Dark Reading: Attacks/Breaches
Apple Gift Card Scammers Sentenced for Role in $1.5M Fraud

Criminal conspiracy included theft of Apple point-of-sale devices.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Citrix® Modernizes Security to Accommodate Hybrid Work

Company launches cloud delivered, Zero Trust Network Access solution that protects all apps, data and devices, enabling secure work from anywhere.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
State Department Announces Bureau of Cyberspace and Digital Policy

The newly created bureau will help shape norms of responsible government behavior in cyberspace and help US allies bolster their own cybersecurity programs.

Dark Reading: Attacks/Breaches
Qualys Delivers Multi-Vector EDR 2.0 with Enhanced Prioritization to Quickly Surface the Most Critical Incidents

EDR solution provides comprehensive threat detection and reduces the risk of compromise with vulnerability management and patching all from a single agent.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Brussels’ public transport

https://cdn-images-1.medium.com/max/1019/1*mYHih7N_R09LbWFuiY_bJw.jpeg
Brussels, like many other cities around the world, has implemented contactless payments on their public transport, allowing you to scan…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackers breached Mailchimp to target crypto holders

https://cdn-images-1.medium.com/max/1200/1*den7bnD03WfJEZMe13fZXA.jpeg
Hackers used internal tools from Mailchimp to target customers from a total of 102 users, including hardware cryptocurrency wallet Trezor…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to register and publish a Common Vulnerabilities and Exposures (CVE)

https://cdn-images-1.medium.com/max/800/0*ghgOz7VmqihCN41I.jpeg
Hello Hackers, I’m MrEmpy, I’m 17 years old. Welcome to my article teaching how I created a CVE.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A case study whitepaper of the shadow-utils chfn, chsh, and userdel bug

https://external-preview.redd.it/vuMlHp0AIsM_Ca5d7vo9xv7CzlxBfjHfNLncYNLbIrE.jpg?width=108&crop=smart&auto=webp&s=6baff6d5e808b9f6457c5c69616c1ba69c610f22 submitted by /u/oxagast
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
GitLab Releases Patch for Critical Vulnerability That Could Let Attackers Hijack Accounts. Tracked as CVE-2022-1162, the issue has a CVSS score of 9.1 and is said to have been discovered internally by the GitLab team.

https://external-preview.redd.it/INdOJDHrN0CrteOz7opOUM9lQei1KUbmWFrlbThk3mk.jpg?width=640&crop=smart&auto=webp&s=28ce0312fdf2542f3add4f82642d3e977db83dac submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
VMware has published security updates for the critical remote code execution vulnerability known as Spring4Shell, which impacts several of its cloud computing and virtualization products.

https://external-preview.redd.it/-ru7XtDLTFS68KeQydk4TBmngjUkPakPCNsC7cHBtCE.jpg?width=640&crop=smart&auto=webp&s=ddfbac0f4179196f78d58e64e7d7321040218535 submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

What are the best pen testing tools used for Microsoft 365?
https://www.reddit.com/r/Pentesting/comments/twmtyi/what_are_the_best_pen_testing_tools_used_for/

My company just bought a Microsoft 365 that hosts emails, communications, and documents for the whole company. Now our partner asked us to provide a pentest document to prove that our system is secured and pen-tested on yearly basis. I know that Azure won't or strictly allow a 3rd party to pentest their cloud environment (https://www.microsoft.com/en-us/msrc/pentest-rules-of-engagement). So I don't know if I can provide the MSFT's pentest document or if there is any 3rd party service that can provide the service. Thanks for advice submitted by /u/hvhung (https://www.reddit.com/user/hvhung)
[link] (https://www.reddit.com/r/Pentesting/comments/twmtyi/what_are_the_best_pen_testing_tools_used_for/) [comments] (https://www.reddit.com/r/Pentesting/comments/twmtyi/what_are_the_best_pen_testing_tools_used_for/)

___________________________
@hacking_Attack
@Hacking_Video

Spoof as another Facebook user to report an impostor account

When I was helping someone take down a poser/impostor account. I tried to check the request body on what’s going on behind the scene. The…Continue reading on Medium »
Read more...

Hacking on Medium
An Interesting Rate Limit Bypass..

I want to share a simple vulnerability that I find most of the time when I do bug bounty.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to protect from Spring4Shell

What is Spring4Shell?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Authentication Bypass using OTP

https://cdn-images-1.medium.com/max/852/1*oU6m2MBRk81kEqS5ITohZQ.png
What is Authentication Bypass: Authentication Bypass is a dangerous vulnerability that is found in Web-Applications. Attackers can bypass…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video