Guidance for preventing, detecting, and hunting for CVE-2021-44228 Log4j 2 exploitation - Microsoft Security Blog
https://www.reddit.com/r/redteamsec/comments/rhccg6/guidance_for_preventing_detecting_and_hunting_for/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.microsoft.com/security/blog/2021/12/11/guidance-for-preventing-detecting-and-hunting-for-cve-2021-44228-log4j-2-exploitation/) [comments] (https://www.reddit.com/r/redteamsec/comments/rhccg6/guidance_for_preventing_detecting_and_hunting_for/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Sources to learn Threat Modeling

Anyone can recommend a good source to learn and practice threat modeling?

submitted by /u/awazzan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking for interesting books.

Hello, I am a complete beginner in cybersec but if it is ok I would like some book recommendations on things like beginners cryptography or a few articles to read. Also books and articles on how privilege works in windows and linux ie user admin root superuser, privilege elevation a d privilege escalation.

Sorry if this comes under "no how to start hacking".

submitted by /u/S10MC2015
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Baffling hack of Internet traffic?

I think this would qualify as an "interesting post mortem" of a hack:

A year ago my life was derailed because my partner's Reddit account was hacked and someone sent me their account username. They had stuff on there that wasn't meant for my eyes.

My boyfriend only logged into the Reddit account on his work laptop and there was no mention of his name, and he didn't use the same username anywhere else.

I also don't know how they knew he was my boyfriend - there was no mention of me on there.

The only guesses are that someone somehow hacked our wifi and could see all the traffic, or they broke into our apartment and put some spy software on our computers.

But his laptop was also password protected.

Until this day I am totally clueless as to how it happened.

submitted by /u/KittenFrosting
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Companies Must Assess Threats to AI & ML Systems in 2022: Microsoft

Most companies lack the proper tools to assess their vulnerability to threats facing their AI systems and ML pipelines, prompting Microsoft to release a risk assessment framework.

Dark Reading: Attacks/Breaches
Original Fix for Log4j Flaw Fails to Fully Protect Against DoS Attacks, Data Theft

Organizations should upgrade ASAP to new version of logging framework released Tuesday by the Apache Foundation, security experts say.

Hacking on Medium
My Ten Silicon Valley Novels

https://cdn-images-1.medium.com/max/600/0*6OEtYVns7ycMMnlW.jpg
Yes, I’ve published ten wild novels set in Silicon Valley. Check ’em out.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
디스코드, 메신저를 이용한 사이버 범죄와 해킹

https://cdn-images-1.medium.com/max/1385/1*58YeKezR3tBt7ObP-H8_4g.png
디스코드를 어떻게 악용했는지 알아보자

Continue reading on StealthSolution »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Neovim Plugins for a Better Coding Experience — Part 3

https://cdn-images-1.medium.com/max/700/0*WCyTtSz05aKZHnVR.png
Let’s continue to improve our coding experience using Neovim.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Leaking Personal Phone Numbers of All Registered Indian Voters

https://cdn-images-1.medium.com/max/2600/0*P5dRikxwC00Ii_Xf
Can result in large-scale election-related scams in India.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Question for those who majored in ethical hacking

Is the major worth it? Is it fun and enjoyable and something you’re able to do for the rest of your life with a decent pay? I’ve been having my eye on it for a while now and was wondering if it’s a good major to get into, it sounds really interesting so I want to know the pros and cons of this field of work. Thanks :).

submitted by /u/Throwaway_010304
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Possible Web Crawler Research Program?

I realize this may not fit this sub, but I thought I’d try here anyway. This is probably a stupid question, but bare with me.

I’m trying to automate tasks at work, and much of that work is web research - sorting/reading through public documents, govt websites, etc and creating memos for my boss and our clients to read over. This work is extremely tedious and much of my time is spent just searching for the information. So, I feel like there has to be a program that can help me skip the searching portion and just review the results.

My question is:

Are there consumer programs available that use a web crawler (or some equivalent mechanism) to automate an advanced keyword search, and compile the results in a Word Doc template?

If not, how many hours would it take an average developer to create such a program?

I know very little about programming, but I feel like there has to be some sort of software out there that can scrape data for me so I don’t have to.

Work smarter, not harder. Amirite?

Thanks in advance.

submitted by /u/oliver--cromwell
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Meta expands its bug bounty program to include data scrapping

Financial rewards starting at $500 are on offer for scraping bugs and scraped database reports.Continue reading on Medium »
Read more...

Hacking on Medium
Hacking the dlink DIR-615 for fun and no profit Part 5: Multiple RCE’s

https://cdn-images-1.medium.com/max/1051/1*4zdNY9G3QG70DIoJQm7Ddw.png
Its been a while since i last did some iot hacking and i missed it. So i decided to try it again with my trusty target, dlink dir-615. And…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
NFT Marketplace on Polygon, Vulcan Forged Loses $ 140 Million

https://cdn-images-1.medium.com/max/768/0*Fy_gNhT0BwNy4Vcq.png
A marketplace specializing in gaming NFTs, Vulcan Forged has been the victim of a hack. Hackers took advantage of a loophole to steal the…

Continue reading on Coinmonks »

___________________________
@hacking_Attack
@Hacking_Video