• Review: Google Earth Forensics

    | by Zeljka Zorz - Tuesday, 27 October 2015.

    Learn how to use Google Earth geo-location in your digital forensic investigations.

  • Review: Change and configuration auditing with Netwrix Auditor 7.0

    | by Berislav Kucan - Wednesday, 21 October 2015.

    Netwrix Auditor is a powerful change and configuration auditing platform that leverages the data collected from all parts of the company network to provide detailed information on everything that is going on inside.

  • Abusing the Internet of Things: Blackouts, Freakouts, and Stakeouts

    | by Zeljka Zorz - Tuesday, 13 October 2015.

    Whether you like it or not, the Internet of Things is happening. As the author himself noted in a recent interview, some - arguably, too many - people think they don't have to worry about the security implication of IoT because they believe that living in a traditional world of disconnected devices will continue to be an option. That particular future looks increasingly unlikely, and this is why we simply must start seriously addressing the problem. This book paints a clear picture of the current situation, and what we can learn from it in order to create a safer future for all of us.

  • Next Generation Red Teaming

    | by Zeljka Zorz - Monday, 14 September 2015.

    Do you know the difference between penetration testing and red teaming? This book will explain it through several attack case studies, and point out the things you should keep in mind if you want to engage in the latter activity.

  • Encryptr: Open source cloud-based password manager

    | by Berislav Kucan - Thursday, 10 September 2015.

    Encryptr is based on the Crypton JavaScript framework. The whole idea behind the Crypton concept is to enable developers to store data on the remote server in such way that the server doesn’t know what that data is.


More than 900 embedded devices share hard-coded certs, SSH host keys

SEC Consult analyzed firmware images of more than 4000 embedded devices of over 70 vendors and found that, in some cases, there are nearly half a million devices on the web using the same certificate.

Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.

Daily digest

Receive a daily digest of the latest security news.

Mon, Nov 30th