hacking: security in practice
WhatsApp vulnerability?

Is there a WhatsApp vulnerability to access random WhatsApp's groups ?

I was in a group and random users were constantly entering the group with no invite, they start selling Bitcoins and stuff, the admin of the group ban the number but they keep coming with random phone numbers.

How was this posible?

submitted by /u/Cover_Prize
[link] [comments]

hacking: security in practice
Is there a bot to simulate clearnet activity? Like maybe playing back human traces?

is there anything like it? Ideally it would just run in CLI and browse youtube/mainstream sites and have same mouse/click behaviour to have in parallel while running tor on some bridges

Of course you'd have to keep under control the data leak from clearnet browsing, any consideration is welcome!

is there anything like this?

submitted by /u/idocodesometime
[link] [comments]

hacking: security in practice
US seizes RaidForums, the “go-to” site for hackers selling stolen login details – Ars Technica

https://external-preview.redd.it/TBR0o-cWIhSyLI2kpfF7tIKt0_Zvm2AzQfzldpC6-40.jpg?width=640&crop=smart&auto=webp&s=08ab9801822a26dd67e49f458f8352a9dfd72f29 submitted by /u/darksieth99
[link] [comments]

hacking: security in practice
Accessing video feed from wifi connected camera

Im working on a side project trying to repurpose an old camera from a junk drone into a security camera for the house. I got the hardware side working well and i get a connection and footage from the manufacturers app, but that only works on mobile. I want to get this working from the home computer and build my own web app to access the camera. Ive noticed that the only open port on the camera is 2020 which is hosting a server (i forget the exact type at the moment) and its transfering the footage over UDP. Does anyone know any decent ways of accessing the footage outside their app? Or are there any tools that are good at reverse engineering their app to figure out hownit works? Any info would be amazing!

submitted by /u/floatingcoffeepoop
[link] [comments]

hacking: security in practice
Is it remotely possible to get into someone's phone with their phone number, or into their PC with their PC name?

Probably some dumb questions, but wanted to get them clarified.

submitted by /u/LaughingButter13
[link] [comments]

Dark Reading: Attacks/Breaches
Russian Group Sandworm Foiled in Attempt to Disrupt Ukraine Power Grid

The attack involved use of a new version of Industroyer tool for manipulating industrial control systems.

Dark Reading: Attacks/Breaches
Microsoft Patches Windows Flaw Under Attack and Reported by NSA

"Go patch your systems before" the exploit spreads more widely, ZDI warns.

Dark Reading: Attacks/Breaches
Microsoft Plans Windows Auto-Update Service for Enterprises

Starting in July, the Windows Autopatch service will automatically patch all software bugs, including security updates, for Windows 10/11 Enterprise E3 customers, Microsoft says.

Dark Reading: Attacks/Breaches
Criminal IP Cybersecurity Search Engine Launches First Beta Test

Criminal IP visualizes all IT assets connected to the Internet based on IP addresses held by companies and individuals.

Dark Reading: Attacks/Breaches
United States Leads Seizure of One of the World’s Largest Hacker Forums and Arrests Administrator

Court records unsealed Tuesday indicate that the United States recently obtained judicial authorization to seize three domains that long hosted the RaidForums website.

Dark Reading: Attacks/Breaches
Datto to be Acquired by Kaseya for $6.2 Billion

Funding led by Insight Partners.

Dark Reading: Attacks/Breaches
Intertrust Adds Security for IoT Devices in Zero-Trust Architectures to Intertrust Platform

New features provide for end-to-end security and interoperability between data operations and multivendor IoT devices.

hacking: security in practice
Russia-linked Sandworm APT targeted energy facilities in Ukraine with a new strain of the Industroyer ICS malware and a new version of the CaddyWiper to target Windows-based systems, while hit server equipment running Linux operating systems with ORCSHRED, SOLOSHRED, AWFULSHRED desruptive scripts.

https://external-preview.redd.it/XfL5BGkloZBFHCXUG5XIFQd6xn0LFmvMccZAjRETdMI.jpg?width=216&crop=smart&auto=webp&s=d8ff11c59934f21fb81c1cfe8a15657d79a2b345 submitted by /u/Late_Ice_9288
[link] [comments]

hacking: security in practice
Secure AWS Account Root User with U2F Keys

submitted by /u/hoopslip
[link] [comments]