Technical Experts vs Management

Does not show case IT Security directly, but still as true. A light humor around the disconnect between the technical experts, the stakeholders and the big-bosses in the corporate environment.

Telco Orange Hacked (again) - 1.3 M customers impacted

Second attack in a span of months!

KPI for a SIEM tool

Some good ideas and indicators.

OpenID, OAuth Vulnerability

Account hijacking is all too common in social networking, but a wider-spread problem has affected almost all major OAuth 2.0 and OpenID providers, such as Facebook, Google, Yahoo, LinkedIn, Microsoft, GitHub, QQ, Taobao, Weibo, VK, Mail.Ru and Sohu, have been affected by a serious covert redirect vulnerability.\

Full Story

Police Use New Tool To Source Crowds for Evidence

Leading edge technology, or will it be the bleeding edge nightmare?

A new crime-fighting innovation known as LEEDIR, the Large Emergency Event Digital Information Repository, pairs an app with cloud storage to help police use smartphones as tools to gather evidence. The crowdsourcing system gives authorities a secure, central repository for the countless electronic tips that can come in during a crisis.

Diving Underground: Counterfeit Currency

Continuing with my research of the underground market, I stumbled upon a website which offers USD and Euro currency, at a discount of up to 75%. The payment is to be made via bitcoins (of course).

A screenshot of the website is pasted below. However, it does make me wonder, how the buyer could be assured of the legitimacy of the seller. Unlike ebay, there is no easy way here to give a negative feedback. Nevertheless, another insight into the thriving underground.

Kali Linux Hacked!

Kali (formerly called Backtrack) became the latest victim of heartbleed. A bit sad to see a pen-testing community go down.