Category: A Zero Day Latest News

Zero Day Latest News - Main HackerNews.blog

Server-squashing zero-day published for phpMyAdmin tool
Cross Site Request Forgery, csrf

Server-squashing zero-day published for phpMyAdmin tool

A researcher has just published a zero-day security bug in one of the web's most popular database administration software packages. . Server-squashing zero-day published for ... Read More

How to: Kerberoast like a boss
A Zero Day Latest News, pentest

How to: Kerberoast like a boss

Kerberoasting: by default, all standard domain users can request a copy of all service accounts along with their correlating password hashes. Crack these and you ... Read More

A Pen Tester’s First Solo: Aviation Security 101
A Zero Day Latest News, pentest

A Pen Tester’s First Solo: Aviation Security 101

My colleague Ken and I are both private pilots with a keen interest in avionics and security. We were fortunate to have access to some ... Read More

Real-life social engineering. Two days in tweets
A Zero Day Latest News, pentest

Real-life social engineering. Two days in tweets

This is the write-up of my live tweets while on a recent social engineering engagement. It’s all available on my feed @ghostie_ I did this ... Read More

September 2019’s Patch Tuesday: 2 zero-days, 17 critical bugs
Adobe, Adobe Flash

September 2019’s Patch Tuesday: 2 zero-days, 17 critical bugs

Sometimes, a Patch Tuesday update arrives with a bang that sends users scrambling for cover - September's update earns that description. . September 2019’s Patch ... Read More

Microsoft Addresses Two Zero-Days Under Active Attack
active attack, Black Hat 2019

Microsoft Addresses Two Zero-Days Under Active Attack

September Patch Tuesday leads off with two elevation-of-privilege bugs that have been exploited in the wild. . Microsoft Addresses Two Zero-Days Under Active Attack ThreatpostSource ... Read More

iPhone attack may have targeted Android and Windows too
Android, Apple

iPhone attack may have targeted Android and Windows too

A sophisticated and sustained watering hole attack affecting iPhones may have targeted Windows and Android too. . iPhone attack may have targeted Android and Windows ... Read More

Pwning a Siemens Scalance ICS switch through ARM reversing
A Zero Day Latest News, pentest

Pwning a Siemens Scalance ICS switch through ARM reversing

We’ve been working in industrial control systems security for a long time. Several of the team here used to work in OT control rooms or ... Read More

Lojack’d: Pwning Smart vehicle trackers
A Zero Day Latest News, pentest

Lojack’d: Pwning Smart vehicle trackers

This research is by @evstykas with help from @Yekki_1 and @TheKenMunroShow. Many car insurers insist that smart trackers are fitted to high end vehicles. In ... Read More