Earlier tonight I got a Facebook friend request from a profile that appeared to be a duplicate of my grandmother’s Facebook profile, with her name and profile picture, but it was noticeably devoid of any other information to suggest that i…
I have been doing some reading over the past few days on Session IDs and the methods taken to prevent people from intercepting them and using them to hijack a session.
From what I have read, when sending the Session ID in a cookie to the…
OAuth 2 device flow has an odd history. It’s found in early versions of the RFC, but was then taken out seemingly without an explanation I could find. Recently, a new draft was proposed specifically to reintroduce it independently.
The de…
While doing some Google searches, I learnt that there are a lot of different Certification Authorities like the Windows role named “Active Directory Certificate Services”, the OpenSSL library or the EJBCA software.
I would like to know th…
What are the security risks associated with enabling setDomStorageEnabled(true) method?
Reference.
At FireEye Labs we have an automated system designed to proactively
detect newly registered malicious domains. This system observed some
phishing domains registered in the first quarter of 2016 that were
designed to appear as legitimate Apple dom…
At FireEye Labs we have an automated system designed to proactively
detect newly registered malicious domains. This system observed some
phishing domains registered in the first quarter of 2016 that were
designed to appear as legitimate Apple dom…
In the latter half of 2015, the FireEye Labs Advanced Reverse
Engineering (FLARE) team identified several versions of an ICS-focused
malware crafted to manipulate a specific industrial process running
within a simulated Siemens control system env…
In the latter half of 2015, the FireEye Labs Advanced Reverse
Engineering (FLARE) team identified several versions of an ICS-focused
malware crafted to manipulate a specific industrial process running
within a simulated Siemens control system env…
I am getting a lot of failed ssh login attempts by one specific IP-Address with a strange error. I cannot make sense of the information found through google, so I was thinking it is maybe a new form of attack??
Basically every 25 seconds …
