I have developed the first known practical exploit for CVE 2022–33082, “an issue in the AST parser (ast/compile.go) of Open Policy Agent…Continue reading on Medium » (https://cyberqueenmeg.medium.com/cve-2022-33082-practical-exploitation-c78b0cec69aa?source=rss------bug_bounty-5)

From Enumeration to Domain Admin in One Repository
https://www.reddit.com/r/redteamsec/comments/14gl55p/from_enumeration_to_domain_admin_in_one_repository/


[link] (https://github.com/RoseSecurity/Red-Teaming-TTPs) [comments] (https://www.reddit.com/r/redteamsec/comments/14gl55p/from_enumeration_to_domain_admin_in_one_repository/)

Dark Reading: Attacks/Breaches
Job Seekers, Look Out for Job Scams

Scammers are setting out lures for people looking for work. If a position sounds too good to be true, it probably is.

Dark Reading: Attacks/Breaches
LockBit Developing Ransomware for Apple M1 Chips, Embedded Systems

Under construction: The world's leading ransomware gang is workshopping ransomware for less obvious systems beyond Windows environments. Experts weigh in on how worried we should be.

Dark Reading: Attacks/Breaches
Growing SaaS Usage Means Larger Attack Surface

Software-as-a-service has its benefits, but abandoned SaaS integrations and idle data sharing introduce risk to the enterprise.

Dark Reading: Attacks/Breaches
CISA, FBI Offer $10M for Cl0p Ransomware Gang Information

The announcement was posted on Twitter via the Rewards for Justice Twitter account, alongside encrypted messaging system options for anyone to get into contact should they have viable information.

Dark Reading: Attacks/Breaches
Airgap Networks Acquires NetSpyGlass

Acquisition of NetSpyGlass extends Airgap Zero Trust Firewall™ innovation leadership with advanced network and asset intelligence for business-critical networks.

Dark Reading: Attacks/Breaches
Former Duo Security Co-Founder Jon Oberheide Joins DNSFilter Board of Directors

Cybersecurity expert and proven entrepreneur to help protective DNS leader drive vision and scale through hypergrowth.

Dark Reading: Attacks/Breaches
Sumsub Launches Advanced Deepfakes Detector

Full-cycle verification platform enhances its facial biometrics verification with innovative deepfake detection technology; shares new 2023 identity fraud trends.

Dark Reading: Attacks/Breaches
Tanium Platform Advances Threat Identification Capabilities and Enhances Endpoint Reach

Award-winning XEM platform introduces advanced SBOM capabilities, expanded ARM support, and additional Risk & Compliance improvements.

https://b.thumbs.redditmedia.com/3Qx2ML6CCtw9AW1FZ0gsmpB1MM1alwJNleGv6tlEtGA.jpg submitted by /u/lcziila
[link] [comments]

hacking: security in practice
SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool

submitted by /u/DrinkMoreCodeMore
[link] [comments]

hacking: security in practice
Windows SAM file

Hi,

I am experimenting with the Windows SAM file. Is there any way to recreate the SAM file without passwords? Let's say I have a SAM file with login details in it, so is there any way to recreate the SAM file without including the passwords?

Alternatively, if I take the SAM file from another machine where the user's passwords is not set, and I replace the SAM file on another machine, will it work? Will it cause any issues because of the different usernames?

submitted by /u/shashankx86
[link] [comments]