Download Jvmxray (https://github.com/spoofzu/jvmxray)

Dark Reading: Attacks/Breaches
Cybercriminals Contemplate 'Exploit-as-a-Service' Model

Researchers share their findings on the current zero-day market and how criminals' strategies may shift in the future.

All Your Beacon Are Belong to Us: New BlackBerry Book Cracks Code of Cobalt Strike Threat Actors
https://www.reddit.com/r/redteamsec/comments/qwb9jr/all_your_beacon_are_belong_to_us_new_blackberry/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://blogs.blackberry.com/en/2021/11/all-your-beacon-are-belong-to-us-new-blackberry-book-cracks-code-of-cobalt-strike-threat-actors) [comments] (https://www.reddit.com/r/redteamsec/comments/qwb9jr/all_your_beacon_are_belong_to_us_new_blackberry/)

Hacking on Medium
Emotet regresó y se distribuye a través de correos con adjuntos maliciosos

https://cdn-images-1.medium.com/max/1462/0*2UJGnzi0qy4_Y70l
PUBLICADO EN 17 NOVIEMBRE, 2021 POR EHACKING

Continue reading on Medium »

hacking: security in practice
iPhone Hacked- Backdoor…

So my friend told me a story of when he got arrested in Indiana for conspiracy to sell marijuana (he got arrested for 3 oz indv bagged and a roll of 1000.00) that some officers came in, sat him down, pulled his phone from a bag and plugged it into a computer and he said he just saw black numbers flashing and his phone was unlocked…this is a major blow in privacy. How is this possible. He’s very into updating his phone and software was up to date. This happened a week ago, and to make matter worse his pin was 8 digits long not the standard 6……wtf!!!!

submitted by /u/fyrelabs
[link] [comments]

hacking: security in practice
iPhone Hacked- Backdoor…

So my friend told me a story of when he got arrested in Indiana for conspiracy to sell marijuana (he got arrested for 3 oz indv bagged and a roll of 1000.00) that some officers came in, sat him down, pulled his phone from a bag and plugged it into a computer and he said he just saw black numbers flashing and his phone was unlocked…this is a major blow in privacy. How is this possible. He’s very into updating his phone and software was up to date. This happened a week ago, and to make matter worse his pin was 8 digits long not the standard 6……wtf!!!!

submitted by /u/fyrelabs
[link] [comments]

hacking: security in practice
iPhone Hacked- Backdoor…

So my friend told me a story of when he got arrested in Indiana for conspiracy to sell marijuana (he got arrested for 3 oz indv bagged and a roll of 1000.00) that some officers came in, sat him down, pulled his phone from a bag and plugged it into a computer and he said he just saw black numbers flashing and his phone was unlocked…this is a major blow in privacy. How is this possible. He’s very into updating his phone and software was up to date. This happened a week ago, and to make matter worse his pin was 8 digits long not the standard 6……wtf!!!!

submitted by /u/fyrelabs
[link] [comments]

hacking: security in practice
Input validation on server side can be seen on http response

It's a good practice to perform input validation on server side as end user can't tamper with it. However, there have been a cases where this validation can be seen via http response in JSON form or JavaScript.

Even though this is better than client side validation alone, I believe this is still a bad security practice as end user can see what is being filtered and what is not.

What is your recommendation for a cases like this?

submitted by /u/w0lfcat
[link] [comments]

hacking: security in practice
I want to download paid pdfs from this website for free, Any Idea how I can go about doing that?

So basically, I made a resume on https://novoresume.com/ but some templates aren't free, do you have any idea how I can bypass their premium upgrade and download the pdf for free? Maybe a tool or something that'll scan the website or url and find the pdf and download it? Sorry if this is not clear, I'm new to this.

submitted by /u/Life-Influence8893
[link] [comments]

Dark Reading: Attacks/Breaches
Cyber Conflict Between US and Iran Heats Up

The United States, United Kingdom, and Australia warn attacks from groups linked to Iran are on the rise, while the Iranian government blames the US and Israel for an attack on gas pumps.

Dark Reading: Attacks/Breaches
Can I Have XDR Without EDR?

Yes, extended detection and response is possible without endpoint detection and response, but here's why having both is helpful.

Dark Reading: Attacks/Breaches
Palo Alto Networks Delivers What's Next in Security at Ignite '21

Cybersecurity company introduces solutions aimed at network security, cloud security and security operations.

Dark Reading: Attacks/Breaches
Sift Acquires Passwordless Authentication Pioneer Keyless to Provide Secure, Frictionless Authentication

Biometric authentication innovator eliminates password-based account takeover and enables PSD2 Strong Customer Authentication while preserving user privacy.