SysAdmin 24x7

Unprotected Government Server Exposes Years of FBI Investigations https://thehackernews.com/2019/01/oklahoma-fbi-data-leak.html

2018 was a great year for Telegram, but 2019 is going to be by far the most important one in our company's history. In 2018, more and more people discovered Telegram and switched to it from services run by ad-selling IT monopolies. As a result, Telegram became one of the few messaging apps that are enjoying significant growth globally. Building on the success of the last year, this year we are going to implement many long-awaited product changes you have been asking for. 2019 will be the time when feature-related wishes of our users come true.

Critical bug in Amadeus flight booking system affects 141 airlines A critical flaw in online flight ticket booking system developed by Amadeus could impact almost half of the fight travelers of 141 airlines around the world https://securityaffairs.co/wordpress/79972/hacking/amadeus-flight-booking-system-bug.html

Android Studio 3.3 stable release is now available, Google announces an update to Project Marble Since 2015, Android Studio has been Google’s recommended program for creating Android apps. Android Studio is based heavily on JetBrains’ IntelliJ, with slight changes. The main difference is that it ships with all the Android tools pre-installed. https://www.xda-developers.com/android-studio-3-3-stable-release-project-marble

DEBUGGING ANDROID AND IOS LIKE A REAL G’S WITH DWARF GUI http://www.giovanni-rocca.com/debugging-android-and-ios-like-a-real-gs-with-dwarf-gui/

Reminder: Microsoft to end support for Windows 7 in 1-year from today. Jan. 14, 2020 https://thehackernews.com/2019/01/microsoft-windows-7-support.html

2019 OSINT Guide https://blog.isecauditors.com/2016/12/guia-rapida-para-entender-marco-trabajo-de-ciberseguridad-del-NIST.html

RHSA-2019:0049: Important: Red Hat Security Advisory: systemd security update https://access.redhat.com/errata/RHSA-2019:0049

Windows: COM Desktop Broker Elevation of Privilege https://bugs.chromium.org/p/project-zero/issues/detail?id=1688

DNS Polygraph: tool designed to make easier the identification of techniques such as DNS Hijacking/Poisoning https://www.shelliscoming.com/2018/12/dns-polygraph-tool-designed-to-make.html

Múltiples vulnerabilidades en IBM Security Identity Manager Fecha de publicación: 14/01/2019 Importancia: CríticaRecursos afectados IBM Security Identity Manager desde la versión 6.0.0 hasta 6.0.0.20. https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/multiples-vulnerabilidades-ibm-security-identity-manager

Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi https://github.com/bl4de/security_whitepapers

Give Up the Ghost: A Backdoor by Another Name https://www.eff.org/deeplinks/2019/01/give-ghost-backdoor-another-name

SSH Examples, Tips & Tunnels https://hackertarget.com/ssh-examples-tunnels

La participación de Apple y Tesla en el blockchain podrían suponer el próximo hito en la criptografía https://www.seguridadapple.com/2019/01/la-participacion-de-apple-y-tesla-en-el.html

Pylocky Unlocked: Cisco Talos releases PyLocky ransomware decryptor https://blog.talosintelligence.com/2019/01/pylocky-unlocked-cisco-talos-releases.html

Metasploit Framework 5.0 released https://blog.rapid7.com/2019/01/10/metasploit-framework-5-0-released/

Bypass firewalls by abusing DNS history This script (ab)uses DNS history records. This script will search for old DNS A records and check if the server replies for that domain. It also outputs a confidence level, based on the similarity in HTML response of the possible origin server and the firewall. https://github.com/vincentcox/bypass-firewalls-by-DNS-history

H8Mail - Email OSINT And Password Breach Hunting https://amp.kitploit.com/2019/01/h8mail-email-osint-and-password-breach.html

Snorpy a Web Base Tool to Build Snort/Suricata Rules https://isc.sans.edu/diary/Snorpy+a+Web+Base+Tool+to+Build+SnortSuricata+Rules/24522