Security

Security search tools

Submitted by Dave Blair on Fri, 09/13/2024 - 16:49

https://www.shodan.io - Network monitoring, IoT and network device search.
https://securitytrails.com - Security Trails - Domain and historical IP data.
https://www.zoomeye.hk/ - Zoomeye - device searches
https://pulsedive.com - Pulsedive - threat intel, full DNS records check
https://en.fofa.info/ - Internet-wide search and monitoring
https://leakix.net/ - Data leak and breach search
https://dnsdumpster.com/ - DNS recon and research.
https://urlscan.io - Scan and analyze websites.

Misconceptions about Firefox's Privacy Preserving Ad Measurement

Submitted by Dave Blair on Tue, 07/16/2024 - 16:54

This is a good article by Andrew Moore about the new Firefox privacy changes which are angering a lot of people

"Mozilla's Privacy Preserving Attribution is an important step forward towards eliminating invasive tracking by AdTech companies. Unfortunately, it is being loudly contested by individuals that prefer to spread fear instead of learning about it."

https://andrewmoore.ca/blog/post/mozilla-ppa/

Cyber Security feed - news, notes, recommendations.

Submitted by Dave Blair on Wed, 03/20/2024 - 01:27

Protect your MFA tokens from abuse in MS desktop apps:
https://techcommunity.microsoft.com/t5/microsoft-entra-blog/public-preview-token-protection-for-sign-in-sessions/ba-p/3815756
- BUT...good luck if you don't have Entra P2 licences, apparently MS think basic security is not for you.

Easier configuration of additional LSA protection - https://www.petervanderwoude.nl/post/easier-configuring-additional-lsa-protection/

Entra/Azure AD killchain - https://aadinternals.com/aadkillchain/