Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [threats]

An actor, usually a person, who may attempt to exploit a vulnerability of an exposed system.

Filter by
Sorted by
Tagged with
0 votes
1 answer
109 views

Difference between "circumstance" and "event" in the definitions of threat

On the Wikipedia page of threat (in textbooks too) various definitions are given where almost all agree in defining a threat as a "circumstance or event". I'm having trouble understanding ...
gomd's user avatar
  • 117
0 votes
0 answers
91 views

Could a public IP with blocked public inbound/outbound traffic be a risk?

If we have a device that for some reason needs a public IP address and if at the same time the device should only be accessible from within a private network: Could the fact that the public IP of the ...
Moritz Loritz's user avatar
0 votes
0 answers
106 views

Is there any increase to known security risks by mounting the EFI System Partition, on a Windows 10 PC?

Security risks, as in malware, attackers, or known vulnerabilities. Threats while the ESP is mounted, or after unmounting. E.g. Could it open access routes for future attackers. I aim to avoid ...
Eric's user avatar
  • 1
0 votes
1 answer
125 views

Attract Traffic on my Honeypot [duplicate]

I have deployed a low-interaction honeypot on my ec2 aws instance but I am not receiving any traffic. Where can I share the URL so that I can get more traffic especially from automated bots.
cost p's user avatar
  • 1
1 vote
1 answer
166 views

Why does threat model STRIDE only have six threat categories?

I know STRIDE (from Microsoft) stands for Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, and Elevation of privilege. How did Loren Kohnfelder and Prakrit Garg deduce ...
Matt Elson's user avatar
1 vote
1 answer
107 views

Static react native app security issues

I am creating a react native mobile application using Expo. This app simply renders information - there is no data collection or entry, no user accounts, no database (other than JSON storage). There ...
server_unknown's user avatar
0 votes
2 answers
1k views

What exactly is Application.Hacktool.AMZ?

I have been using Windows Product Key Viewer for ages to read current Windows' serial number. I had never any hack- or virus-related issue about this application. A few days ago I have installed ...
trejder's user avatar
  • 3,639
1 vote
0 answers
563 views

Do anti-cheat software actually "patch" the UEFI firmware on your motherboard?

I've recently read about the new game called Bloodhunt containing an Anti-Cheat, which had a bug, in which the anti-cheat service would stay installed even though the game is removed. The top Steam ...
Sir Muffington's user avatar
0 votes
1 answer
151 views

How to use pre-existing threat catalogue to determine if a certain system is vulnerable?

There are many risk assessment guidelines such NIST800-30 and ISO 27005 that provide a catalogue of known threats as reference. Using a qualitative approach, I selected one threat events catalogue and ...
NoRel's user avatar
  • 1
3 votes
2 answers
1k views

How to estimate threat and risk associated with that threat and not only vulnerability severity?

Having this simple formula Risk = Threat x Vulnerability x Information Value it is quite difficult to estimate risks quantitatively because of threat estimation seems to me the most difficult part. I ...
progmastery's user avatar
2 votes
1 answer
2k views

What is the difference between ATT&CK and CAPEC?

My question is on Cyber Threat Intelligence (CTI). I want to know the difference between Attack Patterns (as in MITRE CAPEC) and Tactics, Techniques and Procedures (as in MITRE ATT&CK). They both ...
JacopoStanchi's user avatar
1 vote
1 answer
6k views

What is the difference between "local" and "Adjacent" threat agents?

I am using CVSS to do the vulnerability assessment for my project. As per documentation here is the definition of local and adjacent Adjacent (A) The vulnerable component is bound to the network ...
kudlatiger's user avatar
0 votes
1 answer
208 views

Insider threats vs. insider attacks

I understand that a threat is a possible security violation that might exploit the vulnerability of a system, and a attack is an action on a system that harms the organisation in some way. Therefore, ...
Ylvetal's user avatar
1 vote
2 answers
363 views

Secure a virtual machine during a lab exercise

I recently started the Offensive Security AWAE course. On their connectivity guide page, they warn about the hazards of connecting to their labs: you will be exposing your computers' VPN IP to other ...
Martin Fürholz's user avatar
3 votes
1 answer
27k views

Windows Defender found threats in Kali Linux disc image

Last week, I downloaded Kali Linux from the official https://www.kali.org/ website for educational purpose. I left the downloaded disc image (.iso) on my desktop. Yesterday, Windows Defender decided ...
pmbonneau's user avatar
  • 191
1 vote
2 answers
1k views

How to respond to Indicators of Compromise?

