Blog Updated to Include Shodan Searches and Free Security Resources

I've setup a couple experimental IFTT recipies to automatically post new Shodan searches to my blog, as well as post new Cyber Security resources as they become available.

If you notice it malfunctioning, please let me know via Twitter. This is a brand new feature, and I hope it works well.

@USNISTGOV CVE Alerts Now On @CaffSec Twitter

Thanks to the folks at NIST for providing an RSS feed of new CVEs, I have incorporated CVEs into my automated #exploitAlert feed on Twitter.

In addition to CVE content, the #exploitAlert feed provides information on new vulnerabilities/exploits found on PasteBin and similar sites.

If you're interested in how the CVE feed works, I have made the feed available on my IFTT profile.

New Research Project: Project Ackbar (It's A Trap!)

Today I'm embarking on a new long-term project.

I am seeding social media sites with unique email addresses in the hopes of catching when a database has been compromised.

Each email address is being setup through Mailinator and the inboxes are being monitored through RSS feeds using IFTT.

When one of the email addresses gets an email, or a Google alert discovers the email address published on the web, I will receive an alert so that I can review and see if the email address has been compromised.

I'll update any hits as they come in.

So far I've registered special email addresses on the following websites.  This list will be updated as more are added.

Twitter.com
Facebook.com
MySpace.com

Big Shout Out to Timber Wolfe from NeuStar, Inc. for inspiring me to start this project.  Timber was one of the presenters at TrainACE's Hacker's Breakfast event on 4/3/2013 and presented an excellent piece on Honey Pots, Honey Nets, and Honey Farms.