Dark Reading: Attacks/Breaches
How to Get One Step Ahead of Mobile Attacks

The advent of so-called "dropper" apps, which deliver and install malware that can also be later updated, is an emerging threat vector for mobile users.

Dark Reading: Attacks/Breaches
Attivo Expands Active Directory Protection from Unmanaged Devices, Including Mac, Linux, IoT/OT

Attivo Networks ADSecure-DC solution joins the company’s existing suite of Active Directory protection products.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Palo Alto Networks Introduces PAN-OS 10.2 Nebula

Software collects, analyzes, and interprets potential zero-day threats in real time using inline deep learning.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cybersecurity Platform CrowdSec Expands Into the United States

CrowdSec is launching a new solutions stack, comprised of three main products: CrowdSec Agent, CrowdSec Console, and CrowdSec Threat Intelligence.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
8-Character Passwords Can Be Cracked in Less than 60 Minutes

Researchers say passwords with less than seven characters can be hacked "instantly."

___________________________
@hacking_Attack
@Hacking_Video

A Case Study: Defending against ransomware with Microsoft Defender for Endpoint and Intel TDT
https://www.reddit.com/r/redteamsec/comments/t5y5j4/a_case_study_defending_against_ransomware_with/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/MDERansomewareCaseStudy) [comments] (https://www.reddit.com/r/redteamsec/comments/t5y5j4/a_case_study_defending_against_ransomware_with/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Being sexually harassed online and want to find out who it is!

TRIGGER WARNING SEXUAL HARRASSMENT! I’m a young woman 24F with a slight Instagram following and some creep on xvideos has been commenting my personal IG handle under videos of women who look like me. Creeps Dm me links and ask if it’s me all the time. The kind of person it attracts to my otherwise uplifting and positive online community is vile. It’s also super triggering because I have old trauma surrounding sexual assault and being recording without consent so this has been a absolute nightmare.

The worst part is all the videos I’m being “identified” in look like the women are being sexual assaulted. They’re drunk or look like they’re asleep.

It happened once and I wrote it off as some perv wanting to help out others in the perv community get off on my ig pics, “Look at this girl getting railed, wanna see her everyday photos?” But when it kept happening it seemed too weird. How can someone think there are ACTUALLY multiple videos like that of the same person? That’s not realistic. It feels like someone is trying to get to me.

I clicked on their Xvideos account and it said they’re a 25 year old in New York which scared me because I live in New York.

I want to find out who it is so I can rule out someone I know or from my past and maybe even place a restraining order. I’m not tech savvy. What I know is this guys xvideo account name, and the user name of the account who most recently dmd me a link of the latest video asking “this you?” Since 2020 when this started happened I’ve had multiple creeps DMing me links asking if it’s me, but I blocked and deleted because I was scared.

Can anyone help me? I just want this to end. Feel free to DM me.

TLDR: since 2020 someone has been commenting my personal IG user name under weird pornos that aren’t me and I want to find out who!

submitted by /u/Charlee12397
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SECURITY MAY BE COMPLICATED BUT THE BASIC IS VERY SIMPLE

THE CORE PRINCIPALS

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Change the Location of Your iPhone (Find Friends, Life360, etc.)

https://cdn-images-1.medium.com/max/2600/0*kF8ymWnlta4YxBpx
This trick allows you to set the location of your iPhone to anywhere, even when your phone is unplugged from your computer. It uses no…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Weakly Typed SQL Injection

https://cdn-images-1.medium.com/max/600/1*MTzSckHtXZDUV1ODJFIzIQ.gif
Programming languages come in two categories:
Hard/Strong Typed
Soft/Weak Typed

Continue reading on Techiepedia »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ucrania pide desconectar a Rusia de Internet y anular los dominios .ru…

https://cdn-images-1.medium.com/max/1642/0*u1WPwtYk9fY_fLXS
PUBLICADO EN 3 MARZO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Root Me TryHackMe | Walkthrough

https://cdn-images-1.medium.com/max/1920/1*Wan2jWijZ-P4owpnFgf3Tg.png
Root Me is a CTF-style Room on the TryHackMe Platform. It is a Linux-based machine with some vulnerabilities in the hosted website and…

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Do you need programming for hacking?

