report – ContraRisk

ContraRisk Security Podcast 0008: Old and new threats

Steve 26 Mar 2013 No Comments

» Listen or download now from the podcast page » In all the excitement and hype that inevitably surrounds the identification of new threats, it’s important not to lose sight of the menace posed by previous security vulnerabilities and malicious actors – most of whom aren’t going away any time soon. The danger they present hasn’t diminished just because new ones have… Read more »

UPnP and the communication problem

Steve 29 Jan 2013 No Comments

HD Moore of Metasploit fame publishes a blog post about Universal Plug and Play (UPnP) vulnerabilities and now the Twittersphere is burning with prognostications of doom. The blog post is based on some very interesting research by Rapid7 which does indeed make for worrying reading. But for me, the part that raises the greatest concern is the appendix. In it, Rapid7 lists previous research… Read more »