Reputation
11,542
Next privilege 15,000 Rep.
Protect questions
Badges
1 35 58
Newest
 Organizer
Impact
~725k people reached

1d
revised Open-source penetration-test automation
added 116 characters in body
2d
comment Can a SIM card propagate malware?
en.wikipedia.org/wiki/UICC_configuration
Apr
26
comment SS7 exploit on the wiretapping part
Can you provide links to the references you used, please?
Apr
26
comment Can a SIM card propagate malware?
Not entirely accurate because a UICC enabled with GlobalPlatform can cause a device to pull down malicious logic in a very similar way as a malware stager.
Apr
24
revised How to detect mimikatz usage on LAN
edited body
Apr
23
comment The best way to prevent ransomware and virus?
This is an ok answer, but you should include that Silverlight is a prominent attack vector -- much more-so when compared to Java or Internet Explorer -- and significantly more-so when compared to MS Office or Adobe Reader. For example, much of the ransomware in the past six months (especially in the past 1-2 months) has been delivered via CVE-2016-0034 included in the patch rollup for MS16-006.
Apr
23
answered How to detect mimikatz usage on LAN
Apr
23
comment Planning Incident Response / Business Continuity
There's the MITRE cyber exercise playbook -- mitre.org/publications/technical-papers/cyber-exercise-playbook
Apr
18
revised What are common security problems pen testers find?
added 65 characters in body
Apr
18
revised Open-source penetration-test automation
deleted 10 characters in body
Apr
18
revised Open-source penetration-test automation
added 6 characters in body
Apr
18
revised Open-source penetration-test automation
added 4 characters in body
Apr
17
revised Does the use or the implementation of PDCA or Deming cycle in the Information Security Management System mandatory?
deleted 89 characters in body
Apr
17
revised Does the use or the implementation of PDCA or Deming cycle in the Information Security Management System mandatory?
deleted 89 characters in body
Apr
17
revised Does the use or the implementation of PDCA or Deming cycle in the Information Security Management System mandatory?
edited tags
Apr
17
answered Does the use or the implementation of PDCA or Deming cycle in the Information Security Management System mandatory?
Apr
17
comment How to verify if a source code is safe before compiling it?
Some commercial security-focused static analysis tools have rulepacks to detect the insider threat, e.g., malicious logic, such as a backdoor, inserted into a codebase or built into it from the start (intentionally). Is that what you are looking for? Remember that often, many people have access to code repos (and they are not protected well). Some code generators will obfuscate the code, but with integrity-checking. Then there is the app "last-mile" problem of secure release and distribution.
Apr
9
revised Assuming UAC is enabled, does a non-administrator account offer any security improvements?
added 610 characters in body
Apr
9
comment Out of band verification using phone; a fallacy?
I always say use a split-key method where half of the symmetric passphrase (or key) goes through email (or web -- really any TCP/IP-based mechanism) and other over SMS
Apr
9
comment Assuming UAC is enabled, does a non-administrator account offer any security improvements?
A new UAC bypass was just published this morning -- kernelmode.info/forum/viewtopic.php?p=28249