hacking: security in practice
Log4Shell Public Bug Bounty Hitlist

submitted by /u/Cold999
[link] [comments]

Dark Reading: Attacks/Breaches
Meta Expands Bug-Bounty Program to Include Data Scraping

Scraping bugs and scraped databases are two new areas of research for the company's bug-bounty and data-bounty programs.

Dark Reading: Attacks/Breaches
Kroll Acquires Security Compass Advisory

Combined capabilities will help clients address the growing complexity of securing public, private and hybrid cloud, 5G, IoT, and industrial control systems

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cybereason Announces Availability of AI-Driven Cybereason XDR and EDR on Google Cloud Marketplace

Cloud-native platform automates prevention, detection, and response to cyberattacks.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Analysis: Log4j Vulnerability Highlights the Value of Defense-in-Depth, Accurate Inventory

The early lessons from Log4j indicate that key security principles can help better handle these high-risk software supply chain security incidents if teams have proper support.

Dark Reading: Attacks/Breaches
Dept. of Homeland Security Launches 'Hack DHS' Program

A new bug bounty program aims to find potential security flaws within certain DHS systems and strengthen the department's security posture.

___________________________
@hacking_Attack
@Hacking_Video

Broken Access Control
https://mearegtu.medium.com/broken-access-control-cc6cfd793b15?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Part 0x01 | Improper Authorization could allow access to more than 100,000 Microsoft Dynamics 365 for Partner UsersContinue reading on Medium » (https://mearegtu.medium.com/broken-access-control-cc6cfd793b15?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Chili: 1 Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/790/0*rCNVyRRUsw4HYaeA.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Best profit Hacking !

Les hackers ont toujours été considérés comme des criminels, mais ça pourrait bien changer. Les compagnies qui sont victimes d’attaques…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Guidance for preventing, detecting, and hunting for CVE-2021-44228 Log4j 2 exploitation - Microsoft Security Blog
https://www.reddit.com/r/redteamsec/comments/rhccg6/guidance_for_preventing_detecting_and_hunting_for/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.microsoft.com/security/blog/2021/12/11/guidance-for-preventing-detecting-and-hunting-for-cve-2021-44228-log4j-2-exploitation/) [comments] (https://www.reddit.com/r/redteamsec/comments/rhccg6/guidance_for_preventing_detecting_and_hunting_for/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Sources to learn Threat Modeling

Anyone can recommend a good source to learn and practice threat modeling?

submitted by /u/awazzan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking for interesting books.

Hello, I am a complete beginner in cybersec but if it is ok I would like some book recommendations on things like beginners cryptography or a few articles to read. Also books and articles on how privilege works in windows and linux ie user admin root superuser, privilege elevation a d privilege escalation.

Sorry if this comes under "no how to start hacking".

submitted by /u/S10MC2015
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Baffling hack of Internet traffic?

I think this would qualify as an "interesting post mortem" of a hack:

A year ago my life was derailed because my partner's Reddit account was hacked and someone sent me their account username. They had stuff on there that wasn't meant for my eyes.

My boyfriend only logged into the Reddit account on his work laptop and there was no mention of his name, and he didn't use the same username anywhere else.

I also don't know how they knew he was my boyfriend - there was no mention of me on there.

The only guesses are that someone somehow hacked our wifi and could see all the traffic, or they broke into our apartment and put some spy software on our computers.

But his laptop was also password protected.

Until this day I am totally clueless as to how it happened.

submitted by /u/KittenFrosting
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Companies Must Assess Threats to AI & ML Systems in 2022: Microsoft

Most companies lack the proper tools to assess their vulnerability to threats facing their AI systems and ML pipelines, prompting Microsoft to release a risk assessment framework.