hacking: security in practice
Red Cross cyberattack compromised sensitive data on over 500,000 people

https://www.npr.org/2022/01/20/1074405423/red-cross-cyberattack

submitted by /u/Motor-Ad-8858
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
iPhone and PC are hacked. What should I do?

Hi there hacking community,

If someone pissed off the wrong people and as a result, his iPhone and PC are now hacked, how should this person remove the hackers from his devices? This person has tried reinstalling fresh copies of Windows and IOS but this has not seemed to work.

Should this person buy a new iPhone and PC? This seems like the most reasonable approach because I looked up the price of zero-day exploits for iPhones and they are not cheap, to say the least.

Any guidance or advice would be really appreciated.

submitted by /u/TheTinkererofTerror
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anyone know a FUD RAT for scambaiting?

I find some but they always get detected

submitted by /u/Big_Potat0
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Automating Response Is a Marathon, Not a Sprint

Organizations should balance process automation and human interaction to meet their unique security requirements.

Dark Reading: Attacks/Breaches
Researchers Discover Dangerous Firmware-Level Rootkit

MoonBounce is the latest in a small but growing number of implants found hidden in a computer's Unified Extensible Firmware Interface (UEFI).

Dark Reading: Attacks/Breaches
Red Cross Hit via Third-Party Cyberattack

The incident compromised the personal data and confidential information of more than 515,000 "highly vulnerable people," the Red Cross reports.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
(ISC)² Appoints Jon France, CISSP, as Chief Information Security Officer

Accomplished cybersecurity leader will advocate globally for best practices in risk management and head up association security operations.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Biden Broadens NSA Oversight of National Security Systems

New Cybersecurity National Security Memorandum will let the spy agency "identify vulnerabilities, detect malicious threat activity and drive mitigations," agency cybersecurity director says.

___________________________
@hacking_Attack
@Hacking_Video

Log4j RCE When Remote Class File Won’t Load (Newer Java Versions)
https://n0ur5sec.medium.com/log4j-rce-when-remote-class-file-wont-load-newer-java-versions-a09e48c82b50?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

So you might have heard of the log4j vulnerability (lol). If you’ve read the initial proof of concepts/general information that rushed out…Continue reading on Medium » (https://n0ur5sec.medium.com/log4j-rce-when-remote-class-file-wont-load-newer-java-versions-a09e48c82b50?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Top 10 web hacking techniques of 2021 — PortSwigger
https://rei-hunt.medium.com/top-10-web-hacking-techniques-of-2021-portswigger-7de16999e5fa?source=rss------bug_bounty-5

OK , mình sẽ từ từ dịch hết tất cả các method , các bạn có thể có thể xem bản gốc ở đây : “‘Top 10 web hacking techniques of 2021 —…Continue reading on Medium » (https://rei-hunt.medium.com/top-10-web-hacking-techniques-of-2021-portswigger-7de16999e5fa?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackers stole nearly $30 million from Crypto.com

https://cdn-images-1.medium.com/max/1200/1*KnSmJJCe8UAdPLEMBb3i5A.jpeg
Cryptocurrency exchange Crypto.com admitted in a statement posted early Thursday morning that it had lost well over $30 million in Bitcoin…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Is it possible to have a career in pentesting without school?
https://www.reddit.com/r/Pentesting/comments/s945bg/is_it_possible_to_have_a_career_in_pentesting/

wondering if its possible to get a job in the field only having certificates, any help is appreciated submitted by /u/Lankysteg (https://www.reddit.com/user/Lankysteg)
[link] (https://www.reddit.com/r/Pentesting/comments/s945bg/is_it_possible_to_have_a_career_in_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/s945bg/is_it_possible_to_have_a_career_in_pentesting/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is SSRF via javascript possible?

So I'm doing a CTF problem currently and I do know what the potential vuln is (unfiltered SSRF via puppeteer on the server), but because I'm a bit of a noob I'm unsure as to how exactly I'm able to exploit it further in order to achieve access within the localhost-eyes-only directories of the server.

I'm able to execute javascript and have tried making a fake website that would just execute javascript on the remote machine that ran a fetchcall on "localhost", with the results being sent back via GET parameters to the attacking server. However, I eventually quickly realized it was futile as CORS was enabled, thus leaving me in a familiar yet head-scratching position.

What exactly do I do from here? I'm not exactly looking for exact answers or solutions obviously, but is there any way I could be able to perform SSRF whilst having javascript access? Or should I look for another vulnerability as this could just be a dead end I tried so desperately to view as a door?

submitted by /u/TheByteQueen
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video