We've received frequent emails from our Threat Intelligence Group with IoCs artifacts, such as file names, hashes, domains/urls. They request us to do preventive measures for the given attributes. ...
sanba06c's user avatar
  • 123
0 votes
0 answers
128 views

BLE IoT device as platform backdoor for hackers

I have a IoT device that works with BLE and uses a smartphone as a bridge to connect to a digital platform (cloud). The communication between the IoT device and the platform is based in PKI. The IoT ...
LazyTurtle's user avatar
0 votes
1 answer
1k views

DNS communicating with a remote host on an unusual server port 53

We have an Active Directory EC2 server on AWS US East region that has DNS enabled to resolve only internal hostnames. It is not reachable from any hosts on the public internet. Recently we enabled an ...
Lego's user avatar
  • 103
0 votes
0 answers
147 views

Risk, threat, vulnerability with an example

Given a situation where a system has SSL 3.0 and TLS 1.0 enabled would the following mapping be accurate: Weakness/vulnerability: The remote service accepts connections encrypted using TLS 1.0 and ...
user211245's user avatar
-1 votes
1 answer
135 views

threat intelligence gateway [closed]

A TOG (threat intelligence gateway) is a hardware piece that sits between the router and the firewall. The TIG uses the threat intelligence and filters out the malicious urls and IPs before reaching ...
MOH's user avatar
  • 31
1 vote
1 answer
345 views

Where do live threat maps get their threat-data from? [closed]

There are many "threat maps" online such as Norse, Fortinet etc serving accurate information of all kinds of attacks around the globe such as DOS, Scans, Pings, and many more. How accurate is this ...
Guest's user avatar
  • 11
-5 votes
1 answer
371 views

Is there some hidden worm attached with whatsapp messages that state forward this messgae to 20 people? [closed]

NOTE: I am New contributor, if the question needs some improvement please tell in comment before down voting! Usually I see messages on whatsapp and sometime on some other forums stating that forward ...
Ajwad Syed's user avatar
0 votes
2 answers
668 views

risk threat vulnerability

From ENISA - Threat and Risk Management Identification, analysis and evaluation of these threats and vulnerabilities are the only way to understand and measure the impact of the risk involved ...
blabla_trace's user avatar
2 votes
1 answer
3k views

What is the difference between Anti - APT (Advanced Persistent Threat) and ATP (Advanced Threat Protection)?

Like the question says, is it the naming difference only or are they entirely different?
Regmi's user avatar
  • 125
-1 votes
1 answer
255 views

What is Threat Hunting?

Can anyone please describe what is Threat Hunting and how it should be conducted/deploy/monitor? Is it similar to SIEM systems with more advanced and automated use cases? I went through google ...
0xSecNerd's user avatar
1 vote
2 answers
202 views

Aren't VPN servers exposed to the same threats as public Wi-Fi?

Besides trust of the VPN provider, are VPN servers safe? Other people connect to it and it can be compromised, right? Is it the same threat as being connected to a public Wi-Fi where someone could ...
Nicryc's user avatar
  • 121
3 votes
0 answers
999 views

How is it possible that the Metasploit meterpreter can take pictures without "notifying" the user?

Im curious how the Meterpreter can take pictures from my webcam without turning on the webcam LED? Ive read that you have to write/change a driver, or a firmware, or you just change some DLLs, but ...
tester's user avatar
  • 43
2 votes
1 answer
332 views

What are the main sources to collect Threat Intelligence Information especially from Dark Web

I've identified some OSINT Sources but they are not enough. Can anyone identify other sources to automatically via APIs or other way to collect threat intel information.
Adnan Qureshi's user avatar
2 votes
2 answers
2k views

Boot from live usb to avoid being spied on

Suppose the government wants to spy on you using government-designed malware. If you then want to visit sensitive pages on the internet, would it be more secure to use Tor browser within a USB - live ...
CuriousIndeed's user avatar
1 vote
0 answers
160 views

Advice for carrying out risk identification in ISO27005:2011

I am currently required to carry out an information security risk assessment for an assignment, using the ISO 27005:2011 standard, for the Equifax data breach that occurred in 2017, https://...
2nce's user avatar
  • 11
0 votes
2 answers
162 views

Why do unverified restaurants accounts pose a threat to the privacy and safety of users? [closed]

We have an app to order food from restaurants but the app developers decided not to verify any of the information provided by the restaurants like the location and opening hours. Why this decision ...
Memo's user avatar
  • 9
0 votes
3 answers
1k views

Is there any list of vulnerabilities and their signatures?

I am looking for a list of known vulnerabilities and their signatures. Is there any publicly available list of security vulnerabilities and their signatures? NVD (NATIONAL VULNERABILITY DATABASE) ...
MOH's user avatar
  • 31
0 votes
0 answers
107 views

Why would IPS vendor provider refuse to publish SLAs to fix the published highly ranked CVEs?

One of the biggest IPS providers (top of Gartner graph for its category) is not providing SLAs for all the 7+ ranking CVEs published last year. I don't really understand why would they refuse to ...
Filipon's user avatar
  • 1,294
1 vote
1 answer
225 views

TVRA does it cover physical, cyber and information security?

