August 1
Las Vegas, NV
Senior Consultant, Mark Manning, will cover common problems with OSINT campaigns, possible solutions to address them, and help push the next generation of intelligence tools into the infosec/hacker community. The talk will give an indepth look at what professional intelligence agencies have at their disposal, and contrast to what a F/OSS solution could similarly offer.
| Upcoming Events | » |
| Past Events | » |
| News and Announcements | » |
-
With the often-hurried pace of life today, more Australians are using contactless payments to make small purchases quickly. But the tap-and-go trend has security experts warning of a marked increase in mobile malware intended to capture your cash.
-
More and more credit cards and phone apps use near field communication technology to let you make quick payments for purchases. The trend has prompted a lot of questions about security. Here's a look behind the hype.
-
A security conference took place this weekend where local hackers offered up some helpful tips to keep your information safe.
-
ZTE has partnered up with Intrepidus Group to make your personal data safer.
-
CTO, Jeremy Allen, explains why Office seems unlikely to add much beyond what users already have, through apps.
-
The researchers who developed the application said transit systems in U.S. cities could be vulnerable
-
AltSec claimed they got them from a FBI agent's laptop. David Schuetz proved they lied.
-
Thanks to some stellar sleuthing by computer security consultant, David Schuetz, the source of the Apple device IDs leaked to the internet by AntiSec last week has been traced to an application developer called Blue Toad.
-
On Monday, security researcher and self-identified "iOS hacker" David Schuetz published an article outlining how he pinpointed BlueToad as the true origin of the AntiSec list.
-
Intrepidus Group researcher David Schuetz tells NBC News how he figured out the source of the stolen Apple device IDs.
-
NCC Group plc, the international, independent provider of Escrow and Assurance Services, has acquired US-based Intrepidus Group, Inc. for a maximum consideration of $11.0m in cash.
-
PC Magazine quoted Senior Consultant Max Sobell of Intrepidus Group on the new Cloud-Based Wallet from Google and its security implications.
-
Intrepidus Group, a leading provider of information security consulting services, today announced the successful spin-off of PhishMe, Inc., a leading provider of anti-phishing training. The culmination of over 10 years of social engineering assessments, Intrepidus Group launched PhishMe in 2008 and during the incubation period helped PhishMe establish itself as an industry leader and grow its customer base to over 3 million users trained.
-
Analyst Wendy Nather of 451 Research, a leading syndicated research, advisory, and professional services firm, recently covered the Intrepidus Group in a market insight report.
-
Zach Lanier and Ben Nell of Intrepidus Group were the ones who found the weak spot. They included it in their Blade Runner-themed presentation at the Infiltrate security conference last week in Miami Beach, FL.
-
Researchers Zach Lenier and Ben Nell of Intrepidus Group uncovered a vulnerability in the PlayBook's Bridge application that leaves the authentication token for the Bridge application somewhere anyone could dig it up.
-
Researchers Zach Lanier and Ben Nell of Intrepidus Group were able to locate and grab the authentication token sent between the two devices during Bridge connections and, as an unprivileged user, connect to the PlayBook and access the user's email and other sensitive information.
-
Security researchers at the Intrepidus Group have found a way to listen in on the connection between the BlackBerry PlayBook tablet and a BlackBerry handset, a significant weakness that exposes corporate e-mail to malicious snoops.
-
Zach Lanier, principal consultant at Intrepidus Group, agrees that security is sometimes left aside in the rush to gain a competitive advantage. He says developers are making the same mistakes they made in the world of PCs a decade ago.
-
"On a laptop, you are almost certainly dealing with one of the few common operating systems, with mobile devices, we can have multiple-hour conversations about each platform," says, Jeremy Allen CTO of the Intrepidus Group.
-
The Intrepidus Group's Mobile Security research is discussed.
-
At the Black Hat security conference, David Schuetz, senior consultant at Intrepidus Group, provided a detailed overview of Apple's MDM and its potential security implications. He also released a proof of concept to tool to help other examine Apple's approach to MDM.
-
RSA's silence probably makes the situation appear worse than it is, said Jeremy Allen, principal consultant with the Intrepidus Group.
-
'Whaling' is a growing security threat that uses personalized phishing techniques to get your most sensitive data and access to your key networks.Rohyt Belani, CEO of Intrepidus Group quoted.
