Britt Bouknight

http://www.darkreading.com/attacks-breaches/bashlite-malware-leverages-shellshock-in-busybox-attack/d/d-id/1317508?

Bashlite has been modified to take advantage of shellshock. This variant confirms that it can make a telnet connection over port 23 and then attempts to login with anyone of a few standard username password combinations. Once…[Read more]

http://www.washingtontimes.com/news/2014/nov/7/indiana-doe-website-back-up-after-2nd-hacking/
https://www.drupal.org/node/2365547

Indiana Department of Education website backup up after 2nd hacking

This is a follow up to last weeks articles that identified that there was a vulnerability in the Drupal. The system was hacked on Monday,…[Read more]

http://www.chicagotribune.com/business/breaking/chi-dairy-queen-hacked-20141010-story.html
http://www.americanbanker.com/issues/179_149/how-backoff-malware-works-and-why-banks-should-care-1069180-1.html

One key point you took from each assigned reading. (One or two sentences per reading)

Most companies take the attitude of it could not…[Read more]

Spear phishing attempt within the Temple community. Someone sent out an email with links that were supposed to direct students to Blackboard Learn Access or the direct login page for Blackboard at Temple University. This attempt was totally designed to capture credentials from members of the Temple Community.

tuportal.temple.edu (System…[Read more]

http://www.fool.com/investing/general/2014/09/28/home-depot-vs-target-diy-centers-data-breach-was-w.aspx
http://www.scmagazine.com/reports-suggest-home-depot-was-hit-by-the-mozart-malware/article/373976/

One key point you took from each assigned reading. (One or two sentences per reading)

Lawsuits are rolling in and the word is that the…[Read more]

http://www.infosecurity-magazine.com/news/android-flaw-spells-privacy/

o a. One key point you took from each assigned reading. (One or two sentences per reading)
Google seems to be a little lax with their response to a known vulnerability in their phone OS. Pre Android 4.4 OS’s are susceptible to the possibility of having an open email s…[Read more]

Hello everyone,

I forgot to post this information earlier this week. I found a pretty interesting book that Penetration Testing A Hands-On Introduction to Hacking by Georgia Weidman. The site also presents a torrent file to download a Kali Linux VM. I believe it is Kali 1.0.6. The company is “No Starch Press.” If you get the book don’t…[Read more]

http://articles.philly.com/2014-09-13/news/53855445_1_pennsylvania-health-system-patient-information-desktop-computer

a. One key point you took from each assigned reading. (One or two sentences per reading)

With all of the talk of security in the news, we still have people that do not take the minimal precautions in business to secure…[Read more]

Hi guys,

If your using the latest and greatest flavor of the month (Windows 8/8.1), Powershell comes installed by default per Microsoft. Opps! Check out this site that discusses using Kali with Powershell to by pass AV and fingerprint the machine.

Powershell Reconnaissance

o a. One key point…[Read more]