An actor, usually a person, who may attempt to exploit a vulnerability of an exposed system.

learn more… | top users | synonyms

140
votes
9answers
115k views

Is Adblock (Plus) a security risk?

My email-provider's website (http://www.gmx.de) recently started linking to the (German) site http://www.browsersicherheit.info/ which basically claims that due to its capabilities to modify a site's ...
47
votes
4answers
12k views

Detecting skimmers and other ATM traps

This question has been bothering me ever since I first heard of ATM skimmers: Instances of skimming have been reported where the perpetrator has put a device over the card slot* of an ATM (...
30
votes
7answers
5k views

Is having Steam installed a security risk?

Speaking to one of our security administrators at work, he insists that Steam is a well understood security risk and it shouldn't be installed on work machines. Saying it's not work related I ...
16
votes
2answers
1k views

Encryption and the “security time decay” of prior encrypted data

This question is on the assumption that any data once encrypted, may (eventually) be decrypted through Brute force (compute power/time) Exploits in the cryptography used Theft of private keys ...
15
votes
6answers
2k views

What are a few good lists of threats to use to kick-off conversations with others about what worries them?

To effectively communicate with business owners or executives on security, specifically with how people may harm their business, it often helps to discuss what types of people worry them. What are ...
12
votes
6answers
9k views

What is the distinguishing point between a script kiddie and a hacker?

When I think of a script kiddie I think of someone who might barely research a tool then point it at a website - things like the recent question about LOIC come to mind when I think of that. A hacker (...
11
votes
4answers
451 views

Resources for data on security incidents

What resources exist to research data on actual security incidents? I would prefer an online resource but offline resources are acceptable. The cost of access should be less than $100 (US) for ...
9
votes
2answers
301 views

How easy is it, really, to be hacked as an average user?

tl;dr at the bottom I have been searching around and I haven't been able to find a definitive answer to the question(s). I mainly work with OS X so that will be the base for my questions. How easy ...
8
votes
6answers
11k views

Security testing plan template or example

What does a security testing plan look like? Can anyone point out a template for such a document or an example?
5
votes
5answers
2k views

What are the likely threats to a public-facing DB instance?

Quick intro: Small company, VERY limited resources. I pretty much do everything including take out the trash. We've been running an instance of MySQL internally for years and it's worked OK, but I ...
5
votes
2answers
123 views

Is SS7 a threat any more?

I'm reading about an SS7 issue: SS7 flaw allows hackers to spy on every conversation. It seems to me that any phone on the world can be intercepted so the hacker can listen to your phone call or read ...
5
votes
2answers
473 views

Port forwarding with 0.0.0.0, any threat?

I set up on our company's firewall (fortigate100d) a port forwarding to one of our Internal services. As we don't have a static public IP I used 0.0.0.0 as an external IP so the remote users can ...
4
votes
3answers
66 views

Is there a process to identify threats related to a deployments?

I read about application threat modeling which makes a software products secure from its initial stages (SDLC). But if we do something wrong in the deployment phase still that will be an issue. For ...
4
votes
2answers
168 views

Risks to company while performing the penetration test

I would like to know what the risks a penetration testing company faces while performing tests for clients. For example: A penetration testing company named "A" providing services for a client called ...
3
votes
2answers
659 views

What is a threat tree in threat modeling?

The OWASP Application Threat Modeling, quoting step 2 says specifically: These threats can be identified further as the roots for threat trees; there is one tree for each threat goal. what is ...
3
votes
3answers
34 views

What would be the valid approach while handling short links [duplicate]

In modern world people often use to send urls with url shortners from various webservices,Mostly we use url shortners to shorten the url But in terms of exploits,phishing attempts how could we avoid ...
2
votes
1answer
217 views

SSL certificates published in Mandiant's APT1 report

You probably heard about excellent report "APT1: Exposing One of China's Cyber Espionage Units" published by the Mandiant company (you can download it here). Report is great and I recommend it to ...
2
votes
2answers
877 views

Vulnerabilities and Threats to Non Web Based Windows Applications

I believe that most people here are familiar with OWASP and their Top 10 project. When it comes to information systems these days it appears that there is a big focus on web application security and ...
2
votes
2answers
673 views

Odd url showing up in my pubsub stream, should I be concerned?

Background: Yesterday I started working on a simple metrics dashboard. I have a VBScript on my internal network that queries a database over a VPN from our Vendor. I then do a simple HTTP post to a ...
2
votes
2answers
344 views

How vulnerable is Windows XP Embedded SP2 as of today?

A few weeks ago, I have been replacing and managing IT inventory. What caught my attention, was that a lot of thin clients are still running Windows XP Embedded SP2. That made me think about the ...
2
votes
1answer
191 views

how much of a security threat would this be?

If I set up a Domain Controller server to be accessible from the internet via Remote Desktop Connection (through port forwarding in the router), how much of a threat would that be? and if I have a ...
1
vote
5answers
2k views

What is Non-Repudiation of content? How can we combat it?

Can anyone explain precisely the term of non-repudiation of content (eg. of email)? What sort of security requirement is used to combat this? Perhaps a digital signature? This is how I understand ...
1
vote
2answers
640 views

How to check if a software is legitimate

if I have a developer who wants to install a new software and he ask me to check this software security before installing it what shall I do
1
vote
2answers
197 views

What are the security threats when Googling and surfing when my Gmail account is open?

