On June 21, 2016, FireEye’s Dynamic Threat Intelligence (DTI)
identified an increase in JavaScript contained within spam emails.
FireEye analysts determined the increase was the result of a new Locky
ransomware spam campaign.
As shown in Figure …
On June 21, 2016, FireEye’s Dynamic Threat Intelligence (DTI)
identified an increase in JavaScript contained within spam emails.
FireEye analysts determined the increase was the result of a new Locky
ransomware spam campaign.
As shown in Figure …
We have a transaction server that is connected to by different client applications. The requirement is to have a secure means of authentication for client applications to communicate with the transaction server. The two solutions being loo…
Is there a publicly accessible website which will only accept TLS 1.2 connections so that I can test to see if my application can successfully, securely connect to it?
Background:
I have an old VB.NET application running on Windows Serve…
Earlier tonight I got a Facebook friend request from a profile that appeared to be a duplicate of my grandmother’s Facebook profile, with her name and profile picture, but it was noticeably devoid of any other information to suggest that i…
I have been doing some reading over the past few days on Session IDs and the methods taken to prevent people from intercepting them and using them to hijack a session.
From what I have read, when sending the Session ID in a cookie to the…
OAuth 2 device flow has an odd history. It’s found in early versions of the RFC, but was then taken out seemingly without an explanation I could find. Recently, a new draft was proposed specifically to reintroduce it independently.
The de…
While doing some Google searches, I learnt that there are a lot of different Certification Authorities like the Windows role named “Active Directory Certificate Services”, the OpenSSL library or the EJBCA software.
I would like to know th…
What are the security risks associated with enabling setDomStorageEnabled(true) method?
Reference.
At FireEye Labs we have an automated system designed to proactively
detect newly registered malicious domains. This system observed some
phishing domains registered in the first quarter of 2016 that were
designed to appear as legitimate Apple dom…
