Hacking on Medium
CVE-2022–41544 — Unauthenticated RCE in Get-Simple

https://cdn-images-1.medium.com/max/1080/0*wZpiorGrnoWCgih6.png
Introduction

Continue reading on Medium »

Hacking on Medium
Protecting Wi-Fi: Defending Against Evil Twin Attacks and Password Theft

https://cdn-images-1.medium.com/max/2600/0*rkLNfjMqmMKHfZaB
With the increasing reliance on Wi-Fi networks for internet connectivity, securing our wireless connections has become more critical than…

Continue reading on Medium »

CVE 2022–33082 Practical Exploitation
https://cyberqueenmeg.medium.com/cve-2022-33082-practical-exploitation-c78b0cec69aa?source=rss------bug_bounty-5

I have developed the first known practical exploit for CVE 2022–33082, “an issue in the AST parser (ast/compile.go) of Open Policy Agent…Continue reading on Medium » (https://cyberqueenmeg.medium.com/cve-2022-33082-practical-exploitation-c78b0cec69aa?source=rss------bug_bounty-5)

From Enumeration to Domain Admin in One Repository
https://www.reddit.com/r/redteamsec/comments/14gl55p/from_enumeration_to_domain_admin_in_one_repository/


[link] (https://github.com/RoseSecurity/Red-Teaming-TTPs) [comments] (https://www.reddit.com/r/redteamsec/comments/14gl55p/from_enumeration_to_domain_admin_in_one_repository/)

Dark Reading: Attacks/Breaches
Job Seekers, Look Out for Job Scams

Scammers are setting out lures for people looking for work. If a position sounds too good to be true, it probably is.

Dark Reading: Attacks/Breaches
LockBit Developing Ransomware for Apple M1 Chips, Embedded Systems

Under construction: The world's leading ransomware gang is workshopping ransomware for less obvious systems beyond Windows environments. Experts weigh in on how worried we should be.

Dark Reading: Attacks/Breaches
Growing SaaS Usage Means Larger Attack Surface

Software-as-a-service has its benefits, but abandoned SaaS integrations and idle data sharing introduce risk to the enterprise.

Dark Reading: Attacks/Breaches
CISA, FBI Offer $10M for Cl0p Ransomware Gang Information

The announcement was posted on Twitter via the Rewards for Justice Twitter account, alongside encrypted messaging system options for anyone to get into contact should they have viable information.

Dark Reading: Attacks/Breaches
Airgap Networks Acquires NetSpyGlass

Acquisition of NetSpyGlass extends Airgap Zero Trust Firewall™ innovation leadership with advanced network and asset intelligence for business-critical networks.

Dark Reading: Attacks/Breaches
Former Duo Security Co-Founder Jon Oberheide Joins DNSFilter Board of Directors

Cybersecurity expert and proven entrepreneur to help protective DNS leader drive vision and scale through hypergrowth.

Dark Reading: Attacks/Breaches
Sumsub Launches Advanced Deepfakes Detector

Full-cycle verification platform enhances its facial biometrics verification with innovative deepfake detection technology; shares new 2023 identity fraud trends.

Dark Reading: Attacks/Breaches
Tanium Platform Advances Threat Identification Capabilities and Enhances Endpoint Reach

Award-winning XEM platform introduces advanced SBOM capabilities, expanded ARM support, and additional Risk & Compliance improvements.

https://b.thumbs.redditmedia.com/3Qx2ML6CCtw9AW1FZ0gsmpB1MM1alwJNleGv6tlEtGA.jpg submitted by /u/lcziila
[link] [comments]

hacking: security in practice
SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool

submitted by /u/DrinkMoreCodeMore
[link] [comments]