Article: A Missed Opportunity: Weak Password Hashing in VxWorks 6.9 and 7 - published 2 days ago.
Content: submitted by /u/Longjumping-Top2717 [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1ibxbp1/a_missed_opportunity_weak_password_hashing_in/   
Published: 2025 01 28 08:48:31
Received: 2025 01 28 08:59:56
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Article: Closer to the Edge: Hyperscaling Have I Been Pwned with Cloudflare Workers and Caching - published 2 months ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.I've spent more than a decade now writing about how to make Have I Been Pwned (HIBP) fast. Really fast. Fast to the extent that sometimes, it was even too fast:The response from each search was coming back so quickly that the user wasn’t sure if i...
Copy Link: https://www.troyhunt.com/closer-to-the-edge-hyperscaling-have-i-been-pwned-with-cloudflare-workers-and-caching/   
Published: 2024 11 21 07:35:59
Received: 2025 01 28 08:37:52
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Article: Weekly Update 427 - published 2 months ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.I was going to write about how much I've enjoyed "tinkering" with the HIBP API, but somehow, that term doesn't really seem appropriate any more for a service of this scale. On the contrary, we're putting in huge amounts of effort to get this thing...
Copy Link: https://www.troyhunt.com/weekly-update-427/   
Published: 2024 11 25 07:53:15
Received: 2025 01 28 08:37:52
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Free Score Certificate

Article: Weekly Update 428 - published 2 months ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.I wouldn't say this is a list of my favourite breaches from this year as that's a bit of a disingenuous term, but oh boy were there some memorable ones. So many of the incidents I deal with are relatively benign in terms of either the data they ex...
Copy Link: https://www.troyhunt.com/weekly-update-428/   
Published: 2024 12 01 03:19:07
Received: 2025 01 28 08:37:52
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Article: Welcoming the Armenian Government to Have I Been Pwned - published about 2 months ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.Today, we're happy to welcome the 37th government to have full and free access to domain searches of their gov domains in Have I Been Pwned, Armenia. Armenia's National Computer Incident Response Team AM-CERT now joins three dozen other national c...
Copy Link: https://www.troyhunt.com/welcoming-the-armenian-government-to-have-i-been-pwned/   
Published: 2024 12 04 05:55:22
Received: 2025 01 28 08:37:52
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Article: "Pwned", The Book, Is Now Available for Free - published about 2 months ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.Nearly four years ago now, I set out to write a book with Charlotte and RobIt was the stories behind the stories, the things that drove me to write my most important blog posts, and then the things that happened afterwards. It's almost like a coll...
Copy Link: https://www.troyhunt.com/pwned-the-book-is-now-available-for-free/   
Published: 2024 12 06 13:40:07
Received: 2025 01 28 08:37:52
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Score Summary

Article: Weekly Update 429 - published about 2 months ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.A super quick intro today as I rush off to do the next very Dubai thing: drive a Lambo through the desert to go dirt bike riding before jumping in a Can-Am off-roader and then heading to the kart track for a couple of afternoon sessions. I post lo...
Copy Link: https://www.troyhunt.com/weekly-update-429/   
Published: 2024 12 08 04:09:47
Received: 2025 01 28 08:37:52
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Article: Weekly Update 430 - published about 2 months ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.I'm back in Oslo! Writing this the day after recording, it feels like I couldn't be further from Dubai; the temperature starts with a minus, it's snowing and there's not a supercar in sight.Back on business, this week I'm talking about the challen...
Copy Link: https://www.troyhunt.com/weekly-update-430/   
Published: 2024 12 15 11:38:18
Received: 2025 01 28 08:37:52
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Article: Weekly Update 431 - published about 1 month ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.I fell waaay behind the normal video cadence this week, and I couldn't care less 😊 I mean c'mon, would you rather be working or sitting here looking at this view after snowboarding through Christmas?! Christmas Day awesomeness in Norway 🇳🇴 Have a...
Copy Link: https://www.troyhunt.com/weekly-update-431/   
Published: 2024 12 25 09:02:15
Received: 2025 01 28 08:37:52
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Your Score Explained

Article: Weekly Update 432 - published about 1 month ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.There's a certain irony to the Bluesky situation where people are pushing back when I include links to X. Now, where have we seen this sort of behaviour before? 🤔 When I'm relying on content that only appears on that platform to add context to a d...
Copy Link: https://www.troyhunt.com/weekly-update-432/   
Published: 2024 12 30 21:52:20
Received: 2025 01 28 08:37:52
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Article: Weekly Update 433 - published 24 days ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.It sounds easy - "just verify people's age before they access the service" - but whether we're talking about porn in the US or Australia's incoming social media laws, the reality is way more complex than that. There's no unified approach across ju...
Copy Link: https://www.troyhunt.com/weekly-update-433/   
Published: 2025 01 06 05:20:31
Received: 2025 01 28 08:37:52
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Article: Weekly Update 434 - published 17 days ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.This week I'm giving a little teaser as to what's coming with stealer logs in HIBP and in about 24 hours from the time of writing, you'll be able to see the whole thing in action. This has been a huge amount of work trawling through vast volumes o...
Copy Link: https://www.troyhunt.com/weekly-update-434/   
Published: 2025 01 12 22:59:48
Received: 2025 01 28 08:37:52
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Gold Score Certificate

