Security Vulnerabilities

/Security Vulnerabilities

Week 4 in Review – 2012

Event Related Shmoocon 2012 ShmooCon 2012: Raising The White Flag - blog.c22.cc Whitelisting is often touted as a replacement for AV. Despite the fact that something better than AV is needed, application whitelisting isn’t the solution. Their purpose seems good, for the execution is lacking. Things are headed in the right direction, but using simple [...]

Week 3 in Review – 2012

Event Related Infiltrate  Conference “Voight-Kampff’ing The BlackBerry PlayBook” at INFILTRATE 2012 – intrepidusgroup.com We gave a talk at Immunity’s awesome INFILTRATE conference in Miami Beach, FL. Our presentation, “Voight-Kampff’ing The BlackBerry Playbook”, discussed some of the blackbox style, independent research we performed on the BlackBerry PlayBook. Infiltrate Wrap Up – blog.opensecurityresearch.com Our industry is getting [...]

Week 2 In Review

Resources How Modern Cars Can Be Cracked - autosec.org SOURCE Barcelona Resources from September 2011 - sourceconference.com Links, articles, and media from the event. OSCP-My Review - proactivedefender.blogspot.com The OSCP certification is an offensive security course which teaches the attacking side of Information Security and is largely aimed at those wanting to become penetration testers. [...]

Week 1 In Review

Events Related Highlights from the 28th Chaos Communications Congress - advocacy.globalvoicesonlne.org The Chaos Communications Congress is the annual meetup of Germany's Chaos Computer Club, one of the oldest hacker collectives in the world. It takes place in Berlin every year at the height of the holiday season between Christmas and New Year's Eve, a time [...]

Week 52 In Review

Events Related Chaos Communications Congress Debriefing(s) ...dedicated to information about the conferences and events of the CCC. Being our most important event, the annual Chaos Communication Congress is usually the main focus. But we provide announcements and background information for other CCC events as well – be it regional or international. Crypto talk at 28C3: [...]

Week 49 In Review

Events Related PacSec 2011 Presented Material - pacsec.jp English/Japanese versions of PacSec 2011 Tokyo event last month. @OWASP Tokyo Webservices: Attack, defenses, and hardening - twitter.com Archives for ClubHack 2011 Videos - clubhack.tv MalCon 2011 YouTube Channel - youtube.com Resources Opensecuritytraining.info Welcome Message - opensecuritytraining.info New open source, creative commons powered teaching portal on computer [...]

Week 48 In Review

Events Related OWASP ATL Presentation - intrepidusgroup.com I recently gave a presentation at OWASP ATL on the OWASP Mobile Top 10 and how to assess mobile applications. This was a light weight discussion of the OWASP Mobile Top 10 and some topical and technical concerns related to securing mobile applications. OWASP Benelux Days 2011 - [...]

Week 47 In Review

Events Related Source Barcelona 2011 Materials - blog.pentestify.com/source-barcelona-2011-materials Quick post to link our information from Source Barcelona 2011. @kernelsmith & i discussed alternative use cases for the Metasploit Framework. The presentation was shotgun / AHA! style, meaning we had a number of 5 minute mini-presentations within the larger 50 minute preso. DeepSec Diary - blog.c22.cc/2011/11/22/deepsec-2011-quick-roundup/ The first [...]

Week 46 In Review

Events Related Source Barcelona 2011 Wrap-up - blog.rootshell.be After a smooth flight to Barcelona, I arrived on Tuesday evening just in time to take part to the speakers party at the apartments reserved for the conference. That’s something really unique (from what I know) to SOURCE: speakers, crew and some participants are sharing a bunch [...]