Dark Reading: Attacks/Breaches
ByteChek Founder AJ Yawn Brings Discipline to Everything He Does

Security Pro File: The former Army captain, whose security startup is on an upward trajectory, works hard to "make compliance suck less."

How a YouTube Video lead to pwning a web application via SQL Injection worth $4324 bounty
https://medium.com/@k4k4r07/how-a-youtube-video-lead-to-pwning-a-web-application-via-sql-injection-worth-4324-bounty-285f0a9b9f6c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This write-up is regarding one of my findings on a private program on HackerOne. As this is a private program so I have made certain…Continue reading on Medium » (https://medium.com/@k4k4r07/how-a-youtube-video-lead-to-pwning-a-web-application-via-sql-injection-worth-4324-bounty-285f0a9b9f6c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How a YouTube Video lead to pwning a web application via SQL Injection worth $4324 bounty

This write-up is regarding one of my findings on a private program on HackerOne. As this is a private program so I have made certain…Continue reading on Medium »
Read more...

Hacking on Medium
What you need to know about the CEH v11 (update 2022)

https://cdn-images-1.medium.com/max/639/0*8w-ZRxv8fcNhvn9r.jpg
The Certified Ethical Hacker (CEH) accreditation from EC-Council is a well-respected and well-trusted ethical hacking program that has…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Android security — $6,337 vulnerability in basecamp

https://cdn-images-1.medium.com/max/1024/1*UvPMD9Azvrkg1NhEbKdWmA.png
Skip to the report: https://hackerone.com/reports/1372667

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How a YouTube Video lead to pwning a web application via SQL Injection worth $4324 bounty

https://cdn-images-1.medium.com/max/1527/1*M7-knbVuX2Nrv3PHpLmOiw.png
This write-up is regarding one of my findings on a private program on HackerOne. As this is a private program so I have made certain…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
You got your code in my data, or, how hacks work.

https://cdn-images-1.medium.com/max/668/0*z6luqit0u3afEPbl
Once upon a time, hacking was easy and cheap entertainment, and we did it all the time:

Continue reading on Level Up Coding »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Okta (IAM)Experiences a Security Breach 2022 — Investigation found Massive Loss

https://cdn-images-1.medium.com/max/738/1*WzWHlLn3ygBDa5LZQaJMcA.png
Identity and Access Management (IAM) solutions have become part and parcel of every enterprise infrastructure’s technology landscape…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Robinhood hacked?

When I provide an email address to a website, I create a unique email address just for that website (I do NOT give that specific address to any other company). I do this so I can trace from where spammers got my email address from.

So, today I received an email from "MetaMask" to "Verify your Wallet" with a cc-community dot net link URL and it used the email address I ONLY gave to robinhood to send the email to me.

I never heard of, or dealt with either the company "MetaMask" or that cc-domain name.

So, the ONLY way the sender of this email would know about that specific email address is if either Robinhood gave or sold it to them, or that Robinhood's customer database was hacked.

UPDATE: I see that a hack of robinhood was reported in the media back in 11/2021. So just let this post be a warning to look out for these bogus Phishing emails.

submitted by /u/MrEngineerMind
[link] [comments]

hacking: security in practice
Hacked pos

So what ended up happening was my boss ordered a new pos machine in the mail and when it came here it was hacked by someone and took 8000 2 different 4000 transactions how could that be if you never had the pos in the first place and set it up could it been the dilivery driver or?

submitted by /u/ubvn
[link] [comments]

hacking: security in practice
Harassment

Hello, there's someone who's been harassing my sister for a while now.
originally I guess they were just sending messages to her but when she blocked them they made another account and went around sending messages to all her friends including me.

I'm not really computer saavy, and all I wanna know is who this person is so she can confront them

submitted by /u/ShriKaav
[link] [comments]

Should I first work as a web/backend developer before jumping into web app pentesting?
https://www.reddit.com/r/Pentesting/comments/tzbbg0/should_i_first_work_as_a_webbackend_developer/

submitted by /u/mirceap24 (https://www.reddit.com/user/mirceap24)
[link] (https://www.reddit.com/r/Pentesting/comments/tzbbg0/should_i_first_work_as_a_webbackend_developer/) [comments] (https://www.reddit.com/r/Pentesting/comments/tzbbg0/should_i_first_work_as_a_webbackend_developer/)

af-shellhunter-auto-shell-lookup

AF-ShellHunter: Auto shell lookupContinue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Software-as-a-Service Rules the Cloud

Half of the IT professionals surveyed who use cloud services also employ infrastructure-as-a-service and platform-as-a-service.

Dark Reading: Attacks/Breaches
BakerHostetler Launches 2022 Data Security Incident Response Report — Resilience And Perseverance

Ransomware remained the most prevalent and impactful type of data security incident.

Dark Reading: Attacks/Breaches
Microsoft Sinkholes Russian Hacking Group's Domains Targeting Ukraine

The operation aimed to disrupt cyber espionage activity a Russian GRU group was using for the Ukraine war.

Cloak - A Censorship Circumvention Tool To Evade Detection By Authoritarian State Adversaries
http://www.kitploit.com/2022/04/cloak-censorship-circumvention-tool-to.html