Article: Experimenting with Stealer Logs in Have I Been Pwned - published 17 days ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.TL;DR — Email addresses in stealer logs can now be queried in HIBP to discover which websites they've had credentials exposed against. Individuals can see this by verifying their address using the notification service and organisations monitoring ...
Copy Link: https://www.troyhunt.com/experimenting-with-stealer-logs-in-have-i-been-pwned/   
Published: 2025 01 13 19:48:31
Received: 2025 01 28 08:37:51
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Article: Weekly Update 435 - published 9 days ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.If I'm honest, I was in two minds about adding additional stealer logs to HIBP. Even with the new feature to include the domains an email address appears against in the logs, my concern was that I'd get a barrage of "that's useless information" me...
Copy Link: https://www.troyhunt.com/weekly-update-435/   
Published: 2025 01 21 02:14:07
Received: 2025 01 28 08:37:51
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Article: You Can't Trust Hackers, and Other Data Breach Verification Tales - published 7 days ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.It's hard to find a good criminal these days. I mean a really trustworthy one you can be confident won't lead you up the garden path with false promises of data breaches. Like this guy yesterday:For my international friends, JB Hi-Fi is a massive ...
Copy Link: https://www.troyhunt.com/you-cant-trust-hackers-and-other-data-breach-verification-tales/   
Published: 2025 01 23 03:14:52
Received: 2025 01 28 08:37:51
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Score Analysis

Article: Weekly Update 436 - published 5 days ago.
Content: Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.We're heading back to London! And making a trip to Reykjavik. And Dublin. I talked about us considering this in the video yesterday, and just before publishing this post, we pulled the trigger and booked the tickets. The plan is to pretty much rep...
Copy Link: https://www.troyhunt.com/weekly-update-436/   
Published: 2025 01 25 04:42:04
Received: 2025 01 28 08:37:51
Feed: Troy Hunt's Blog
Source: Troy Hunt's Blog
Category: Cyber Security
Topic: Cyber Security

Article: Fileless Python InfoStealer Targeting Exodus, (Tue, Jan 28th) - published 2 days ago.
Content: Exodus is a well-known crypto wallet software[1] and, when you are popular, there are chances that attackers will target you! I already wrote a diary related to this application[2]. Yesterday, I found a new one that behaves differently. My previous diary described a Python script that will patch the original Exodus software. Today, it’s a real “info stealer”...
Copy Link: https://isc.sans.edu/diary/rss/31630   
Published: 2025 01 28 07:12:45
Received: 2025 01 28 08:32:41
Feed: SANS Internet Storm Center, InfoCON: green
Source: SANS Internet Storm Center, InfoCON: green
Category: Alerts
Topic: Vulnerabilities

Article: Apple plugs security hole in its iThings that's already been exploited in iOS - published 2 days ago.
Content:
Copy Link: https://go.theregister.com/feed/www.theregister.com/2025/01/28/apple_cve_2025_24085/   
Published: 2025 01 28 08:17:10
Received: 2025 01 28 08:21:29
Feed: The Register - Security
Source: The Register
Category: News
Topic: Cyber Security

Cyber Tzar Risk Impact Distribution

Article: vt999 nhà cái hàng đầu châu - Báo điện tử Bình Định - published 2 days ago.
Content: ... DevSecOps trở thành hoạt động trọng yếu của doanh nghiệp và Quản lý rủi ro ATTT trong chuỗi cung ứng.️. - Cũng như các doanh nghiệp khác tại Việt ...
Copy Link: https://baobinhdinh.vn/Hot/vt999%20nh%C3%A0%20c%C3%A1i%20h%C3%A0ng%20%C4%91%E1%BA%A7u%20ch%C3%A2u.phtm   
Published: 2025 01 28 02:13:22
Received: 2025 01 28 08:03:31
Feed: Google Alert - devsecops
Source: Google Alert
Category: News
Topic: DevSecOps

Article: Three AI considerations for tech leaders in Australia - published 2 days ago.
Content: For example, financial platform Airwallex (a GitLab customer) has seen significant improvements after implementing AI into their DevSecOps workflows, ...
Copy Link: https://channellife.com.au/story/three-ai-considerations-for-tech-leaders-in-australia   
Published: 2025 01 28 03:47:01
Received: 2025 01 28 08:03:30
Feed: Google Alert - devsecops
Source: Google Alert
Category: News
Topic: DevSecOps

Cyber Tzar Risk Impact Assesment

Article: В GitLab рассказали о трех новых функциях на основе искусственного интеллекта - published 2 days ago.
Content: Отчет GitLab Global DevSecOps Report за 2024 год показал, что 66% компаний выпускают программное обеспечение в два раза быстрее — или быстрее — чем в ...
Copy Link: https://startpack.ru/articles/20250128-gitlab   
Published: 2025 01 28 04:48:50
Received: 2025 01 28 08:03:30
Feed: Google Alert - devsecops
Source: Google Alert
Category: News
Topic: DevSecOps

Article: IssueHuntとEGセキュアソリューションズ、ASPM「Baseline」を活用したDevSecOps支援 ... - published 2 days ago.
Content: 特にソフトウェア開発においては、「シフトレフト」や「DevSecOps」の実践を通じて脆弱性情報や脅威インテリジェンスを開発プロセスの初期段階から正確に把握し ...
Copy Link: https://prtimes.jp/main/html/rd/p/000000138.000039740.html   
Published: 2025 01 28 06:34:29
Received: 2025 01 28 08:03:30
Feed: Google Alert - devsecops
Source: Google Alert
Category: News
Topic: DevSecOps