Latest News

2019/03/04

NICE READ: How the Dark Web Data Bazaar Fuels Enterprise Attacks

What does the age of near-ubiquitous data breaches, deep fakes, and fallible biometric authentication mean for enterprise security?

It seems every aspect of our lives is available to be found somewhere on the internet. And the information available isn’t simply embarrassing browsing histories but ranges from our medical histories to the logon credentials we use to access many of our online services. This is certainly a privacy concern, but it’s also increasingly an enterprise cybersecurity hazard. The more information adversaries have about us, the more effectively they can target their attacks.
2019/03/04

Registration for ECSC'19 is now open!

Registration for the National Qualification Round is now open to participants! This year's ECSC finals will take place in Bucharest, early October.

Good luck :)
2019/03/04

Container Escape Hack Targets Vulnerable Linux Kernel

A proof-of-concept hack allows adversaries to tweak old exploits, have code jump containers and attack underlying infrastructure.

Researchers at CyberArk have created a proof-of-concept attack that allows adversaries to bypass container security, escape the container and compromise an entire host system. However, the attack scenario is limited, in that a successful attack depends on unpatched vulnerabilities to be present in the host system.
2019/03/01

Severe Flaws in SHAREit Android App Let Hackers Steal Your Files

Security researchers have discovered two high-severity vulnerabilities in the SHAREit Android app that could allow attackers to bypass device authentication mechanism and steal files containing sensitive from a victim's device.
With over 1.5 billion users worldwide, SHAREit is a popular file sharing application for Android, iOS, Windows and Mac that has been designed to help people share video, music, files, and apps across various devices.
2019/03/01

Wireshark 3.0.0 Released!

Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting, analysis, development and education.
Version 3.0.0 is the latest major version update with lots of improvements and changes.
Many user interface improvements have been made. Support for a number of legacy features and libraries has been removed.