-
Aaron Higbee, CTO and co-founder of mobile security firm Intrepidus Group, said that his company can confirm that the files store historical location data.
-
"In terms of what the CAs do, it seems like it's a bit of the old west," Mike Zusman a senior consultant at security firm Intrepidus Group said.
-
Attackers wouldn't leave a certificate sitting on the Internet so that anyone could locate it, but instead "would use it in very targeted, specific attacks against one user or a subset of users," says Mike Zusman managing principal consultant at Intrepidus Group.
-
RSA disclosed last month that it had come under an "extremely sophisticated attack," and that some information concerning the tokens has been taken by unknown attackers. Intrepidus Group's David Schuetz quoted.
-
"The Linux kernel might be updated, but there is still a window in which it has to be pushed into the Android tree, then pushed into a OEM's build ... then pushed into the carrier's queue to be updated," Intrepidus Group's Zach Lanier says.
-
"These organizations act as cornerstones of security and trust on the Internet, but it seems like they're not doing basic due diligence that other organizations are expect to do, like the banks," says Mike Zusman, managing consultant at the Intrepidus Group.
-
"Based on our current understanding there is no reason to suspect the core security features of the SecurID have been significantly compromised," says Jeremy Allen, principal consultant at Intrepidus Group.
-
"The worst case scenario is if hackers found any documentation showing an inherent weakness in the algorithm that would allow them to generate valid pass codes for hardware and software tokens," said Jeremy Allen, principal consultant with Intrepidus.
-
What's the worst that can happen from the theft by unknown attackers of RSA's SecurID two-factor authentication technology? There were four kinds of possible attack scenarios, according to David Schuetz of the Intrepidus Group.
-
"This is absolutely a problem - it is not timely enough," says Zach Lanier, a security consultant with the mobile-security services firm Intrepidus Group.
-
Intrepidus Group CEO Rohyt Belani and Security Consultant Zach Lanier teach us to beware of malicious smartphone apps that steal personal data.
-
In the rush to satisfy smart phone users hungry for new apps, the same mistakes that were made around 1999-2000 in the PC world are being repeated- Intrepidus Group researchers Zach Lanier and Mike Zusman quoted
-
OWASP, Veracode, others to pinpoint top mobile threats, best practices for writing more secure mobile apps. Intrepidus Group's Mike Zusman quoted in this article.
-
"Users are often conditioned to simply scroll through the agreements before downloading an app, which presents a problem," says Zach Lanier, a senior consultant for Intrepidus Group, a New York -based tech security firm.
-
Intrepidus Group's David Schuetz and a panel of hacking professionals formed a panel to teach password security at ShmooCon in Washington, DC.
-
Smartphone security has been a major focus at ShmooCon in the last couple years, with talks about flaws in BlackBerry and iPhone devices. This year, Jon Oberheide and Intrepidus Group's Zach Lanier targeted all their firepower on the Android.
-
Apple's decision to disable their jailbreak API sparked a new round of debate over jailbreaking, but without shifting the binary terms in which the debate has been framed. John Cox, from Network World, went into more details about jailbreaking and the enterprise with Intrepidus Group's Jeremy Allen.
-
"Ultimately, a business has a right to protect its proprietary and sensitive information, even if that information resides on a personal device belonging to the end user," explained Intrepidus Group's Jeremy Allen in a recent blog post about securing various mobile platforms.
-
Six months after introducing the feature, Apple has disabled its inbuilt jailbreak detection API inside its iOS operating system and removed the feature from iOS. Intrepidus Group's Jeremy Allen quoted.
-
"Whatever [Apple] adds [in the OS] to detect the jailbreak, if it is to be queried from the iOS kernel, it must be accessible and have the ability to be changed," security consultant Jeremy Allen told Cox. "Meaning, if it is going to be a useful detection method it can also be circumvented. It is a fairly intractable problem to solve 100%."
-
"It may be feasible to detect jailbreaks of a specific version or type, but they will still be trapped in the cat and mouse game they play with jailbreakers," says Jeremy Allen, principal consultant with Intrepidus Group.
-
Intrepidus Group researchers Zach Lanier and Mike Zusman are quoted and their presentation "What's old is new again" is discussed
-
Jon Oberheide and Zach Lanier, two security researchers take to the stage at the Intel Security Conference to discuss a new flaw in the Android operating system that allows applications to silently download additional apps.
