Dark Reading: Attacks/Breaches
CISA Names 23 Members to New Cybersecurity Advisory Committee

Group will advise and provide recommendations to the director to enhance the nation’s cyber defense.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
ReliaQuest Valued At More Than $1 Billion Following Growth Round Led by KKR

The open XDR-as-a-service provider will use investment to expand business operations and further development of its GreyMatter platform.

___________________________
@hacking_Attack
@Hacking_Video

Injection is the New Black: Novel RTF Template Inject Technique Poised for Widespread Adoption Beyond APT Actors
https://www.reddit.com/r/redteamsec/comments/r6q086/injection_is_the_new_black_novel_rtf_template/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.proofpoint.com/us/blog/threat-insight/injection-new-black-novel-rtf-template-inject-technique-poised-widespread) [comments] (https://www.reddit.com/r/redteamsec/comments/r6q086/injection_is_the_new_black_novel_rtf_template/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Transporting malware in google links.

https://cdn-images-1.medium.com/max/891/1*wltF2cebWwNIg-YJRaMF1A.png
Hello guys! Today I will share my experience of how you can transport a encoded malware using accounts.google.com.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Utilizan plantillas y archivos RTF para Phishing y Malware

https://cdn-images-1.medium.com/max/1418/0*bmlM8C_HIs3NFF3G
PUBLICADO EN 1 DICIEMBRE, 2021POR DPAB

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Print nightmare still relevant in December?

Is it still a thing now? Or did windows finally patch it?

submitted by /u/jflaster
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Am I being realistic?

I posted this in cyber security sub but I figure it may be worth posting here too.

Hi everyone,

32 years old. I used to do a lot of website hacking and WiFi hacking back in highschool. The school still doesn’t know who got into their system via ftp and changed their website.

I had a neighbor who taught me a lot about computers after he heard I was very much interested in them. That’s where it all started really. Parents didn’t like that I was interested in cyber security given that at the time I was a bit of a trouble maker. Nothing serious just a typical angsty teenager. I got pushed into the biotech direction and did really well for myself. I’m a really curious person and very good at math. Engineering degree from an Ivy League school and a PhD in physics from another Ivy League school. Worked at 3 different biotech companies and my last job I was in charge of the R&D dept. I along with a few other people, I have been let go by the company. (My reason was for complaining to HR about a some toxic stuff that was going on. Don’t complain to HR I guess). Over the past 2 years my love for cyber security came back and I spent the last two years on try hack me and hack the box. I can fair pretty well with medium leve difficulties with out needing any hints or struggling for days on end. I can code in python, and build websites. I understand how many of the popular hacking tools work. I like to understand how the tools work before even using it.

My physics degree has given me so much math experience I can appreciate cryptography. Most importantly, thanks to all the online resources, I’ve been able to learn a lot and practice cyber security in a safe and legal way.

I’m at a point now where after a tough personal year (lost my father due to covid, house flooded due to a hurricane, and now getting laid off) I am looking to do the other things in life I’m passionate about because life is short and I may as well do things that make me happy.

Given my career experience my resume obviously does not show I have any field experience in cyber security outside of me mentioning that I do CTF’s. I plan on going for security+ since I am pretty comfortable with networks although I can see doing network+ or something similar help me get a foot in the door.

I guess my question is: How realistic is it for me to do a career change? Should I prove myself with certs first? The wiki on some of the sub Reddits are really helpful and I am just wondering if I’m being realistic or not. Should I just keep this as a hobby and chase the next biotech position?

Signed - a very burnt out 10 year biotech veteran who loves the problem solving cyber security requires.

submitted by /u/BodySmell
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Compromising the email supply chain of 190 Australian organisations through a single IT Managed Service Provider

submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Brainstorming ideas for creating human like social media bots.

submitted by /u/estrojennnn
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking a scammer ??

Hey there everyone, long story short someone very clever scammed my mom via email posing as her boss, out of a good amount of money. I have their email and I emailed them basically “interested” in partaking in their scam and they’re now eagerly awaiting my response. They are sending their emails via “my mail” app My question is: are there any ways I could find them (probably not) and if not, then fuck with them, like by sending a virus posed as a photo or something? Or anyone out there want to fuck with them on behalf of everyone who’s been scammed? If at the very least I’m going to send them a nice pic that’s not the gift cards they’re expecting lol Reddit help me revenge pls n thanks :)

submitted by /u/thirsty--
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
VMware Carbon Black MDR Helps Analysts Respond to Attacks

Carbon Black’s new managed detection and response solution monitors endpoints and workloads, freeing up security teams to understand the different types of attacks that might be heading their way.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
APT Groups Adopt New Phishing Method. Will Cybercriminals Follow?

APT actors from Russia, China, and India have been observed using the RTF-template injection technique that researchers say is poised for wider adoption.

Dark Reading: Attacks/Breaches
Neustar Security Services Spins Out as Own Company

The company plans to offer newly integrated services into its Ultra Secure portfolio and expand its sales, marketing, and service capabilities.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Military Vets Share Lessons That Helped Them Build Infosec Startups

Startup founders say serving in the military taught them how to defend against cyberattacks and how to build teams. These lessons are serving them well as they run their own companies.

Dark Reading: Attacks/Breaches
Russian Man Sentenced to 60 Months in Prison for Running 'Bulletproof' Hosting for Cybercrime

Service hosted Zeus, SpyEye, Citadel, Blackhole Exploit Kit malware aimed at US companies and financial institutions.

___________________________
@hacking_Attack
@Hacking_Video