Information Security

Questions tagged [threats]

Ask Question

An actor, usually a person, who may attempt to exploit a vulnerability of an exposed system.

85 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
-5
votes
1answer
138 views

Is there some hidden worm attached with whatsapp messages that state forward this messgae to 20 people? [closed]

NOTE: I am New contributor, if the question needs some improvement please tell in comment before down voting! Usually I see messages on whatsapp and sometime on some other forums stating that forward ...
0
votes
2answers
131 views

risk threat vulnerability

From ENISA - Threat and Risk Management Identification, analysis and evaluation of these threats and vulnerabilities are the only way to understand and measure the impact of the risk involved ...
1
vote
1answer
199 views

What is the difference between Anti - APT (Advanced Persistent Threat) and ATP (Advanced Threat Protection)?

Like the question says, is it the naming difference only or are they entirely different?
0
votes
0answers
26 views

OIDC Protocol :: Different OIDC Server End points

OIDC Specifications: Authorization Code Grant Flow. As OIDC Server is shall list the various end points (Auth EP, Token EP, Token validation EP etc.) In this scenario, Can Auth End Point and Token End ...
0
votes
1answer
118 views

What is Threat Hunting?

Can anyone please describe what is Threat Hunting and how it should be conducted/deploy/monitor? Is it similar to SIEM systems with more advanced and automated use cases? I went through google ...
1
vote
2answers
126 views

Aren't VPN servers exposed to the same threats as public Wi-Fi?

Besides trust of the VPN provider, are VPN servers safe? Other people connect to it and it can be compromised, right? Is it the same threat as being connected to a public Wi-Fi where someone could ...
0
votes
0answers
39 views

How to prevent threats from usb on Linux? [duplicate]

OS: archlinux I'm thinking of logging into a restricted user with mount permissions and examine behavior of the usb. But what if usb has injected hardware that would inject code directly when I ...
3
votes
0answers
132 views

How is it possible that the Metasploit meterpreter can take pictures without “notifying” the user?

Im curious how the Meterpreter can take pictures from my webcam without turning on the webcam LED? Ive read that you have to write/change a driver, or a firmware, or you just change some DLLs, but ...
0
votes
0answers
21 views

What security controls that needs to be evaluated for DB2 Mainframe, SQL Server, PostgreSQL, and Guardium application?

I am an Information Security analyst, evaluating the above mentioned applications and looking for a high risk items the requires deeper testing. I would really appreciate guides, books, or anything ...
1
vote
1answer
112 views

What are the main sources to collect Threat Intelligence Information especially from Dark Web

I've identified some OSINT Sources but they are not enough. Can anyone identify other sources to automatically via APIs or other way to collect threat intel information.
0
votes
2answers
130 views

Boot from live usb to avoid being spied on

Suppose the government wants to spy on you using government-designed malware. If you then want to visit sensitive pages on the internet, would it be more secure to use Tor browser within a USB - live ...
1
vote
0answers
52 views

Advice for carrying out risk identification in ISO27005:2011

I am currently required to carry out an information security risk assessment for an assignment, using the ISO 27005:2011 standard, for the Equifax data breach that occurred in 2017, https://...
0
votes
2answers
99 views

Why do unverified restaurants accounts pose a threat to the privacy and safety of users? [closed]

We have an app to order food from restaurants but the app developers decided not to verify any of the information provided by the restaurants like the location and opening hours. Why this decision ...
0
votes
2answers
216 views

Is there any list of vulnerabilities and their signatures?

I am looking for a list of known vulnerabilities and their signatures. Is there any publicly available list of security vulnerabilities and their signatures? NVD (NATIONAL VULNERABILITY DATABASE) ...
0
votes
0answers
45 views

Why would IPS vendor provider refuse to publish SLAs to fix the published highly ranked CVEs?

One of the biggest IPS providers (top of Gartner graph for its category) is not providing SLAs for all the 7+ ranking CVEs published last year. I don't really understand why would they refuse to ...
1
vote
1answer
68 views

TVRA does it cover physical, cyber and information security?