-
Jon Oberheide and Intrepidus Group's Zach Lanier have disclosed bugs in Google's Android mobile operating system that allow attackers to surreptitiously install malware on users' handsets.
-
In a talk tomorrow at an Intel security conference in Hillsboro, Oregon, security researchers Jon Oberheide and Zach Lanier plan to discuss a new bug they've found in Google's Android operating system.
-
"A lot of this is Web application problems we've seen for years," Zusman said. "But not all of it; some are device issues." Zach Lanier and Mike Zusman featured in this article by Dennis Fisher.
-
Mike Zusman and Zach Lanier of New York-based security consultancy Intrepidus Group on the growing threat posed by poorly coded mobile applications.
-
"It's a lot of the same overarching kind of attack classes and vulnerabilities, just in a smaller form factor." Zach Lanier and Mike Zusman featured by SearchSecurity.com
-
Mobile application security flaws a repeat of past...according to application security experts Mike Zusman and Zach Lanier of New York-based security consultancy Intrepidus Group.
-
Intrepidus Group's CTO Aaron Higbee is interviewed about Open WiFi Vulnerabilities.
-
Zach Lanier of the Intrepidus Group interviewed about Hacker Culture.
-
Intrepidus Group's Rohyt Belani quoted in this facinating article.
-
The Federal Circle recognizes that a major milestone has been reached in the continued quest to educate the world with PhishMe.
-
Intrepidus Group's CTO Aaron Higbee quoted by ABC News
-
Intrepidus Group CEO Rohyt Belani quoted saying, "The FFIEC needs to look at phishing as a human issue."
-
Gawker Reports List of Compromised Owners Includes A-Listers in Finance, Politics, Media. Intrepidus Group co-founder Aaron Higbee quoted.
-
The Intrepidus Group's Rohyt Belani quoted about Data Loss Prevention (DLP).
-
June 17, 2pm Eastern
-
Mandiant Co-Founder to Lead Sales for Intrepidus Group's Security Consulting Practice and PhishMe Software Solutions
-
Intrepidus Group's Mike Zusman quoted. "Some say these SSL attacks are just theoretical," said Zusman. "But maybe that means your controls are only theoretical, as well."
-
Palm WebOS hacked via SMS Messages
-
Researchers hack into Palm WebOS with text messages
-
Kaspersky's Threat Post features The Intrepidus Group's latest finds in handset security.
-
The Intrepidus Group's Aaron Higbee and Rajendra Umadas interviewed by CNBC's Jim Goldman about the vulnerabilities of Palm's WebOS
-
Security Twits lunch meetup -- Friday, 02/05 @ 12 PM at Stone's Throw (in the Marriott) -- don't stick @quine with the bill this time :)
-
-
"[SSL] is getting pummeled at the BlackHat and Defcon security conferences this week"
-
Intrepidus Group and BrandProtect partner to offer holistic anti-phishing solution
BrandProtect will offer PhishMe to its customer base to mitigate the risk of spear phishing against their employees Read">http://newsblaze.com/story/2009041405330900031.pnw/topstory.html">Read More
-
Intrepidus Group CEO appointed to GTRA's Industry Advisory Board
Rohyt Belani will advise key government information security executives on the latest threats and mitigation strategies
-
Government computers under attack - SC Magazine
CEO, Rohyt Belani, quoted in SC Magazine ">http://www.scmagazineus.com/Government-computers-under-attack/article/127464/"> article
-
MSNBC: Intrepidus Secures New Accolades in the White-Hot Market of Cyber Security
PhishMe Wins Government Technology Research Alliance "Best Of" 2008 Tech Award for "Best Boardroom Meeting".
-
More Than 60,000 Employees Have Been Trained Using PhishMe
Ex-eBay Security Guru, Robert Hansen (aka RSnake) Joins Intrepidus Group's Technical">http://www.newswiretoday.com/news/44109/">Technical Advisory Board for PhishMe.
-
InformationWeek cites Intrepidus Group's research in school web spying case
-
It's Phishing Season; Beware These Scams
-
Intrepidus Group's Max Sobell will be covering several current and proposed NFC implementations with case studies including attacks and mitigations, as well as the hardware basics behind NFC to better help developers understand the inherent strengths and limitations of NFC.
