securityninja (@securityninja) profile picture

securityninja

@securityninja

Bringing you the latest infrastructure and web app security information, including contribution from the Application Security team at Realex Payments.

 Dublin
securityninja.co.uk/blog
Joined April 2009
  • Tweets47.9K
  • Following510
  • Followers24.4K
646Media
Photo by securityninja (@securityninja)Photo by securityninja (@securityninja)Photo by securityninja (@securityninja)Photo by securityninja (@securityninja)Photo by securityninja (@securityninja)Photo by securityninja (@securityninja)
JavaScript CPU cache snooper tells crooks EVERYTHING you do online. Time to switch to AMD? theregister.co.uk/2015/04/21…
3
19
15
Ransomware Teslacrypt Still Targeting Gamers. It was really just a matter of time... threatpost.com/ransomware-te…

Ransomware Teslacrypt Still Targeting Gamers

Teslacrypt, the fairly new strain of ransomware that’s been targeting gamers, is continuing to make the rounds online.

threatpost.com
1
8
4
Active DoS Exploits for MS15-034 Under Way. Have been your servers already patched? If not, go it now. threatpost.com/active-dos-ex…

Active DoS Exploits for MS15-034 Under Way

Public denial-of-service exploits for a critical vulnerability in Microsoft’s implementation of the HTTP protocol stack, HTTP.sys are under way, while remote code execution attacks may still be to...

threatpost.com
2
7
5
Sysadmins, patch now: HTTP 'pings of death' are spewing across web to kill Windows servers! theregister.co.uk/2015/04/16…
Sysadmins, patch now: HTTP 'pings of death' are spewing across web to kill Windows servers

Sysadmins, patch now: HTTP 'pings of death' are spewing across web to kill Windows servers

: Patch Tuesday bug reverse engineered by Thursday

theregister.com
20
10
Peristent XSS Vulnerability Plagues WordPress Plugin. Check yours! threatpost.com/peristent-xss…

Peristent XSS Vulnerability Plagues WordPress Plugin

A persistent cross-site scripting (XSS) vulnerability exists in some versions of a popular WordPress caching engine plugin.

threatpost.com
6
3
Post-Cryptanalysis, TrueCrypt Alternatives Step Forward. New hope for data securtiy? threatpost.com/post-cryptana…

Post-Cryptanalysis, TrueCrypt Alternatives Step Forward

CipherShed and VeraCrypt developers stand ready to step in for TrueCrypt now that the cryptanalysis phase of the audit is complete and no backdoors were discovered.

threatpost.com
5
1
The power of social engineering > nakedsecurity.sophos.com/201…
4
4
DARPA's plan to make software security "the domain of machines". Happy days? nakedsecurity.sophos.com/201…
1
securityninja retweeted
Manz 🇮🇨⚡👾 (@Manz) profile picture
Manz 🇮🇨⚡👾
@Manz24 Mar 2015
# /etc/init.d/daemon stop
Image from Manz 🇮🇨⚡👾 (@Manz)
184
6,631
9
3,935
Israeli boffins hack air gap, fire missiles on compromised kit. That's not good at all! theregister.co.uk/2015/03/25…
Israeli boffins hack air gap, fire missiles on compromised kit

Israeli boffins hack air gap, fire missiles on compromised kit

Slow command and control code uses PC hot spots to murmur secrets

theregister.com
2
1
Default Setting in Windows 7, 8.1 Could Allow Privilege Escalation, Sandbox Escape. Check yours! threatpost.com/default-setti…

Default Setting in Windows 7, 8.1 Could Allow Privilege Escalation, Sandbox Escape

A default setting in both Windows 7 and 8.1 could allow local users to elevate privileges and in some situations, escape application sandboxes.

threatpost.com
5
6
Half of Android Users Exposed to Attack via Installation Vulnerability. Just anither one! threatpost.com/half-of-andro…

Half of Android Users Exposed to Attack via Installation Vulnerability

Palo Alto Networks researchers say half of all Android devices contain a vulnerability that could allow an attacker to install malware on devices running the Android operating system.

threatpost.com
2
1
Our journey now continues as part of @GlobalPayInc & we’re even more excited about the future than we were 15yrs ago ow.ly/KMmuf
1
16
8
Is this the ultimate spam fail? nakedsecurity.sophos.com/201…
2
2
The FREAK bug in TLS/SSL - what you need to know. Do not panic! nakedsecurity.sophos.com/201…
Sophos News - The Sophos Blog

Sophos News - The Sophos Blog

The Sophos Blog

sophos.com
7
4
Outbreak! Fake Amazon voucher offer seeds mobile malware attack. theregister.co.uk/2015/03/04…
1
2
1
Anatomy of a certificate problem - Comodo's "PrivDog" software in the spotlight. nakedsecurity.sophos.com/201…
4
Seagate NAS owners: hide it behind a firewall. Fast! theregister.co.uk/2015/03/02…

Seagate NAS owners: hide it behind a firewall. Fast.

Unpatched software in the OS means root to your stuff won't be hard, says researcher

theregister.com
8
2
And the buggiest OS provider award goes to ... APPLE? However, user activity is the first line of defense! theregister.co.uk/2015/02/26…
And the buggiest OS provider award goes to ... APPLE?

And the buggiest OS provider award goes to ... APPLE?

Count of 2014's flaws finds more nasties in Mac OS and iOS than in Windows or Linux

theregister.com
3
Firefox 36 Arrives With Patches For Three Critical Flaws See more at: threatpost.com/firefox-36-ar…
Load more