For that matter is TVRA only linked to security? Can it be used to assess, evaluate all or any situation and from there, come up with control measures?
0
votes
4answers
431 views

Should the recent Tiny Chip attack teach us to invest less in our security posture?

Now with upcoming new year budgets to purchase the next tools and services for protecting our company to increase organization posture against cyber attack, I can't stop thinking if we should reduce ...
-1
votes
1answer
70 views

How to calculate the priority and the severity of our daily cyber security intelligence threat feeds?

Some solutions (eg. FireEye ISight) can provide a daily feed where they will mention each reported issue with it's severity and priority. Usually those companies will do some basic research and look ...
-1
votes
1answer
106 views

Where should I look for information once there is a security incident reported on breaking news? [closed]

We see breaking news alerts popping up with some dramatic headline, but headlines can be tricky and bring a lot of chaos to the organization and more specifically to the SOC. Where will be the best ...
1
vote
2answers
243 views

How should we mitigate threats that are keep coming to our security monitoring system?

We have continuous cybersecurity threat feeds that coming to our SOC on a daily basis from different sources that provide all the new CVEs, new malware variations and more. We just don't know how to ...
3
votes
3answers
216 views

How should we implement responsible discovery program internally only for our organization employees?

We experienced a very interesting phenomenon in the last 6 months and that is that some employees found and reported to our security teams few very crucial security issues. We were thinking about ...
2
votes
1answer
253 views

Use Splunk to run Nmap scan from remote host to potential attacker

When receiving internal attacks, I'd like to utilize Splunk alerts to trigger an Nmap scan against that attacking host from a remote machine; one other than the Splunk server. Is there any API or ...
1
vote
1answer
98 views

Operation Prowli Malware Infects Over 40,000 Machines

Seems a new malware infection has been detected called 'Operation Prowli Malware' and around 40,000 machines are infected. Still no CVE data updated on CVE site regarding the relevant vulnerability. ...
19
votes
3answers
6k views

What is the difference between “Incident”, “Attack” and “event”?

In the Computer and network security incident taxonomy what are the differences between "Incident", "Attack" and "event"? Where does "threat" fit with them?
1
vote
1answer
147 views

Relationship between threat analysis and attack modeling

What could be the Relationship between threat analysis and attack modeling. Both are pretty close, have different perspectives but I need to know the relationships or in other words, how can they ...
0
votes
2answers
121 views

Are there any real instances of threats to machine learning systems?

I recently read a paper on The security of Machine Learning. Are there any instances of attacks against machine learning systems besides spam filters?
0
votes
1answer
156 views

Spoofed number sending threats to students. Can it be traced to sender?

A SMS message was sent to several students at my son's school claiming to be my son stating that he was going to shoot up the school. My family didn't receive this message but I have the phone number ...
5
votes
1answer
351 views

Drawbacks of ML in cyber security?

I did some research on the topic (as I'm new to it) and it frankly seems too good to be true. A company called Darktrace for instance, makes use of AI algorithms and ML to autonomously detect threats ...
0
votes
2answers
142 views

How much is known about who is responsible for all the database breaches?

Troy Hunt claims that those responsible for data breaches are often just teenagers and there are reports that a lot of the breaches would appear to come from insiders. But we also hear a lot about the ...
0
votes
2answers
90 views

What should be people warned about? [closed]

I'm doing a presentation about security/privacy on web and i would appreciate few hints about what would you talk about. Just general, nothing IT specific. I just wanna give a 1000 foot view on few ...
2
votes
0answers
219 views

Slowing the hashing of a password. Is this all i need to know about securing passwords? [closed]

I'm on a journey of learning everything about information security and as i've read about how to secure a password, i didn't quite understood why should i slow down the hashing of a password and how ...
1
vote
2answers
471 views

Can a smartphone be hacked by calling it?

