Dark Reading: Attacks/Breaches
8 Tips To Keep in Mind for Ransomware Defense

Ransomware is everywhere, including the nightly news. Most people know what it is, but how do ransomware attackers get in, and how can we defend against them?

Dark Reading: Attacks/Breaches
MacOS Zero-Day Used in Watering-Hole Attacks

Attackers targeted Chinese pro-democracy groups using a vulnerability fixed in September along with a second vulnerability fixed early in the year, Google says.

Dark Reading: Attacks/Breaches
The Troubling Rise of Internet Access Brokers

Criminal groups are ramping up use of IABs to get access to networks without having to deal with the initial reconnaissance and intrusion phases.

Dark Reading: Attacks/Breaches
Trend Micro: 90% of IT Decision Makers Believe Organizations Compromise on Cybersecurity in Favor of Other Goals

Trend Micro study reveals need for new way to discuss business risk.

Dark Reading: Attacks/Breaches
Immersive Labs Acquires Snap Labs to Power Cyber Simulations With New Depth and Realism

Integrated offering to deliver hyper-realistic team exercises specific to customer environments for more relevant cyber knowledge, skills, and judgment.

Exploiting Password Reset Bugs
https://infosecwriteups.com/exploiting-password-reset-bugs-1936991d0ab0?source=rss------bug_bounty-5

Learn how to find bug in password reset functionContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/exploiting-password-reset-bugs-1936991d0ab0?source=rss------bug_bounty-5)

Tips/Advice for a new Pen Tester?
https://www.reddit.com/r/Pentesting/comments/quxo38/tipsadvice_for_a_new_pen_tester/

<!-- SC_OFF -->Hey y'all, I'm in my last semester of college and will be working as a junior pen tester in January. I was wondering if anyone had any advice for me when I enter the work force? To be completely honest, I am incredibly excited to start working but I also feel incredibly nervous because I feel that I'm going to fuck up a lot. My managers told me that since I'm at the bottom of the totem pole and I'm coming straight out of college with no experience, their expectations for me are low as long as I do my best. I also think that my fears stem from getting a pen tester position so quickly out of college- most pen testers started out in IT or in SOC while I literally have no experience in any professional field. In some ways, I feel that I just got really lucky with my interview. Anything I should practice on before I start working? Any tools that I should familiarize myself with? Any books/websites I should read/follow? I've been practicing with HackTheBox/TryHackMe since June. I'm also studying for the OSCP but I don't feel close to being ready and may not sit for it until next summer at the earliest. <!-- SC_ON --> submitted by /u/j1mmyava1on (https://www.reddit.com/user/j1mmyava1on)
[link] (https://www.reddit.com/r/Pentesting/comments/quxo38/tipsadvice_for_a_new_pen_tester/) [comments] (https://www.reddit.com/r/Pentesting/comments/quxo38/tipsadvice_for_a_new_pen_tester/)

Hacking on Medium
Broken Authentication through referral code.

https://cdn-images-1.medium.com/max/650/1*ohhVkDkFO92zSaeAHT5m_w.jpeg
Hey all,

Continue reading on Medium »

Hacking on Medium
How I passed the OSCP certification in my first attempt, and hacked the 5/5 targets of the exam

https://cdn-images-1.medium.com/max/600/1*10P4lu0Ch9_Jnn40ipnWhw.png
Hello everyone, i’m a french cybersecurity engineer and you can ping me as jedus0r 😊

Continue reading on Medium »

Hacking on Medium
Exploiting Password Reset Bugs

https://cdn-images-1.medium.com/max/1200/1*UlAAtRNWBzj0Iu8ldQqQbQ.jpeg
Learn how to find bug in password reset function

Continue reading on InfoSec Write-ups »

hacking: security in practice
Kik hack?

How would a person go abouts hacking a kik?

submitted by /u/Designer_Emu2975
[link] [comments]

Cve-2021-35042 | django sqli
https://www.reddit.com/r/redteamsec/comments/qv1dvj/cve202135042_django_sqli/

submitted by /u/Pure-Hair5006 (https://www.reddit.com/user/Pure-Hair5006)
[link] (https://youtu.be/Wlr1VQCo_5g) [comments] (https://www.reddit.com/r/redteamsec/comments/qv1dvj/cve202135042_django_sqli/)

Dinosaur Eggs’ LiquidityPool Loophole Explained
https://medium.com/amber-group/dinosaur-eggs-liquiditypool-loophole-explained-ac6ef10faafe?source=rss------bug_bounty-5