hacking: security in practice
Like the NFL? Have a Samsung TV? NFL Sunday Ticket Application Vulnerability

The NFL Sunday Ticket app from DirectTV does not properly terminate a user's session, so if you're able to find a login via a disclosed list of credentials and jump on, you can retain access, even if the user performs a password change.

The entry level employee dealing with triage doesn't think this is a vuln so figured I'd just post it.

submitted by /u/PlzNoBigRed
[link] [comments]

Hacking on Medium
AI Trojan Horse: DNN Fake Learning

https://cdn-images-1.medium.com/max/2560/1*kZgypH5qt6hfdzPV3TxPCQ.png
Train the DNNs with buried trigger data, activate at will

Continue reading on The Dock on the Bay »

Hacking on Medium
Diplomacy Using Cyberweapons

https://cdn-images-1.medium.com/max/2600/1*53wCNtWRjUCcu3dSXBgAcg.jpeg
Everything was being digitized during the Obama administration. Smartphones have become ubiquitous. People were uploading their entire…

Continue reading on Medium »

Dark Reading: Attacks/Breaches
Phishing Attack in Ukraine Could Be Prelude to Disinformation Campaign

Belarus-based APT behind the attacks may also be working in concert with Russia, researchers say.

Dark Reading: Attacks/Breaches
Invicti Security Adds Software Composition Analysis to Its Industry- Leading AppSec Platform

Invicti SCA enables users to track and secure open-source components to reduce security risk.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Deep Instinct 2022 Threat Landscape Report Finds 125% Increase in Threat Types and Novel Evasion Techniques

The Deep Instinct Threat Research team monitored attack volumes and types and extrapolated their findings to predict where the future of cybersecurity is heading, determine what motivates attackers, and lays out the steps organizations can take now in order to protect themselves in the future.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Toyota Halts Production After Suspected Supply Chain Attack

Toyota suspends production at all 14 plants in Japan after a supplier reported being hit by "some kind of cyberattack."

Dark Reading: Attacks/Breaches
CISO Checklist for Offboarding Security Staff

The Great Resignation strikes cybersecurity teams too. Here's a checklist for CISOs to ensure security is retained even as security staff is not.

Dark Reading: Attacks/Breaches
KnowBe4 Research: Half of Employees Use Unauthorized File Services to Complete Work

Report examines the prevalence of two common insecure practices.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Russian AMD leak from AgainstTheWest

submitted by /u/QuestionableDementia
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://a.thumbs.redditmedia.com/BzIa1iDuT_rrX0qQKgMowX-9c2dBzH05w08oRwiAqU8.jpg submitted by /u/QuestionableDementia
[link] [comments]

hacking: security in practice
An updated list of what groups are involved in the russia/ukraine war cyberwar. (found on Twitter)

https://external-preview.redd.it/4pliBKy8EBuVS1j5qzGfIVcDXEo1vDVI9lmZBXmWPuY.jpg?width=320&crop=smart&auto=webp&s=482463a3feb58a4d1d3dca5888f7fd0e1a24310c submitted by /u/ptk2k5
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Russian PromEngineering data leak + other companies blueprints

submitted by /u/QuestionableDementia
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ukraine calls for volunteer hackers to protect critical infrastructure

https://external-preview.redd.it/z9ZrPgaZDkGXQWib4BuJsgckRv05BYX9QDd8mQL2FJ8.jpg?width=640&crop=smart&auto=webp&s=2f9eb7f329797db61c4868bb2b9a2d453617ba87 submitted by /u/Ciaran123C
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Was I compromised? Sys Key pop up

I was playing halo on my PC and the screen kind of backed out of the game( game filled the screen still) but a prompt popped up asking if I wanted to add a sys key. I quickly hit the restart button and yoinked the Ethernet(no WiFi on my board). I don’t know if I totally lost control or not, I just wanted to cut the connection if so. Is there any combination of keys that would pop that up? If I did get compromised, what next? I’m currently looking offline for any programs that I don’t recognize.

submitted by /u/Trd_B3rglr2000
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

On the way to 2nd Bounty.

Hello readers, in this post, we’ll look at XSS and Apache Server furthere on apache server I will post another article.Continue reading on Medium »
Read more...