hacking: security in practice
Anarcho-Syndicalist Hackers 1995 Movie - Hijacking TV Stations Meme

https://b.thumbs.redditmedia.com/Vxf-bRg37ydGt_tbzNDYgvPiMSBBB9FRn5HWlhbM24g.jpg submitted by /u/holdoffhunger
[link] [comments]

hacking: security in practice
Chinese hacker, Volt Typhoon, breach US critical infrastructure in stealthy attacks

https://external-preview.redd.it/b64Hxer6ZqeRMV5NnKo7juIQNS6FoDBYTtUpEcGjL_4.jpg?width=640&crop=smart&auto=webp&s=ad508a4f44b0103b748cb994497769af8f539816 submitted by /u/DrinkMoreCodeMore
[link] [comments]

https://b.thumbs.redditmedia.com/kxzpT_lLMJuNrcLn_3hHp3NEThg_Xo4xeN7Qk_nGzJY.jpg Introducing MaccaroniC2 ( https://github.com/CalfCrusher/MaccaroniC2 ), a proof-of-concept Command and Control framework that combines the power of the AsyncSSH Python library (https://asyncssh.readthedocs.io) with the integration of PyNgrok (https://pypi.org/project/pyngrok/) wrapper for ngrok.

​

https://github.com/CalfCrusher/MaccaroniC2

This tool is designed to address a specific scenario where the victim operates an AsyncSSH server and establishes an external tunnel, eagerly awaiting commands from the attacker.

With the powerful capabilities of the AsyncSSH library, which provides an exceptional implementation of the SSHv2 protocol, this tool ensures efficient and secure communication between the attacker and the victim.

Furthermore, the integration with PyNgrok enables automatic retrieval of the tunnel’s hostname and port using the official Ngrok API, establishing a secure connection. The victim will establish an outgoing connection to Ngrok servers, eagerly awaiting the attacker’s commands.

The idea was born thinking about the comprehensive features of AsyncSSH, including integrated support for SFTP and SCP, enabling secure and efficient data exfiltration, among other functionalities.

The tool can send and execute system commands also through a SOCKS proxy: taking advantage of this capability, the attacker can further enhance the anonymity by leveraging TOR and its benefits.

For further information and usage:

https://github.com/CalfCrusher/MaccaroniC2

submitted by /u/calfcrusher_
[link] [comments]

Dark Reading: Attacks/Breaches
'Volt Typhoon' China-Backed APT Infiltrates US Critical Infrastructure Orgs

According to Microsoft and researchers, the state-sponsored threat actor could very well be setting up a contingency plan for disruptive attacks on the US in the wake of an armed conflict in the South China Sea.

Dark Reading: Attacks/Breaches
Honeywell Releases Cyber Insights to Better Identify Cybersecurity Threats and Vulnerabilities

The new software-led solution enables organizations to defend against cybersecurity threats in their operational technology (OT) environments.

Dark Reading: Attacks/Breaches
Technology Veterans James Wickett and Ken Johnson Launch DryRun Security to Bring Security to Developers

DryRun security seeks to bridge the gap between developers and security professionals by automating security analysis in code reviews before deployment.

Dark Reading: Attacks/Breaches
Appdome Launches Build-to-Test, Automated Testing Option for Protected Mobile Apps

New capability streamlines automated testing of cybersecurity and anti-fraud features in android and iOS apps in virtual and cloud testing suites.

Dark Reading: Attacks/Breaches
Netwrix Report: Enterprises Suffer More Ransomware and Other Malware Attacks Than Smaller Organizations

Attackers primarily target on-premises IT infrastructures.

Dark Reading: Attacks/Breaches
Threat Actors Compromise Barracuda Email Security Appliances

The company's ESG appliances were breached, but their other services remain unaffected by the compromise.

Hacking on Medium
Trezor T Hacked

https://cdn-images-1.medium.com/max/800/0*gXfZOcKlUq7nk7Zk.jpg
Quick text of what you need to know.

Continue reading on Medium »