💾 #Intel's Latest Wi-Fi Driver Boosts #Windows 11 and 10 Performance

https://undercodenews.com/intels-latest-wi-fi-driver-boosts-windows-11-and-10-performance/

@Undercode_News

🔵 Bun Runtime Prototype Pollution Vulnerability (#CVE-2024-XXXX)

https://dailycve.com/bun-runtime-prototype-pollution-vulnerability-cve-2024-xxxx/

@Daily_CVE

🦑Active Directory Hardening Checklist

🔧 #AI Startups Poised to Revolutionize the 2 Trillion US Services Industry

https://undercodenews.com/ai-startups-poised-to-revolutionize-the-2-trillion-us-services-industry/

@Undercode_News

#Ericsson Wins Preliminary Victory Against Motorola in 5G Patent Dispute

https://undercodenews.com/ericsson-wins-preliminary-victory-against-motorola-in-5g-patent-dispute/

@Undercode_News

🦑How to Spot a Pentester

🛡️ A Unified Security Platform: The Key to a Stronger Cyber Defense

https://undercodenews.com/a-unified-security-platform-the-key-to-a-stronger-cyber-defense/

@Undercode_News

📱 Build Go Apps in Minutes with Project IDX

https://undercodenews.com/build-go-apps-in-minutes-with-project-idx/

@Undercode_News

🦑Top Password Reset Functionality Bugs
🛡️
Testing password reset flows is critical to ensuring account security. Here’s a checklist of common vulnerabilities to watch out for:

No rate limiting

Token leakage

Email manipulation

Self-XSS risks

Brute force reset attempts

Each of these bugs can lead to serious account takeovers (critical vulnerability) if overlooked. What other password reset vulnerabilities have you come across in your tests?

Ref: Amit Kumar
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🛒 E-Commerce Giant Shifts Gears: #Amazon Reaches Major Milestone with 20,000 Rivian Electric Delivery Vans

https://undercodenews.com/e-commerce-giant-shifts-gears-amazon-reaches-major-milestone-with-20000-rivian-electric-delivery-vans/

@Undercode_News

🦑This one command is enough to knock down your entire wifi.

-S : Send syn packets
--flood : Sent packets as fast as possible

Simple DOS attack, works really well on non-enterprise networks. Implement firewall/filter rules in your router to avoid these attacks.

However in some cases it can increase resources usage on router that could still lead to crashes.

Ref: Steven Lim
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

#Ransomware Group funksec Targets robertfinaleeditions

https://undercodenews.com/ransomware-group-funksec-targets-robertfinaleeditions/

@Undercode_News

🔐 Nathan American Academy Falls Victim to funksec #Ransomware Attack

https://undercodenews.com/nathan-american-academy-falls-victim-to-funksec-ransomware-attack/

@Undercode_News

⚡️ New #Ransomware Attack: FunkSec Targets Sea Isle Realty

https://undercodenews.com/new-ransomware-attack-funksec-targets-sea-isle-realty/

@Undercode_News

Killsec #Ransomware Targets Verosa LLC

https://undercodenews.com/killsec-ransomware-targets-verosa-llc/

@Undercode_News

🔋 Grammarly Acquires Coda to Power the Future of Productivity

https://undercodenews.com/grammarly-acquires-coda-to-power-the-future-of-productivity/

@Undercode_News

🦑Top Shodan Dorks for Finding Sensitive IoT Data 🌐

Are you testing IoT devices and systems for vulnerabilities? Shodan, the search engine for internet-connected devices, can reveal critical data with the right queries.

This cheat sheet contains useful Shodan dorks to identify exposed services, misconfigurations, and unsecured devices, such as: ✅ Open ports: 23 (Telnet), 21 (FTP), 3306 (MySQL)
✅ Exposed services: PostgreSQL, MongoDB, Apache, Jenkins, MikroTik
✅ Sensitive information: "MongoDB Server Information," "200 OK" responses, and certificate details

Some highlights include:

Finding unprotected remote desktops (port:3389)

Identifying insecure databases (port:27017, MongoDB authentication disabled)

Locating industrial devices and firmware (port:5006,5007 Mitsubishi)


Why does this matter?
IoT devices are often overlooked and can serve as easy targets for attackers if not properly secured. By searching for exposed ports and services, security researchers can help organizations address these risks proactively.

📢 A friendly reminder: Use this knowledge responsibly. Only test systems you have permission to access!

Ref: AMIT KUMARAMIT KUMAR
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

⚠️ #Ransomware Alert: Lynx Targets Smith Tank & Steel

https://undercodenews.com/ransomware-alert-lynx-targets-smith-tank-steel/

@Undercode_News

🔋 #Ransomware on the Rise: Moneymessage Targets National Atomic Energy Commission

https://undercodenews.com/ransomware-on-the-rise-moneymessage-targets-national-atomic-energy-commission/

@Undercode_News