ZERO DAILY
Hacking, AppSec, and Bug Bounty newsletter
2018-03-07 | L0pht heavy industries, Phishing the unphishable, and ComboJack malware
Wednesday, March 7
TOP STORY
-
Oral history of the L0pht, part 1 (Looking forward to good reporting from Decipher)
HACKTIVITY
-
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.com [12 upvotes] - $2,000 bounty for this report to Ubiquiti Networks by @dawgyg.
-
sql injection by GET method [12 upvotes] - no bounty for this report to Khan Academy by @securitygab.
You can see all the latest and greatest disclosures and bounties on www.hackerone.com/hacktivity
OTHER ARTICLES WE’RE READING
-
EFF posted records detailing FBI would pay Best Buy Geek Squad managers to pass along information
-
ComboJack is latest cryptojacking malware
-
Exim Off-by-one RCE: Exploiting CVE-2018-6789 with Fully Mitigations Bypassing
-
AIVD 2017 annual report says volume, complexity of cyberattacks rises
ABOUT ZERO DAILY
Zero Daily is a daily newsletter that highlights application security, bug bounty, and hacker focused topics. The content is curated with love by @luketucker and brought to you by HackerOne.
Friends don’t keep good things to themselves - forward this to your homies and co-workers. BTW, want to see who runs bug bounties?
Have a news tip / story to highlight? We’d love to hear about it. Email: zerodaily@hackerone.com
Get this email forwarded to you? Click here to subscribe to the Zero Daily
You can teach certain things, but in computer security, raw talent is almost irreplaceable.