I have received call from international number (0012024558888). After receiving it I cut the call as it was irrelevant to me and I did not give any information to them. Now I doubt it as spam/scam ...
1
vote
3answers
182 views

What would be the effects of a limited Russian/US cyber conflict be on cyber-security professionals? [closed]

In an interview with NPR's Steve Inskeep that is airing Friday on Morning Edition, Obama said, "I think there is no doubt that when any foreign government tries to impact the integrity of our ...
1
vote
1answer
840 views

Threats due to a stolen password db file (e.g. keepass)

If someonelse could get your password db file (e.g. .kdbx file for keepass), maybe due to a hacking attack, how threaten is your security in fact? Of course this is a problem and you should change ...
2
votes
1answer
5k views

Is it possible to spoof a paired Bluetooth device?

I'm thinking about creating a physical lock, where the keys would simply be paired Bluetooth devices, but I'm concerned about the potential (in)security. I would like to have a Bluetooth 2.1 module ...
1
vote
0answers
46 views

Are there any methodology for malware in case of threat assessment?

Malware is a threat in security assessment. Are there any criteria to assess malware in case of threat assessment?
2
votes
2answers
684 views

How to determine the threat agent for analyzing risk of a threat?

When doing Risk Assessment of a threat, how can I find the best threat agent for the risk assessment? For example, the asset which has the vulnerability related to the threat may be in an internal ...
2
votes
4answers
173 views

Threat modelling - including threats one cannot mitigate?

When threat modelling, should you include the threats a system cannot mitigate? If so, where should you stop? It could be very time-consuming to list all the threats one cannot mitigate.
11
votes
3answers
1k views

Does broken site functionality pose any security threat?

If you are assessing an application as a part of pentesting exercise, how do you deal with broken site functionality? Should the issues be ignored? Is keeping functional bugs in a system safe?
2
votes
3answers
946 views

How can I prevent myself from barcode payload attacks?

Recently I came across a tool which can inject payloads into a barcode. How can I prevent myself from this kind of attacks? Attack scenario: The attacker prints vulnerable barcode / sends vulnerable ...
1
vote
2answers
120 views

Do we still refer to a threat as a threat once it has been realised?

A threat is defined as something that might do harm but once a threat happens do we still refer to it as a threat? For instance, if malware infects our computer, do we still refer to the malware as a ...
9
votes
2answers
694 views

Is SS7 a threat any more?

I'm reading about an SS7 issue: SS7 flaw allows hackers to spy on every conversation. It seems to me that any phone on the world can be intercepted so the hacker can listen to your phone call or read ...
1
vote
2answers
107 views

Is broadcasting your Windows computer name a vulnerability?

Some software I'm using sends out bug reports occasionally. The bug reports contain a fair bit of information. I'm concerned about some of the user identifiable information in the bug report. In ...
1
vote
2answers
1k views

Threat Modelling Examples (Distributed Systems)

I have threat modelled applications in the past, but I'd like to threat model a distributed system. However for other people I'm with, who have never done it at all, I'd like to check out some ...
0
votes
1answer
89 views

Threat modeling a network monitoring software

Assume a network fault monitoring tools is deployed to monitor a subset of routers. What an attacker can do by exploiting a network monitoring system like OpenNMS? Can they learn about the topology ...
2
votes
1answer
812 views

What is OSINT (open source intelligence)?

I know about threat intelligence services. I've also read definitions of OSINT but I can't get a tangible feeling of what it actually is. What are some examples of OSINT services (apart from ...
1
vote
1answer
105 views

Location/proximity based decryption using separate machine

I read a long thread where the whole issue was revolving around deriving decryption keys from GPS location. This has huge issues, as being present at a location is not needed to know the location. ...
-2
votes
1answer
468 views

SSH and Port Forwarding - what are the possible attacks and how to avoid them? [closed]

What are possible attacks when using SSH and Local or Remote Port Forwarding? What are the threats? I understand that there are many, but what are they? And also, how could they be avoided?
4
votes
1answer
6k views

How does FireEye HX work? [closed]

Can someone please expand on how FireEye HX works, what does it do exactly? Here is the site info: https://www.fireeye.com/products/hx-endpoint-security-products.html, but it's written in such an ...
5
votes
2answers
2k views

Port forwarding with 0.0.0.0, any threat?

I set up on our company's firewall (fortigate100d) a port forwarding to one of our Internal services. As we don't have a static public IP I used 0.0.0.0 as an external IP so the remote users can ...

1 2