The DAA File Format, (Fri, Aug 16th)Fri, 16 Aug 2019 20:49:50 GMT In diary entry "Malicious .DAA Attachments", we extracted a malicious executable from a Direct Access Archive file.
Analysis of a Spearphishing Maldoc, (Thu, Aug 15th)Thu, 15 Aug 2019 19:45:11 GMT A spearphishing attack with a VBA maldoc on US utility companies was mentioned in SANS NewsBites Vol. 21, Num. 61. I always like to take a look at malicious documents mentioned in the news. Luckily for me, Proofpoint&#;x26;#;39;s analysis includes the hashes of the maldocs, and one maldoc can be found on VirusTotal.
Breached Passwords Still in Use By Hundreds of ThousandsFri, 16 Aug 2019 19:40:37 +0000 More than 300,000 users still utilize credentials that have been compromised - with people visiting video streaming and porn sites most at fault, Google found in a new study.
News Wrap: DejaBlue Bugs and Biometrics Data BreachesFri, 16 Aug 2019 19:05:05 +0000 From the biometrics of one million being exposed, to new Microsoft Bluekeep-like threats, Threatpost discusses the top news of the week.
HTTP Bugs Open Websites to DoS AttacksThu, 15 Aug 2019 19:20:38 +0000 Eight vulnerabilities in the HTTP/2 server implementations were found in vendors Amazon, Apple, Microsoft and Apache.
Fingerprints of 1M Exposed in Public Biometrics DatabaseWed, 14 Aug 2019 19:46:30 +0000 A publicly accessible database exposed the fingerprints and facial recognition information of millions, thrusting biometrics security into the spotlight once again.
# Reddit netsec
# Krebs On Security
Meet Bluetana, the Scourge of Pump SkimmersWed, 14 Aug 2019 12:25:32 +0000 "Bluetana," a new mobile app that looks for Bluetooth-based payment card skimmers hidden inside gas pumps, is helping police and state employees more rapidly and accurately locate compromised fuel stations across the nation, a study released this week suggests. Data collected in the course of the investigation also reveals some fascinating details that may help explain why these pump skimmers are so lucrative and ubiquitous.
Patch Tuesday, August 2019 EditionTue, 13 Aug 2019 21:57:13 +0000 Most Microsoft Windows (ab)users probably welcome the monthly ritual of applying security updates about as much as they look forward to going to the dentist: It always seems like you were there just yesterday, and you never quite know how it's all going to turn out. Fortunately, this month's patch batch from Redmond is mercifully light, at least compared to last month.
SEC Investigating Data Leak at First American Financial Corp.Mon, 12 Aug 2019 20:30:17 +0000 The U.S. Securities and Exchange Commission (SEC) is investigating a security failure on the Web site of real estate title insurance giant First American Financial Corp. that exposed more than 885 million personal and financial records tied to mortgage deals going back to 2003, KrebsOnSecurity has learned.