Google on Thursday announced an enhanced version of Safe Browsing to provide real-time, privacy-preserving URL protection and safeguard users from visiting potentially malicious sites. “The Standard protection mode for Chrome on desktop and iOS will check sites against Google’s server-side list of known bad sites in real-time,” Google’s Jonathan Li and Jasika Bawa said. “If […]
In the tumultuous landscape of cybersecurity, the year 2023 left an indelible mark with the brazen exploits of the Scattered Spider threat group. Their attacks targeted the nerve centers of major financial and insurance institutions, culminating in what stands as one of the most impactful ransomware assaults in recent memory. When organizations have no response […]
Hands-On Review: Memcyco’s Threat Intelligence Solution Website impersonation, also known as brandjacking or website spoofing, has emerged as a significant threat to online businesses. Malicious actors clone legitimate websites to trick customers, leading to financial scams and data theft causing reputation damage and financial losses for both organizations and customers. The Growing Threat of Website […]
Just a few short years ago, lateral movement was a tactic confined to top APT cybercrime organizations and nation-state operators. Today, however, it has become a commoditized tool, well within the skillset of any ransomware threat actor. This makes real-time detection and prevention of lateral movement a necessity to organizations of all sizes and across […]
Recently, it has been discovered that SMA-WATCH-M2, a smartwatch featuring a GPS tracker manufactured by a Chinese firm named Shenzhen Smart Care Technology has been found vulnerable in terms of data and location data and location security SMA-WATCH-M2 smartwatch Researchers at the IoT laboratory from the AV-TEST Institute revealed that the data of as much […]
Mozilla Investigator MIG is a platform to perform investigative surgery on remote endpoints. It enables investigators to obtain information from large numbers of systems in parallel, thus accelerating investigation of incidents and day-to-day operations security. What is this? MIG is composed of agents installed on all systems of an infrastructure that are be queried in […]
A Swiss lawyer has accused ProtonMail that the company has initiated offering IP Logging upon request of Swiss authorities. ProtonMail, the famous end-to-end encrypted email service from Switzerland, has denied the claims made by a Swiss lawyer Martin Steiger regarding the company’s involvement in voluntary assistance to Swiss authorities for real-time surveillance. The head of […]
We normally consider family locator app as a blessing because we are able to track our family members conveniently through them. But, what if your private data collected or shared on such an app gets misused by cybercriminals because the app fails to secure it properly? It would instantly become a nuisance…no? The same has […]
Real-time location data of more than 11k indian buses exposed online from improperly secured ElasticSearch server, Kibana server, and InfluxDB administrative page. Security researcher Justin Paine discovered the improperly secured servers that exposed significant amount of data from 27 Indian government agencies. The server has no authentication enabled and the information is available for anyone […]
Strelka is a real-time file scanning system used for threat hunting, threat detection, and incident response. Based on the design established by Lockheed Martin’s Laika BOSS and similar projects, Strelka’s purpose is to perform file extraction and metadata collection at huge scale. Strelka differs from its sibling projects in a few significant ways: Codebase is […]
Security Firm FireEye Released a new Phishing tool called ReelPhish to simplifies the real-time Phishing attack that is designed to be run on the attacker’s system and control it by navigating the attacker’s web browser. ReelPhish Phishing Instillation The latest release of Python 2.7.x is required. Install Selenium, a required dependency to run the browser […]
In May, security experts found vulnerability in the LocationSmart website that allowed, without authentication, to obtain the real-time location of cell phones in the United States. The vulnerability has been solved, so the information security professional is publishing the technical details of the vulnerability. LocationSmart, the cell phone location service has recently appeared in the […]
A cell phone tracking service called LocationSmart has been reportedly leaking real-time location data on millions of mobile phone customers across North America. Exploiting a bug in its website, anyone could track the location of US cell phone users without obtaining their consent. This bug was spotted by Robert Xiao, a Carnegie Mellon University researcher, in […]
We all are well-aware of the pervasive ways governments employ to spy upon its citizens and there is a proper system in place to deal with such methods. Such as, to allow surveillance; law enforcement authorities are required by law to provide a warrant to the cellphone companies in order to obtain data. But how to […]
Polymoprh is a framework written in the Python3 programming language that allows the modification of network packets in real time, providing maximum control to the user over the contents of the packet. This framework is intended to provide an effective solution for real-time modification of network packets that implement practically any existing protocol, including private […]
Security Firm FireEye Released a new Phishing tool called ReelPhish to simplifies the real-time Phishing attack that is designed to be run on the attacker’s system and control it by navigating the Attacker web browser. A phishing attack is one of the dangerous social engineering attacks that leads to capture a victim’s username and password that will […]
KnowBe4’s Chief Hacking Officer Kevin Mitnick called me with some chilling news. A white hat hacker friend of his developed a working “ransomcloud” strain, which encrypts cloud email accounts like Office 365 in real-time . My first thought was: “Holy $#!+”. I asked him: “Can you show it to me?”, and Kevin sent me a video demo, you […]
Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type whitelist. How to use After plugin install you just need to start work […]
Short Bytes: Just few of you might be knowing about Facebook Messenger’s new and hidden feature that lets your friends track you. Using Messenger’s real-time location sharing feature, you can share your live location and help people find you. After making sure that you’re running an updated Messenger app, you simply need to find the location-sharing […]
This real-time global cyber attack map is trending in the social media since couple of days. Colorful lasers depict the attacks that are currently occurring across the world, making the real-time map pretty dazzling. The map shows a huge amount of cyber attacks being carried out between China and America. Created by Norse, it is an […]
The Federal Bureau of Investigation doesn’t have the ability to monitor everyone’s one-on-one Internet chats in real-time just yet, but the agency’s chief lawyer says all that should soon change. FBI general counsel Andrew Weissman discussed the Justice Department’s power to put pressure on cyber-criminals during an address last week at the National Press Club in Washington, […]