Suppose I log to my Gmail account. After that, I use Google to search for random websites and visit some. Are there any security threats on my Gmail account when Googling and surfing the net while it ...
1
vote
2answers
73 views

Is broadcasting your Windows computer name a vulnerability?

Some software I'm using sends out bug reports occasionally. The bug reports contain a fair bit of information. I'm concerned about some of the user identifiable information in the bug report. In ...
1
vote
1answer
182 views

Is authentication through proxy sites safer?

usually in office or wherever whenever we are blocked with gmail and facebook websites,we used to browse the site with the proxy sites,we used to pass our login data through proxy sites,my question is ...
1
vote
2answers
70 views

Do we still refer to a threat as a threat once it has been realised?

A threat is defined as something that might do harm but once a threat happens do we still refer to it as a threat? For instance, if malware infects our computer, do we still refer to the malware as a ...
1
vote
1answer
107 views

What is OSINT (Opensource Intelligence)?

I know about threat intelligence services, I've also read definitions of OSINT but I can't get a tangible feeling of what it actually is. What are some examples of OSINT services? Apart from ...
1
vote
1answer
42 views

Possible threats on the memory buffer

If an adversary could identify a buffer's capacity, what would be the possible consequences?
1
vote
1answer
83 views

Threat Modelling Examples (Distributed Systems)

I have threat modelled applications in the past, but I'd like to threat model a distributed system. However for other people I'm with, who have never done it at all, I'd like to check out some ...
1
vote
1answer
49 views

Location/proximity based decryption using separate machine

I read a long thread where the whole issue was revolving around deriving decryption keys from GPS location. This has huge issues, as being present at a location is not needed to know the location. ...
1
vote
0answers
74 views

Open Source Software & Android Malware Campaigns [closed]

I am looking to find a report that lists malware campaigns launched against Open Source Software (OSS) and/or Android OS. Ideally, this report would have been published in 2014. I am trying to ...
1
vote
0answers
298 views

Password automatically typed into user box on facebook [closed]

Just want to ask some questions regarding on this strange experience while logging on my account on Facebook There are cases that I'm accidentally typing my password into the username box of the ...
1
vote
2answers
144 views

Malware for testing [duplicate]

IS there websites and places where you can download all types of malware that you can run and test the security setup of your system? I am currently playing around with UAC+EMET4+MSE and would like ...
0
votes
3answers
284 views

How can I prevent myself from barcode payload attacks?

Recently I came across a tool which can inject payloads into a barcode. How can I prevent myself from this kind of attacks? Attack scenario: The attacker prints vulnerable barcode / sends ...
0
votes
3answers
173 views

Security concept [closed]

How do we know that the systems that we are using are secure? At what point do we have to audit the software that we use? How do unknown security threats affect software over time?
0
votes
3answers
695 views

HTTP/HTTPS on the same site

Suppose a site allows connection to be established with HTTP or HTTPS .If you establish a connection to http://www.example.com or https://www.example.com then all further link's on the page displayed ...
0
votes
1answer
31 views

Threat modeling a network monitoring software

Assume a network fault monitoring tools is deployed to monitor a subset of routers. What an attacker can do by exploiting a network monitoring system like OpenNMS? Can they learn about the topology ...
0
votes
1answer
138 views

Which is considered the first Cyber Security incident? [closed]

No matter we are talking about Information Security, or cyber security or IT security... I always hear first about "the moth" being the first security threat. But I don't believe it is when talking ...
0
votes
1answer
1k views

Where can I find a list of Indicators of Compromise (IOC) conditions?

OpenIOC.org has several schemas defining Indicators of Compromise. The Schema is defined here: http://schemas.mandiant.com/2010/ioc/ioc.xsd While under IndicatorItemContext/search says it is xs:...
0
votes
1answer
138 views

How does FireEye HX work?

Can someone please expand on how FireEye HX works, what does it do exactly? Here is the site info: https://www.fireeye.com/products/hx-endpoint-security-products.html, but it's written in such a ...
0
votes
1answer
514 views

Service traffic hijacking, how does cloud make it worse?

I read an article from CSA that they rank service traffic hijacking as the #3 threat to cloud-services. Why is it worse for the user if an attacker hijacks its service traffic on cloud? What new ...
-1
votes
1answer
49 views

Should security documentation referencing “state sponsored exploits” be revised to include large corporations also?

Security-related documentation (and casual conversation) often describes threats that require a lot of resources as "state sponsored" Given that large mega-national corporations have more income ...
-2
votes
1answer
141 views

What are the security measures to be taken before launching a site with credit card payments? [closed]

We just completed functionality testing of our new e-commerce site and going to launch.We are accepting credit card payments. I'm really concerned about it's security.What are the precautions to be ...
-3
votes
1answer
51 views

SSH and Port Forwarding - what are the possible attacks and how to avoid them? [closed]

What are possible attacks when using SSH and Local or Remote Port Forwarding? What are the threats? I understand that there are many, but what are they? And also, how could they be avoided?
-3
votes
1answer
49 views

What threats involve in cache miss

What are the possible consequences of a cache miss? In other word, is it possible that a cache miss could cause a security threat? Thank you.