Hacking on Medium
CVE-2023–22809: Sudoedit Bypass — Analysis

https://cdn-images-1.medium.com/max/1200/0*gIkSTOuBS7bi1aPf.png
Introduction

Continue reading on Medium »

Hacking on Medium
GraphQL API Hacking!

https://cdn-images-1.medium.com/max/1102/1*eHtFnUpSoDDshxzswNaYfQ.png
Usually graphql endpoint are located at www.example.com/graphl.

Continue reading on Medium »

Hacking on Medium
This is How It Starts

https://cdn-images-1.medium.com/max/1024/1*ph0mryJgHA9VbH2pRWPtlQ.jpeg
This is how it starts.

Continue reading on Medium »

IoT devices and Linux-based systems targeted by OpenSSH trojan campaign
https://www.reddit.com/r/redteamsec/comments/14g7qpc/iot_devices_and_linuxbased_systems_targeted_by/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/IoTTrojan) [comments] (https://www.reddit.com/r/redteamsec/comments/14g7qpc/iot_devices_and_linuxbased_systems_targeted_by/)

Ttryhackme vulnnet EndGame WriteUp
https://medium.com/@leomsec/ttryhackme-vulnnet-endgame-writeup-ded34b034e5e?source=rss------bug_bounty-5

Initial enumerationContinue reading on Medium » (https://medium.com/@leomsec/ttryhackme-vulnnet-endgame-writeup-ded34b034e5e?source=rss------bug_bounty-5)

/r/Pentesting is fucking back
https://www.reddit.com/r/Pentesting/comments/14g7brx/rpentesting_is_fucking_back/

<!-- SC_OFF -->With some new goddamn features. <!-- SC_ON --> submitted by /u/betterdeadthanreddit (https://www.reddit.com/user/betterdeadthanreddit)
[link] (https://www.reddit.com/r/Pentesting/comments/14g7brx/rpentesting_is_fucking_back/) [comments] (https://www.reddit.com/r/Pentesting/comments/14g7brx/rpentesting_is_fucking_back/)

How I found a SQL Injection bug in using my cellphone
https://medium.com/@0xnaeem/how-i-found-a-sql-injection-bug-in-using-my-cellphone-5b5193fdc314?source=rss------bug_bounty-5

Continue reading on Medium » (https://medium.com/@0xnaeem/how-i-found-a-sql-injection-bug-in-using-my-cellphone-5b5193fdc314?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Even With No Recession, Smaller Firms Aim to Consolidate Security Tools

Small and midsized companies work to jettison some security tools to simplify operations and reduce cost, even as any economic downturn continues to remain at bay.

Dark Reading: Attacks/Breaches
Azure AD 'Log in With Microsoft' Authentication Bypass Affects Thousands

The "nOAuth" attack allows cross-platform spoofing and full account takeovers, and enterprises need to remediate the issue immediately, researchers warn.

Dark Reading: Attacks/Breaches
5 Steps for Minimizing Dark Data Risk

Dark data may be your most elusive asset, but it can also be your most costly if you don't protect it.

Dark Reading: Attacks/Breaches
Patch Now: Cisco AnyConnect Bug Exploit Released in the Wild

A ready-made, low-complexity path to pwning the popular enterprise VPN clients for remote workers is now circulating in the wild.

Dark Reading: Attacks/Breaches
6 Attack Surfaces You Must Protect

More connectivity means more potential ways into your enterprise, so securing every main attack surface is imperative.

Dark Reading: Attacks/Breaches
USB Drives Spread Spyware as China's Mustang Panda APT Goes Global

Camaro Dragon (Mustang Panda) is spreading a malware variant of WispRider quickly across the globe even through air gaps, often unbeknown to users.

Dark Reading: Attacks/Breaches
Lessons From a Pen Tester: 3 Steps to Stay Safer

From hardening Windows systems to adding access control and segmenting the network, there are steps organizations can take to better secure corporate data.

Dark Reading: Attacks/Breaches
2 More Apple Zero-Days Exploited in Ongoing iOS Spy Campaign

The zero-day security bugs are being used to deploy the sophisticated but "odd" TriangleDB spying implant on targeted iOS devices.