Dark Reading: Attacks/Breaches
Payment Card-Skimming Campaign Now Targeting Websites in North America

"Silent Skimmer" is a technically complex campaign that has successfully targeted online businesses in the Asia Pacific region for over a year.

Dark Reading: Attacks/Breaches
Microsoft Azure Data Leak Exposes Dangers of File-Sharing Links

Shared Access Signature (SAS) link exposed a storage bucket with 38TB of private data, including passwords, Teams messages, and the backups of two Microsoft AI research employees' workstations.

Dark Reading: Attacks/Breaches
Security Conferences Keep Us Honest

Conferences are where vendors and security researchers meet face to face to address problems and discuss solutions — in public.

hacking: security in practice
what percentage of white hat hackers, ethical hackers, penetration testers, or red teamers are freelance?

So I'm thinking a freelance ethical hacking career would be perfect. I think I would strongly prefer it because I can somewhat manage by own business and clients and I don't have to stick with one company for ten whole years. I think freelance is also good for having multiple careers.

I also would be willing to do entry level help desk stuff via freelance, but I'm wondering if I even need to. Maybe I can just work on ethical hacking skills and go.

Do you think that this is valid? I'm currently learning Nmap on HTB Academy and I'm thinking of spending a year or two working on my skills to get good at hacking on two or three platforms and earn a few pentesting certs just because I think it would be a much better way to spend my time than for example a masters degree.

Please be honest. I am already CCNA and A+ certified.

Please don't give me an answer about how to get good at hacking. What I'm asking is how much market is there for freelance white hats?

submitted by /u/notburneddown
[link] [comments]

Hacking on Medium
Security Engineer role in manageing Tools

Configuration and Fine-tuning of Security Tools

Continue reading on Medium »

Hacking on Medium
Password Reset Token Disclosure[Chilexpress]

https://cdn-images-1.medium.com/max/1231/1*3YZ7_HoN-HD8Qc5qQIF2GA.png
This must be one of the most incredible vulnerabilities I have come across so far. Mainly because Chilexpress is a large company that…

Continue reading on Hacking/Security »

OTP Bypass leads to Account Creation
https://medium.com/@b.jaga17122001/otp-bypass-leads-to-account-creation-2102d3c13c53?source=rss------bug_bounty-5

Hello everyone 🤠 !!! Hope all are good and fine. Today I’m back with my fourth write-up which is OTP bypass (or) How I managed to hack…Continue reading on Medium » (https://medium.com/@b.jaga17122001/otp-bypass-leads-to-account-creation-2102d3c13c53?source=rss------bug_bounty-5)

Red team in 30 days?
https://www.reddit.com/r/redteamsec/comments/16mfl60/red_team_in_30_days/

<!-- SC_OFF -->Hackers, Can you please suggest some red team activities that can be done in a 30 days project? For now, I am thinking of attacking external IT infra and some simulations like Data Exfil.. <!-- SC_ON --> submitted by /u/Fantastic_Clock_5401 (https://www.reddit.com/user/Fantastic_Clock_5401)
[link] (https://www.reddit.com/r/redteamsec/comments/16mfl60/red_team_in_30_days/) [comments] (https://www.reddit.com/r/redteamsec/comments/16mfl60/red_team_in_30_days/)

OTP Bypass leads to Account Creation

Hello everyone 🤠 !!! Hope all are good and fine. Today I’m back with my fourth write-up which is OTP bypass (or) How I managed to hack…Continue reading on Medium »
Read more...

Useful Websites for Pentesters & Hackers

Hey! welcome to BBX today’s post is the collection of the free tool that can be very useful for hackers and some is for normal person also…Continue reading on Medium »
Read more...

hacking: security in practice
Chinese hackers have unleashed a never-before-seen Linux backdoor

https://external-preview.redd.it/FI_sH1jhbh1gGPSo3hC5G5o4tLdoLCjxwoA-tZCp-QY.jpg?width=640&crop=smart&auto=webp&s=b11ad235dc80a8fae6e7b1c0fd9ff403c1ccb351 submitted by /u/CodePerfect
[link] [comments]

hacking: security in practice
Name and Shame time

A few months ago, I found cybersecurity vulnerability for Caltex. I found their whole rewards system vulnerability scanner and source code (basically confidential data for all you normies). I went through their bug bounty program, I spent hours on the phone navigating my way through support lines until I reached an IT guy, they said they will fix it and I'll get my bounty. (I just wanted a letter of recognition)

They eventually fixed the vulnerability and I waited two weeks after they fixed it, I called up and I was told word for word "Fuck off I don't care about the bug bounty program, go kill yourself"

submitted by /u/BamBaLambJam
[link] [comments]

Useful Websites for Pentesters & Hackers
https://bytebusterx.medium.com/useful-websites-for-pentesters-hackers-3d8edfb6dafc?source=rss------bug_bounty-5

Hey! welcome to BBX today’s post is the collection of the free tool that can be very useful for hackers and some is for normal person also…Continue reading on Medium » (https://bytebusterx.medium.com/useful-websites-for-pentesters-hackers-3d8edfb6dafc?source=rss------bug_bounty-5)

Top 5 Techniques Hackers Use to hack Social Media Accounts
https://medium.com/@snehamdas102/top-5-techniques-hackers-use-to-hack-social-media-accounts-821d240bc98?source=rss------bug_bounty-5