ⚑

Technology December 31, 2019 Freight matching marketplace restores “most major services” after 11 days. By Ben Ames The malware software

Tagged with: hackers • logistics • ransomware • Software & Systems • transportation • trucking • truckstop • velocity • virus

Laborator Neon Theme 2.0 on WordPress autosuggest-remote.php q cross site scripting

December 31st, 2019 📆 | 7471 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: autosuggest • cross • laborator • remote • scripting • theme • wordpress

Microsoft Seizes Copycat Domains North Korea-Linked Hackers

December 31st, 2019 📆 | 6461 Views ⚑

Unsealed court documents show that the domains include “hotrnall.com,” “office356-us.org,” and “mai1.info,” among other copycat URLs. Microsoft says Thallium used

Tagged with: Confidence Tricks • copycat • domains • hackers • hacking conferences • identity theft • korea • KoreaLinked • linked • microsoft • north • seizes • Unsealed Court

4 patients sue Alabama health system after ransomware attack

December 31st, 2019 📆 | 4031 Views ⚑

Tagged with: after • alabama • attack • health • patients • ransomware • system

Naps May Actually Save Your Life

December 31st, 2019 📆 | 8287 Views ⚑

Scientists recently revealed that napping once or twice a week reduces the risk of a heart attack or stroke. Clip1-ShutterstockClip2-StringrClip3-ShutterstockClip4-ShutterstockClip5-StringrClip6-ShutterstockClip7-StringrClip8-Shutterstock

Tagged with: actually • attack • Cyber attack • evidence • health • heart • immune system • life • link • Naps • recover • reduce • Save

Truckstop.com is back up and running after malware attack

December 31st, 2019 📆 | 1556 Views ⚑

Truckstop.com says most of its major services are back online following what the load board company is now calling a

Tagged with: after • attack • malware • running • truckstop

How to list the content of a database – Webhacking

December 31st, 2019 📆 | 7062 Views ⚑

Portswigger Web Security Academy – SQL Injection Lab: Listing the contents of the database Recommended reading – SQL Injection Cheat

Tagged with: content • database • webhacking

kind-of 6.0.2 Type Detection index.js ctorName Attribute privilege escalation

December 31st, 2019 📆 | 6842 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $0-$5k 3.86 A vulnerability classified as critical was

Tagged with: attribute • ctorname • detection • escalation • index • privilege

Ingenious Cold War keylogger the Russians used to bug Selectric typewriters in the US embassy / Boing Boing

December 31st, 2019 📆 | 1706 Views ⚑

In the 1970s, the Soviets managed to intercept top secret communications in the US embassy in Moscow and nobody could

Tagged with: boing • embassy • ingenious • keylogger • russians • selectric • typewriters

GPAC 0.8.0/0.9.0-development-20191109 isomedia/box_code_base.c dinf_New() denial of service

December 31st, 2019 📆 | 3711 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 3.5 $0-$5k 3.27 A vulnerability, which was classified as

Tagged with: 20191109 • denial • development • isomedia • service

Starbucks Devs Leave API Key in GitHub Public Repo

December 31st, 2019 📆 | 8267 Views ⚑

One misstep from developers at Starbucks left exposed an API key that could be used by an attacker to access

Tagged with: github • leave • public • starbucks

GPAC 0.8.0/0.9.0-development-20191109 media_tools/av_parsers.c av1_parse_tile_group() memory corruption

December 31st, 2019 📆 | 4129 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $0-$5k 3.15 A vulnerability, which was classified as

Tagged with: 20191109 • development • group • media • parse • parsers • tools

How to list the content of a database – Webhacking

December 31st, 2019 📆 | 5572 Views ⚑

Portswigger Web Security Academy – SQL Injection Lab: Listing the contents of the database Recommended reading – SQL Injection Cheat

Tagged with: content • database • webhacking