I just published pwnagotchi 1.0.0a on github, i will not offer any form of support before it gets to a stable 1.0.0, but sharing the process toget there might be fun, it also helps me relax a bit #reasons :D
github.com/evilsocket/pwnago…
Two days... two phishing posts. This is probably the more interesting one: A targeted phish against a financial company. This is how PEC starts. Not doing 2FA on cloud email? Good luck! (the company targeted by this phish caught it and no damage was done) x.com/sans_isc/status/115654…
If you are running Exchange on-prem or even if you have switched from on-prem Exchange to Office 365, reviewing and adjusting Exchange permissions in Active Directory is important.
Trimarc provides guidance relating to recently posted Exchange security issues in our new article "Mitigating Exchange Permission Paths to Domain Admins in Active Directory".
trimarcsecurity.com/single-p…
Beginning to hear the marketing psycho-babble incorporation of MITRE Attack Framework coverage into their cold calls makes me want to whack someone with the phone they called me on. 💥
An Introductory Workshop For Developers and Security Professionals named "Web Application Penetration Testing" by @OWASP Women in AppSec Zoe Briterman and Vandana Verma will be given at #AppSecCali this year!
Discount code: WIApentest20off
2019.appseccalifornia.org/
Reason # 3 to attend AppSecCali - Time, Travel & Money: you simply don’t have much of them - we bring the conference to you right here in beautiful sunny #SoCal. To register and find out more 2019.appseccalifornia.org/#appseccali
I'm looking for a young company in infosec that does not want to bore people w traditional marketing. I'm looking for a company that wants to make a difference by letting me help the community understand their value, and come to them. Looking for a unicorn.
Sure wish I could have been there to hear this from the front row. Keynote 01 Panel Discussion At a Glance Information Security Ed Skoudis ... youtu.be/mEQls7NPcVo via @YouTube