De OWASP Top10:2021 werd zopas bekendgemaakt!

Vandaag werd de nieuwe OWASP Top 10 bekendgemaakt. De OWASP top 10 is de hitlijst van de meest voorkomende en meest kwetsbare…Continue reading on Medium »
Read more...

Force Browsing bug at Facebook business plan ($500 Bounty)

Hi bug hunters! this article is about my last finding on Facebook.Continue reading on Medium »
Read more...

hacking: security in practice
My notes are publicly available on GitHub - still small, but growing. I am focusing more on quality - format, information, use of language, etc., so the process is a bit slow

submitted by /u/b4ckslash0
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
New leak of Epik data exposes company’s entire server

https://b.thumbs.redditmedia.com/ZSuDC_CsgAmcYWBI2zRlpBfK0OikWQNnzhE45v-oB4s.jpg submitted by /u/tecchigirl
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HacktoberFest: Stop Making Free Swags A Deal

https://cdn-images-1.medium.com/max/1900/1*tfc5-EpT79viaB-J3K_U7w.png
Derive the most value from it and know how to start with it.

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

Q&A With an amazing hacker
https://thexssrat.medium.com/q-a-with-an-amazing-hacker-ba30dd2fae6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Tell me a bit about yourself, what is your current position, what are your current responsibilities, what’s something interesting about…Continue reading on Medium » (https://thexssrat.medium.com/q-a-with-an-amazing-hacker-ba30dd2fae6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Pentesting Mobile Applications Going Through a Tunnel (Webview)
https://www.reddit.com/r/Pentesting/comments/py6pyh/pentesting_mobile_applications_going_through_a/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/lifesfunn (https://www.reddit.com/user/lifesfunn)
[link] (https://lifesfun101.github.io/2021/09/29/Pentesting-Mobile-Applications-Going-Through-A-Tunnel.html) [comments] (https://www.reddit.com/r/Pentesting/comments/py6pyh/pentesting_mobile_applications_going_through_a/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
50% of Servers Have Weak Security Long After Patches Are Released

Many servers remain vulnerable to high-severity flaws in Microsoft Exchange Server, VMware vCenter, Oracle WebLogic, and other popular products and services.

Dark Reading: Attacks/Breaches
Shades of SolarWinds Attack Malware Found in New 'Tomiris' Backdoor

Malware contains similarities that suggest a possible link to malware that Russia's DarkHalo group used in its massive supply chain attack, researchers say.

Dark Reading: Attacks/Breaches
Startup Beyond Identity Now Offers Passwordless Multifactor Authentication for Consumers

The announcement comes two weeks after Microsoft gave users the option to fully remove passwords from their accounts.

___________________________
@hacking_Attack
@Hacking_Video

Join Crypto Canvas and Help Test Qtum NFTs
https://medium.com/@Qtum/join-crypto-canvas-and-help-test-qtum-nfts-65edc8294b33?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

The Crypto Canvas NFT test program will run from Oct. 6 to Nov. 2, 2021. Learn to create Qtum NFTs, report bugs (if any), and win prizes.Continue reading on Medium » (https://medium.com/@Qtum/join-crypto-canvas-and-help-test-qtum-nfts-65edc8294b33?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
VoIP provider Bandwidth.com suffering DDoS attacks for 5+ days. Critical services affected including 911. Almost no media coverage.

This has been ongoing since Saturday, 9/25. The attacks are timed to correspond with busy times for the provider. They start around 9AM and taper off into the evening. At times, 911 service has been unavailable.

It's 5 days in and it isn't a blip on the national media's radar. Tech blogs have picked it up; links below. But that's about it. Bandwidth.com is a publicly traded company. You would think this would have FCC and SEC implications.

Bandwidth.com status page

There's a pretty good video over on the Lawrence Systems YouTube Channel.

Bleeping Computer has a write-up about it.

As does TechRadar.

submitted by /u/yakmulligan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video