Author: Duncan

Security Vulnerabilities

Windows Password Hash Vulnerability – ADV170014

A vulnerability in Microsoft Windows allows an attacker to steal Windows NTLM (a security protocol suite that provides network authentication)

Read More
NetworkingSophos UTMTech Tips

Sophos UTM Wrong Count Of SSH Logins In Summary In Executive Reports

If you get a wrong count of ssh logins in summary in executive reports :- At some point an Accu

Read More
NetworkingSophos UTMTech Tips

Sophos UTM Policy Tester Shows Incorrect Result

The Web Protection policy tester displays an incorrect result in the following case: – A domain such as www.youtube.com is

Read More
NetworkingTech Tips

Amazon IP Addresses

Here is a complete list of IP addresses used by Amazon.  Last updated 1st November 2017. You can search this

Read More
ComputerMicrosoft System Centre Configuration ManagerTech Tips

What Is ccmsetup.exe

ccmsetup.exe is used by Microsoft System Centre Configuration Manager. You might find this as a service running on a client

Read More
Security Vulnerabilities

Vault 7 – BothanSpy and Gyrfalcon

Following on the series of leaked malware documentation from WikiLeaks, documentation relating to more tools have been released as part

Read More
Security Vulnerabilities

Oracle Security Alert Advisory – CVE-2017-10151

Oracle has released a security update bulletin to address a vulnerability in Oracle Identity Manager. A remote attacker could exploit

Read More
NewsSecurity Vulnerabilities

MitraStar DSL-100HN-T1/GPT-2541GNAC – Privilege Escalation

Models affected: MitraStar DSL-100HN-T1 and MitraStar GPT-2541GNAC (HGU) Software versions: ES_113WJY0b16 (DSL-100HN-T1) and 1.00(VNJ0)b1 (GPT-2541GNAC) Vulnerability analysis: http://jolama.es/temas/router-attack/index.php Description SSH

Read More
Security Vulnerabilities

MacSpy – The Most Sophisticated Mac Spyware Ever

MacSpy is advertised as the ‘most sophisticated Mac spyware ever’ and it’s free. The new Mac malware was created by

Read More
Security Vulnerabilities

SMB EternalBlue and DoublePulsar Exploit

The ShadowBrokers APT (Advanced Persistent Threat) group are well known for auctioning off stolen dumps of exploits, implants and tools

Read More