https://cdn-images-1.medium.com/max/1950/0*WiQRixsnSWG4w-cP
This is a very common question in the ethical hacking community.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SP IKE VM WalkThrough

https://cdn-images-1.medium.com/max/852/0*6gKa-gMB8Or_1DnR
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Los ataques de phishing se dirigen a países que ayudan a los refugiados ucranianos

https://cdn-images-1.medium.com/max/1596/0*DLMlCWub1_5CJl7O
PUBLICADO EN 3 MARZO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Chaya - Advance Image Steganography

https://blogger.googleusercontent.com/img/a/AVvXsEgfcqi3Fj6Ni2yqRwiJh-CIurylVijY5j6x7nkrTlZqqLEF3QN-n2oqW-4Vk5tBMfJr4sOMofJNN1YJxuDLA4yU2sLJSjNLw8Uv-ALgZ8A1pKwBHst3016sz1zr_hNRDTmlKobqHVR-b-zE8WAL9tGvD-lR0CJJv-EaqM1qSqoE9A6FB8GPC-gmu_fU=w354-h400 Chaya protects your privacy through steganography, cryptography and compression. It effectively encrypts your payloads using AES-256-GCM cryptography, embeds them using LSB-LPS steganography technique into images and compresses them using FLIF to evade detection by performing lossless compression.

Chaya is for your privacy. Chaya is backed by research (I will publish public version whitepaper on xerohack.com), and has proven to be by far the most effective image steganography tool as compared to other FOSS image steganography tools.
WHY CHAYA IS BETTER THAN THE REST?

* 0% detection rate using most of the publically available anti-steg tools like stegexpose and many more
* 100% data retention with almost the same capacity of standard LSB technique with LBS-LPS
* Transparent cryptography that gets as good as python has to offer

There is no way this can be broken using a standard supercomputer unless there are exploits in python libs and python itself.. LSB-LPS will take exponetially large time to brute-force with larger graph images because you will have to attack every X,Y coordinates combo without any error. Making an ML to do so is also quite useless and can be only used for Natural language processing for example: which message is readable to find the coordinates. AFTER THAT, you have to break the encryption. MOREOVER, NLP ML cannot find the coordinates because the bruteforce results will be ciphertext anyway. If for some reason the attacker knows the coordinates to start the de-steg process, they will have to break AES-GCM-256. GCM is better because it offers integrity along with co nfidentiality, which is why it's the better AES mode). United Nations Declaration of Human Rights (UDHR) 1948, Article 12 - “No one shall be subjected to arbitrary interference with his privacy, family, home or correspondence, nor to attacks upon his honor and reputation. Everyone has the right to the protection of the law against such interference or attacks.” International Covenant on Civil and Political Rights (ICCPR) 1966, Article 1 - "No one shall be subjected to arbitrary or unlawful interference with his privacy, family, home or correspondence, nor to unlawful attacks on his honor or reputation. Everyone has the right to the protection of the law against such interference or attacks." Features v1.2https://blogger.googleusercontent.com/img/a/AVvXsEgokX9skaOJoxMejblQ-h4RZkj9ADTNQfkNmC-63j_mUPlwsBklZcMYhykVSZWD2H_yvpDynWzKAgCxT7WW4wNYnbTdVw3m0z0vkA3Ea3LFi6cmxB1Lxu-Hcsck1IXSI-I48ewg65WfNlJuyP2llAh1R47GTAlbRGjdst6wBU9GqwM8l2cmcdoAkX68=w640-h478 * Supports AES-256-GCM cryptography
* Supports Standard LSB steganography
* Supports LSB-LPS steganography
* Supports FLIF lossless compression
* Cipher data logs as json
* Analytics support for your experiments
* Supports json to csv conversions
* Highly verbose cipher data logs
* Workspace Cleaner
* Easy installer for initial setup
* Comes with easy updater ChangelogsChangelog (main channel): https://github.com/xerohackcom/Chaya/blob/main/CHANGELOG.md Changelog (dev channel): https://github.com/xerohackcom/Chaya/blob/dev/CHANGELOG.md InstallationOne Line SetupUse the following command for faster setup:

Command For Ubuntu Based Distros sudo apt install python3-pip && sudo apt install git && git clone --depth=1 https://github.com/xerohackcom/Chaya.git && cd Chaya && pip3 install -r requirements.txt && sudo apt update && sudo apt-add-repository ppa:linuxuprising/libpng12 && sudo apt update && sudo apt install -y libpng12-0Command[...]

___________________________
@hacking_Attack
@Hacking_Video