hacking: security in practice
Is it remotely possible to get into someone's phone with their phone number, or into their PC with their PC name?

Probably some dumb questions, but wanted to get them clarified.

submitted by /u/LaughingButter13
[link] [comments]

Dark Reading: Attacks/Breaches
Russian Group Sandworm Foiled in Attempt to Disrupt Ukraine Power Grid

The attack involved use of a new version of Industroyer tool for manipulating industrial control systems.

Dark Reading: Attacks/Breaches
Microsoft Patches Windows Flaw Under Attack and Reported by NSA

"Go patch your systems before" the exploit spreads more widely, ZDI warns.

Dark Reading: Attacks/Breaches
Microsoft Plans Windows Auto-Update Service for Enterprises

Starting in July, the Windows Autopatch service will automatically patch all software bugs, including security updates, for Windows 10/11 Enterprise E3 customers, Microsoft says.

Dark Reading: Attacks/Breaches
Criminal IP Cybersecurity Search Engine Launches First Beta Test

Criminal IP visualizes all IT assets connected to the Internet based on IP addresses held by companies and individuals.

Dark Reading: Attacks/Breaches
United States Leads Seizure of One of the World’s Largest Hacker Forums and Arrests Administrator

Court records unsealed Tuesday indicate that the United States recently obtained judicial authorization to seize three domains that long hosted the RaidForums website.

Dark Reading: Attacks/Breaches
Datto to be Acquired by Kaseya for $6.2 Billion

Funding led by Insight Partners.

Dark Reading: Attacks/Breaches
Intertrust Adds Security for IoT Devices in Zero-Trust Architectures to Intertrust Platform

New features provide for end-to-end security and interoperability between data operations and multivendor IoT devices.

hacking: security in practice
Russia-linked Sandworm APT targeted energy facilities in Ukraine with a new strain of the Industroyer ICS malware and a new version of the CaddyWiper to target Windows-based systems, while hit server equipment running Linux operating systems with ORCSHRED, SOLOSHRED, AWFULSHRED desruptive scripts.

https://external-preview.redd.it/XfL5BGkloZBFHCXUG5XIFQd6xn0LFmvMccZAjRETdMI.jpg?width=216&crop=smart&auto=webp&s=d8ff11c59934f21fb81c1cfe8a15657d79a2b345 submitted by /u/Late_Ice_9288
[link] [comments]

hacking: security in practice
Secure AWS Account Root User with U2F Keys

submitted by /u/hoopslip
[link] [comments]

hacking: security in practice
Official Phishing for Microsoft Azure Documentation

submitted by /u/BrodaNoel
[link] [comments]

hacking: security in practice
Do you guys have any download links for some zip bombs?

I’m looking for a zip bomb so I can use it on an old PC of mine to demonstrate its affects to a few curious friends. Does anyone have any zip bomb download links?

submitted by /u/SkylerWasTakenTwice
[link] [comments]

[2/3] XSS Through The Front-Door @ Gitlab
https://medium.com/@_ip_/2-3-xss-through-the-front-door-gitlab-fc4b6799e743?source=rss------bug_bounty-5

Sometimes XSS flaws are met with shrugs. They’re an incredibly common vulnerability in web applications even today with so many…Continue reading on Medium » (https://medium.com/@_ip_/2-3-xss-through-the-front-door-gitlab-fc4b6799e743?source=rss------bug_bounty-5)