Month: September 2019

Recomposer – Randomly Changes Win32/64 PE Files For ‘Safer’ Uploading To Malware And Sandbox Sites

September 30, 2019by Black Hat Sec

Ever have that not so safe feeling uploading your malware binaries to VirusTotal or other AV sites because you can look up binaries by hashes? (Example: )Feel somewhat safer with Recomposer!*Recomposer will take your binary and randomly do the following:Change the file nameChange the section namesChange the section flagsInjection random number of five different types of nops into each available code cave over 20 bytes in lengthBy the way, your file will still execute, so upload away!*Supports win32/64 PE Files!!Two modes:Manual: Works like a…

NEW TOOLS ⁄ Hacking News ⁄ Data Exfiltration ⁄ NEWS ⁄ cyber security news ⁄ biometric data ⁄ Biometric Information Privacy Act ⁄ consent ⁄ data storage ⁄ face map ⁄ face scan ⁄ face template ⁄ faceprint ⁄ facial recognition ⁄ Facial recognition laws ⁄ Facial recognition trial ⁄ Illinois Biometric Information Privacy Act ⁄ Magisto ⁄ Magisto App ⁄ Vimeo ⁄ Vimeo face lawsuit ⁄ Vimeo Magisto app

Vimeo Faces Class-Action Lawsuit Over Unconsented Storage Of Users’ Biometric Data

September 30, 2019by Black Hat Sec

The popular video platform Vimeo is now in hot water for breaching users’ privacy. Vimeo faces a class-action lawsuit for Vimeo Faces Class-Action Lawsuit Over Unconsented Storage Of Users’ Biometric Data on Latest Hacking News.

NEW TOOLS ⁄ Hacking News ⁄ Android Application ⁄ NEWS ⁄ cyber security news ⁄ android app ⁄ Android Apps ⁄ android device ⁄ android smartphone ⁄ google play store ⁄ Android Phone ⁄ android camera apps ⁄ android photo apps ⁄ android photo filter apps ⁄ play store ⁄ Google Play ⁄ android developer ⁄ Play Store malicious apps ⁄ Android apps overcharged users ⁄ Fleeceware ⁄ google play store app rejections ⁄ Google remove apps

Researchers Highlight “Fleeceware” Android Apps That Aim to Overcharge Users

September 30, 2019by Black Hat Sec

Once again, Google’s Play Store has made it into the news following the existence of apps that overcharge users for Researchers Highlight “Fleeceware” Android Apps That Aim to Overcharge Users on Latest Hacking News.

Cyber Threats ⁄ Guru's Picks

Cyber security in NHS is about more than just prevention says experts

September 30, 2019by Black Hat Sec

Recent research carried out by Imperial College London’s Institute of Global Health Innovation has highlighted the NHS’s ongoing vulnerability to cyber-attacks. The study called for urgent steps to be taken in order to defend threats which could risk the safety of patients in the UK. While the report, presented to the House of Lords, commended current measures across the health service, it stated that more investment was urgently required. Cyber Security Connect UK, the leading conference and industry forum for CISOs, has recognised the…

Featured ⁄ Cyber Threats

Some Hackers just want to see the world burn

September 30, 2019by Black Hat Sec

By Matthew Olney, content manager at XQ Cyber, and finalist in the Security Serious Unsung Heroes Awards With the new Joker movie hitting cinemas what better time to take a look at some of the most infamous incidents of hackers causing trouble just for the sake of it? Not all cyberattacks are financially motivated but can still inflict monetary losses or tarnish an organisation hard won reputation. Not all hackers are criminal masterminds out to get rich, many carry out hacks because to them…

Featured ⁄ Cyber Threats

Why companies must start rehearsing their responses now to give them the best possible chance of mitigating cyberattacks when – and not if – they happen

September 30, 2019by Black Hat Sec

By David Cook, Senior Associate – Privacy and Cyber Security Compliance and Litigation at Eversheds Sutherland, and finalist in the Security Serious Unsung Heroes Awards. It seems like barely a week goes by without a high-profile data breach being reported on the front pages of our newspapers. Hacking and cyberattacks appear to be becoming more commonplace and involving an ever-increasing range of wrongdoers: from vandals to nation states and terrorist groups. The risk around cyberattacks has been magnified by new data protection and financial…

Cyber Threats ⁄ Threat Detection

Ajax enhances online experience with Mitek

September 30, 2019by Black Hat Sec

Mitek (NASDAQ: MITK, www.miteksystems.com) has today announced that Ajax Amsterdam, one of Europe’s premier football clubs, will be using Mitek’s Mobile Verify® with Face Comparison solution to improve online experience and bolster security for fans. Putting fan enjoyment and safety at the heart of everything they do, Ajax is committed to verifying the identities of ticket buyers. The hurdles, complying with GDPR while maintaining paper copies of fans’ ID documents, was becoming an unachievable task. The club recognised the need to optimise its online process,…

Cyber Threats

BlackBerry Launches BlackBerry Advanced Technology Development Labs to Fuel New Cutting-Edge Security Technologies

September 30, 2019by Black Hat Sec

BlackBerry Limited (NYSE: BB; TSX: BB) today announced the creation of BlackBerry Advanced Technology Development Labs (BlackBerry Labs), a new business unit operating at the forefront of research and development in the cybersecurity space. Led by CTO Charles Eagan, BlackBerry Labs will include a team of over 120 software developers, architects, researchers, product leads and security experts, each working toward the common goal of identifying, exploring and creating new technologies to ensure BlackBerry is on the cutting edge of security innovation. The rise of the Internet of Things (IoT) alongside a dynamic threat landscape fosters a…

NEW TOOLS ⁄ Hardening ⁄ AWS ⁄ Amazon Web Services ⁄ CIS Benchmark ⁄ Security Hardening ⁄ AWS Auditing ⁄ Terraform ⁄ Terraform AWS Secure Baseline ⁄ Terraform Modules

Terraform AWS Secure Baseline – Terraform Module To Set Up Your AWS Account With The Secure Baseline Configuration Based On CIS Amazon Web Services Foundations

September 30, 2019by Black Hat Sec

Terraform Module RegistryA terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.2.0.See Benchmark Compliance to check which items in CIS benchmark are covered.Starting from v0.10.0, this module requires Terraform v0.12 or later. Please use v0.9.0 if you need to use Terraform v0.11 or ealier.FeaturesIdentity and Access ManagementSet up IAM Password Policy.Create separated IAM roles for defining privileges and assigning them to entities such as IAM users and groups.Create…