hacking: security in practice
A California database was breached and medical/COVID19 info leaked

https://external-preview.redd.it/5rcnwazl5ATBhoUVSHoFH1KXUMSTYEsaBZB_wsipL30.jpg?width=320&crop=smart&auto=webp&s=8d90ee4277a79dea3cf9f5151589a07c905b715e submitted by /u/dwappo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
PowerShell vs VBScript/JScript malware?

What are the advantages of malwares written in VBScript/JScript rather than in PowerShell? I'm talking about more advanced malwares than simple droppers, like RATs and cryptojackers.

I personally find the WSH languages to be very primitive and syntax to not be so pleasant. Is there any specific reason why attackers are choosing to write their malwares in WSH language? I have come up with some thoughts:

* WSH languages works pretty much in every windows platforms. There is no problems with version incapability like with powershell and .NET.
* There is less logging capabilites compared to powershell, no scriptblock logging for example.
* While powershell might be blocked, WSH is often overlooked.
* Various LOLBins offer fileless execution (mshta, regsvr32, rundll32)

WSH languages are quite unknown topic for me and I would like to learn more about prevention of WSH based malware. I have a few questions I'm hoping to get answered by:

* Does JScript offer more functionality over VBScript or are they just different by syntax?
* What are the most efficient ways of blocking and logging WSH based malware?

submitted by /u/2002020
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Have You Ever Tried Sideways Thinking in your Creative Marketing?

https://cdn-images-1.medium.com/max/2600/1*kUsIUtONEPlq17am5FT7uA.jpeg
The best way to get a person’s attention is to offer to help them.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
GoldenEye: 1 CTF Walkthrough

https://cdn-images-1.medium.com/max/866/0*twT_b13-4iV8va_r
Scanning

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CISA advierte a los administradores que parchen la vulnerabilidad de SAP de máxima gravedad

https://cdn-images-1.medium.com/max/1600/0*Prv-G0seZP9VBowt
PUBLICADO EN 9 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Mitigate Ransomware Risks With Modern Log Management

Enterprises using a modern log management platform have key tools in place to detect and mitigate some of the risks from a ransomware attack.

Dark Reading: Attacks/Breaches
Linux Malware on the Rise

Ransomware, cryptojacking, and a cracked version of the penetration-testing tool Cobalt Strike have increasingly targeted Linux in multicloud infrastructure, report states.

Dark Reading: Attacks/Breaches
Experts: Several CVEs From Microsoft's February Security Update Require Prompt Attention

Microsoft's release of relatively sparse vulnerability information makes it difficult for organizations to prioritize mitigation efforts, security experts say.

Dark Reading: Attacks/Breaches
Putting AI to Practical Use in Cybersecurity

Almost every cybersecurity product has an AI component. Here is where it's working in the real world.

Dark Reading: Attacks/Breaches
Auth0 Credential Guard Detects Breached Passwords to Prevent Account Takeover

New feature adds a dedicated security team and support for multiple languages to prevent fraudulent access with stolen credentials.

___________________________
@hacking_Attack
@Hacking_Video

The network data and utf-8 decoded text

Today I want to share something about the network data and the utf-8 decoded text. I think we really should know what is going on during…Continue reading on Medium »
Read more...

hacking: security in practice
how do hackers find out people's location?

I am no expert on the matter hence why this post is up. I know that you can see the area that someone is in with an ip adress but is there a way for experienced people to pinpoint an exact adress without going on facebook or other websites that may contain pictures or information about you?

thanks!

submitted by /u/ChadSh1tOnly
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
MS Word Password protected without a hash

My elderly neighbor is wanting to work on his book he started years ago. He had it saved on floppy disc so I bought a reader and pulled the files off. He doesn't remember the password so I told him I would try to brute force. I don't know how to without a hash though. I am thinking it is a Microsoft 97 document. It says 97-2004. How would you all handle this? Appreciate your help.

submitted by /u/SendtoJeffSmith
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How screwed up can this company be?

I was just playing around in a website when I found a path where all the resumes that people send to the company can be found.

There is more than 100 PDF files of people containing a lot of information, such as: address, age, marital status and everything that a resume typically contain.

Is that company breaking some law by doing this? How bad can this situation be for them?

I sent an e-mail for them talking about the problem, but no response yet.

submitted by /u/Im_MrLonely
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

The network data and utf-8 decoded text
https://gulizhiguhao.medium.com/the-network-data-and-utf-8-decoded-text-a8a61864a0ea?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Today I want to share something about the network data and the utf-8 decoded text. I think we really should know what is going on during…Continue reading on Medium » (https://gulizhiguhao.medium.com/the-network-data-and-utf-8-decoded-text-a8a61864a0ea?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video