SysAdmin 24x7

Hackers Using Zero-Width Spaces to Bypass MS Office 365 Protection https://thehackernews.com/2019/01/phishing-zero-width-spaces.html

Unicorn v3.6.4 released: PowerShell downgrade attack https://securityonline.info/unicorn-powershell-downgrade-attack

wpscan v3.4.3 releases: black box WordPress vulnerability scanner https://securityonline.info/wpscan-black-box-wordpress-vulnerability-scanner

Android Security Bulletin—January 2019 https://source.android.com/security/bulletin/2019-01-01.html

NASA internal app leaked employee emails, project names. Leak occurred via Jira installation. Server leaked data for three weeks, possibly more. https://www.zdnet.com/article/nasa-internal-app-leaked-employee-emails-project-names

CISCO addresses DoS bugs in CISCO ESA products Cisco addressed two DoS vulnerabilities in CISCO ESA products that can be exploited by remote unauthenticated attacker. https://securityaffairs.co/wordpress/79737/security/cisco-esa-dos-flaw.html

Divulgan herramienta para programar campañas de phishing capaz de evadir el 2FA https://www.welivesecurity.com/la-es/2019/01/11/divulgan-herramienta-programar-campanas-phishing-logra-evadir-doble-factor-autenticacion/

New WhatsApp bug may have been discovered, exposes message history in plain text https://piunikaweb.com/2019/01/11/new-whatsapp-bug-may-have-been-discovered-exposes-message-history-in-plain-text/

DNS-over-TLS https://developers.google.com/speed/public-dns/docs/dns-over-tls

📃"Graphite, una alternativa a Google Docs descentralizada, cifrada y basada en blockchain" https://www.genbeta.com/ofimatica/graphite-alternativa-a-google-docs-descentralizada-cifrada-basada-blockchain #NoTodoEsGoogle

DNS Infrastructure Hijacking Campaign #NCCIC #cyber #cybersecurity #infosec https://www.us-cert.gov/ncas/current-activity/2019/01/10/DNS-Infrastructure-Hijacking-Campaign

Your Old Tweets Give Away More Location Data Than You Think https://www.wired.com/story/twitter-location-data-gps-privacy

Iranian hackers suspected in worldwide DNS hijacking campaign Mysterious group hijacks DNS records to reshape and hijack a company's internal traffic to steal login credentials. https://www.zdnet.com/article/iranian-hackers-suspected-in-worldwide-dns-hijacking-campaign

Email Security Appliance de Cisco Fecha de publicación: 10/01/2019 Importancia: 5 - Crítica Recursos afectados:  Cisco AsyncOS Software para ESA Major Release Versiones anteriores a 9.0, Versión 9.x y 10.x Versión  11.0.x y anteriores. Versión  11.1.x y anteriores. Descripción:  Cisco ha publicado dos vulnerabilidades que afectan a su producto Email Security Appliance (ESA), una de severidad crítica y otra alta. La explotación exitosa de alguna de estas vulnerabilidades puede derivar en una denegación de servicio (Dos). https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/denegacion-servicio-email-security-appliance-cisco

Múltiples vulnerabilidades en productos de Intel Fecha de publicación: 09/01/2019 Importancia: 4 - Alta https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/multiples-vulnerabilidades-productos-intel-6

New year, new GitHub: Announcing unlimited free private repos and unified Enterprise offering https://blog.github.com/2019-01-07-new-year-new-github

ATSCAN SCANNER v14.0.6 released: Advanced Search & Mass Exploit Scanner https://securityonline.info/atscan-scanner-advanced-search-mass-exploit-scanner

Ghidra: herramienta de ingeniería inversa de la NSA será Open Source https://tecnonucleous.com/2019/01/06/ghidra-herramienta-de-ingenieria-inversa-de-la-nsa

DSInternals PowerShell Module and Framework v3.2 Releases https://securityonline.info/dsinternals-powershell/

#DFIR: Visualización de líneas de tiempo con Gource https://unminioncurioso.blogspot.com/2019/01/dfir-visualizacion-de-lineas-de-tiempo.html