Dark Reading: Attacks/Breaches
Microsoft Patches Critical Exchange Server Flaw

Remote code execution vulnerability among 71 bug fixes issued in March Patch Tuesday.

hacking: security in practice
Another worst thing about being a hacker

People only notice when you successfully hack something, they don't care that it took you 5 or 6 attempts to actually get there

submitted by /u/itsgonbeokayyeah
[link] [comments]

hacking: security in practice
Website security checklist

Looking for suggestions for a checklist to check the security of a website. It has to be a manual process meaning you can look at the source code, but can't run a vulnerability scanner against the website.

Some examples

Password Recovery

HTTP vs HTTPS

Email address or Contact page

URL manipulation -

What other things would you check and how would you check?

You consider it as part of your planning stage and you visit a company website. What would you check quickly and note it might be weakness?

submitted by /u/dbikingman
[link] [comments]

hacking: security in practice
My friends instragram got hacked by one of those PayPal scams. Is there anything we can do to make the scammers life a living hell?

I managed to ip grab him and he’s from la but that’s All I know/was able to do

submitted by /u/saab_lover
[link] [comments]

hacking: security in practice
Hide when I’m online from a router

My isp can see what computer is logged onto their router and when they go online. Is it possible to hide this from them and become invisible on the router page? This gets annoying as they can see when I turn on my pc

submitted by /u/loluydied
[link] [comments]

Hacking on Medium
Piratas informáticos rusos apuntan a ucranianos y aliados europeos a través de ataques de phishing

https://cdn-images-1.medium.com/max/1441/0*R0bzmFojnzZOdiSa
PUBLICADO EN 8 MARZO, 2022POR EHACKING

Continue reading on Medium »

hacking: security in practice
what could someone do if they found the backend source code of google?

If they chose to leak it, how would it impact google? If they exchanged money for not leaking it, how much could they reasonably expect?

submitted by /u/Tonythesmartspornalt
[link] [comments]

hacking: security in practice
Leaked Nvidia Code-Signing Certificate Now Being Used by Malware

https://external-preview.redd.it/UsUzZYTJzps6Lrkcx0sdobwKLPngX48g81I4rQbN-6U.jpg?width=640&crop=smart&auto=webp&s=3571ff78f40fa96e13efc17923e0d768de66155e submitted by /u/CodePerfect
[link] [comments]

hacking: security in practice
How to prevent my Robot Vacuum Camera from being hacked?

I bought a Robot Vacuum recently and came to the realization that it might be hackable. Is there a way I can prevent such a thing from happening?

The vacuum is connected to my home Wi-Fi network.

submitted by /u/HussleForever
[link] [comments]

hacking: security in practice
Where do hackers get password hashes

like actually where do u guys get them ( obv ethical hacking)

submitted by /u/Historical_Guide_723
[link] [comments]

A Summary of APT41 Targeting U.S. State Governments
https://www.reddit.com/r/redteamsec/comments/t9zwmb/a_summary_of_apt41_targeting_us_state_governments/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.mandiant.com/resources/apt41-us-state-governments) [comments] (https://www.reddit.com/r/redteamsec/comments/t9zwmb/a_summary_of_apt41_targeting_us_state_governments/)

Hacking on Medium
Break the Bias: Celebrating Women in Cybersecurity

https://cdn-images-1.medium.com/max/1170/1*iHpOxvHV53RV1f91HaFH5w.jpeg
March is Women’s History Month and on March 8th, we celebrate International Women’s Day! This year’s theme is #BreakTheBias, with a focus…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Healing blind injections

What if I told you there is a way to heal the blind SQL injections and turn them into healthy union-based ones?
Read more...

Phonebook, the way to DoS a company

I had to add my personal info to a phonebook, which I don’t like, so I took down the server ;)
Read more...

Phonebook, the way to DoS a company
https://infosecwriteups.com/phonebook-the-way-to-dos-a-company-87d342c613b5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I had to add my personal info to a phonebook, which I don’t like, so I took down the server ;)Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/phonebook-the-way-to-dos-a-company-87d342c613b5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Remote Code Execution | A Story of Simple RCE on Jenkins Instance.
https://medium.com/@awezkagdi.ak/remote-code-execution-a-story-of-simple-rce-on-jenkins-instance-4f01ea098269?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Vulnerability Category: A1- Code InjectionContinue reading on Medium » (https://medium.com/@awezkagdi.ak/remote-code-execution-a-story-of-simple-rce-on-jenkins-instance-4f01ea098269?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video