For that matter is TVRA only linked to security? Can it be used to assess, evaluate all or any situation and from there, come up with control measures?
Jaya Anand V's user avatar
0 votes
4 answers
495 views

Should the recent Tiny Chip attack teach us to invest less in our security posture?

Now with upcoming new year budgets to purchase the next tools and services for protecting our company to increase organization posture against cyber attack, I can't stop thinking if we should reduce ...
Filipon's user avatar
  • 1,294
-1 votes
1 answer
198 views

How to calculate the priority and the severity of our daily cyber security intelligence threat feeds?

Some solutions (eg. FireEye ISight) can provide a daily feed where they will mention each reported issue with it's severity and priority. Usually those companies will do some basic research and look ...
Filipon's user avatar
  • 1,294
-1 votes
1 answer
178 views

Where should I look for information once there is a security incident reported on breaking news? [closed]

We see breaking news alerts popping up with some dramatic headline, but headlines can be tricky and bring a lot of chaos to the organization and more specifically to the SOC. Where will be the best ...
Filipon's user avatar
  • 1,294
2 votes
2 answers
447 views

How should we mitigate threats that are keep coming to our security monitoring system?

We have continuous cybersecurity threat feeds that coming to our SOC on a daily basis from different sources that provide all the new CVEs, new malware variations and more. We just don't know how to ...
Filipon's user avatar
  • 1,294
3 votes
3 answers
281 views

How should we implement responsible discovery program internally only for our organization employees?

We experienced a very interesting phenomenon in the last 6 months and that is that some employees found and reported to our security teams few very crucial security issues. We were thinking about ...
Filipon's user avatar
  • 1,294
2 votes
1 answer
877 views

Use Splunk to run Nmap scan from remote host to potential attacker

When receiving internal attacks, I'd like to utilize Splunk alerts to trigger an Nmap scan against that attacking host from a remote machine; one other than the Splunk server. Is there any API or ...
SnakeItUp's user avatar
1 vote
1 answer
160 views

Operation Prowli Malware Infects Over 40,000 Machines

Seems a new malware infection has been detected called 'Operation Prowli Malware' and around 40,000 machines are infected. Still no CVE data updated on CVE site regarding the relevant vulnerability. ...
Sayan's user avatar
  • 2,031
18 votes
3 answers
9k views

What is the difference between "Incident", "Attack" and "event"?

In the Computer and network security incident taxonomy what are the differences between "Incident", "Attack" and "event"? Where does "threat" fit with them?
Mohammad's user avatar
  • 527
1 vote
1 answer
314 views

Relationship between threat analysis and attack modeling

What could be the Relationship between threat analysis and attack modeling. Both are pretty close, have different perspectives but I need to know the relationships or in other words, how can they ...
Mohammad's user avatar
  • 527
0 votes
2 answers
246 views

Are there any real instances of threats to machine learning systems?

I recently read a paper on The security of Machine Learning. Are there any instances of attacks against machine learning systems besides spam filters?
Anukarsh Singh's user avatar
1 vote
1 answer
307 views

Spoofed number sending threats to students. Can it be traced to sender?

A SMS message was sent to several students at my son's school claiming to be my son stating that he was going to shoot up the school. My family didn't receive this message but I have the phone number ...
user161361's user avatar
5 votes
1 answer
489 views

Drawbacks of ML in cyber security?

I did some research on the topic (as I'm new to it) and it frankly seems too good to be true. A company called Darktrace for instance, makes use of AI algorithms and ML to autonomously detect threats ...
Marco Neves's user avatar
0 votes
2 answers
218 views

How much is known about who is responsible for all the database breaches?

Troy Hunt claims that those responsible for data breaches are often just teenagers and there are reports that a lot of the breaches would appear to come from insiders. But we also hear a lot about the ...
Peter Gregory's user avatar
0 votes
2 answers
154 views

What should be people warned about? [closed]

I'm doing a presentation about security/privacy on web and i would appreciate few hints about what would you talk about. Just general, nothing IT specific. I just wanna give a 1000 foot view on few ...
ShinobiUltra's user avatar
2 votes
0 answers
291 views

Slowing the hashing of a password. Is this all i need to know about securing passwords? [closed]

I'm on a journey of learning everything about information security and as i've read about how to secure a password, i didn't quite understood why should i slow down the hashing of a password and how ...
Peter Cos's user avatar
  • 121
1 vote
2 answers
2k views

Can a smartphone be hacked by calling it?

I have received call from international number (0012024558888). After receiving it I cut the call as it was irrelevant to me and I did not give any information to them. Now I doubt it as spam/scam ...
Amrutha's user avatar
  • 11