Dark Reading: Attacks/Breaches
greymatter.io Closes $7.1 Million Series A to Meet Rising Need for Its Enterprise Microservices Platform

Elsewhere Partners invests in proven service mesh and API management innovator as it grows team and breaks into new markets.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[HTB] Mirai靶機 Write-Up

https://cdn-images-1.medium.com/max/1194/1*j-iXtoRoYH9G6a6ctJEfkg.png
Hack The Box Mirai machine Write-Up

Continue reading on 璿的筆記 »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackthebox : Pandora

https://cdn-images-1.medium.com/max/1593/1*opwPYa3MLP5xnHRGq6mCJQ.png
Hello everyone, today i’ll be walking you through the amazing hackthebox machine “Pandora”.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SIGNS YOU’VE BEEN HACKED

https://cdn-images-1.medium.com/max/750/1*nXHqDH2KLSKG24gTSApcLg.png
Most computer users dread being hacked. Many feel odd behavior or mistakes on their PC are signs of hacker control. But are hackers truly…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
10 Elemental Cybersecurity Insights That Can Help Your Business Make Better Decisions

https://cdn-images-1.medium.com/max/1584/1*E7s532Fx-SUO0W5_8KzlJQ.gif
Telecommunication suppliers around the world hold a treasure of cybersecurity data from their vast networks and customer bases. Members of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Rules Of Engagement
https://www.reddit.com/r/redteamsec/comments/u40hpp/rules_of_engagement/

submitted by /u/divyaguptaa (https://www.reddit.com/user/divyaguptaa)
[link] (https://www.komodosec.com/rules-of-engagement-redteam) [comments] (https://www.reddit.com/r/redteamsec/comments/u40hpp/rules_of_engagement/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The threat of a global cyber warfare

https://external-preview.redd.it/ODQ-lNaqyr0_F9vSrK2pNWqQviwPCG5W6No3va4L7L0.jpg?width=320&crop=smart&auto=webp&s=825d7906ea0ecfbf3cf53fbb2cbc33f894120180 submitted by /u/OkFaithlessness2414
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Demystifying iOS Code Signature
https://www.reddit.com/r/redteamsec/comments/u41v6n/demystifying_ios_code_signature/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://medium.com/csit-tech-blog/demystifying-ios-code-signature-309d52c2ff1d) [comments] (https://www.reddit.com/r/redteamsec/comments/u41v6n/demystifying_ios_code_signature/)

___________________________
@hacking_Attack
@Hacking_Video

United Nations bug bounty[writeup]

Let’s get to the point, how can you hack the UN and get your name featured in the prestigious hall of fame? Lemme show you a guaranteed…Continue reading on Medium »
Read more...

United Nations bug bounty[writeup]
https://debprasadbanerjee502.medium.com/united-nations-bug-bounty-writeup-4bcfdefbb8d3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Let’s get to the point, how can you hack the UN and get your name featured in the prestigious hall of fame? Lemme show you a guaranteed…Continue reading on Medium » (https://debprasadbanerjee502.medium.com/united-nations-bug-bounty-writeup-4bcfdefbb8d3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

[3/3] Cache Poisoning & Lateral Movement @ GitLab
https://medium.com/@_ip_/3-3-cache-poisoning-lateral-movement-gitlab-9c6288708576?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Around 6 months ago I spent a few weeks reviewing Gitlab — I was particularly interested in how their Continuous Integration/Continuous…Continue reading on Medium » (https://medium.com/@_ip_/3-3-cache-poisoning-lateral-movement-gitlab-9c6288708576?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[3/3] Cache Poisoning & Lateral Movement @ GitLab

https://cdn-images-1.medium.com/max/600/1*GbQsSrKngYgMmQOG44coJg.png
Around 6 months ago I spent a few weeks reviewing Gitlab — I was particularly interested in how their Continuous Integration/Continuous…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
United Nations bug bounty[writeup]

https://cdn-images-1.medium.com/max/1649/1*gfGBA0cZxi_odaZwXz7NfQ.png
Let’s get to the point, how can you hack the UN and get your name featured in the prestigious hall of fame? Lemme show you a guaranteed…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

[3/3] Cache Poisoning & Lateral Movement @ GitLab

Around 6 months ago I spent a few weeks reviewing Gitlab — I was particularly interested in how their Continuous Integration/Continuous…Continue reading on Medium »
Read more...

Black Hat Ethical Hacking
Microsoft Zero-Days, Wormable Bugs Spark Concern

Microsoft Zero-Days, Wormable Bugs Spark ConcernPost Views: 31
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
Microsoft has released patches for 128 security vulnerabilities for its April 2022 monthly scheduled update – ten of them rated critical (including three wormable code-execution bugs that require no user interaction to exploit).
There are also two important-rated zero-days that allow privilege escalation, including one listed as under active exploit.

The bugs in the update are found across the portfolio, including in Microsoft Windows and Windows Components, Microsoft Defender and Defender for Endpoint, Microsoft Dynamics, Microsoft Edge (Chromium-based), Exchange Server, Office and Office Components, SharePoint Server, Windows Hyper-V, DNS Server, Skype for Business, .NET and Visual Studio, Windows App Store and Windows Print Spooler Components.

“This large volume of patches hasn’t been seen since the fall of 2020. However, this level is similar to what we saw in the first quarter of last year,” Dustin Childs, researcher at Trend Micro’s Zero Day Initiative, said in a blog breaking down the fixes.
See Also: Complete Offensive Security and Ethical Hacking Course
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Zero-Day PatchesThe vulnerability that’s been exploited in the wild ahead of patching allows privilege escalation, and is tracked as CVE-2022-24521. It rates 7.8 out of 10 on the CVSS vulnerability-severity scale. It’s listed as a “Windows Common Log File System Driver Execution Vulnerability,” and was reported to Microsoft by the National Security Agency.

“It’s not stated how widely the exploit is being used in the wild, but it’s likely still targeted at this point and not broadly available,” Childs noted. “Go patch your systems before that situation changes.”

Researchers noted that attackers are likely pairing it with a separate code-execution bug in their campaigns. For that reason, Immersive Labs’ Kevin Breen, director of cyber-threat research, places the actively exploited bug at the top of the priority list for patching.

“Being the type of vulnerability for escalating privileges, this would indicate a threat actor is currently using it to aid lateral movement to capitalize on a pre-existing foothold,” he explained.

The second zero-day is found in the Windows User Profile Service, and is tracked as CVE-2022-26904.

It also allows privilege escalation, and rates a CVSS score of 7. Even though it’s listed as exploitation more likely, it has a high attack complexity, Microsoft noted in its advisory, because “successful exploitation of this vulnerability requires an attacker to win a race condition.”

Even so, researchers at Tripwire noted that exploit code is available for the bug, including in the Metasploit framework.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH See Also: Offensive Security Tool: Scapy Critical Concerns for AprilOut of the critical flaws, all of which allow remote code-execution (RCE), researchers flagged a bug that could allow for self-propagating exploits (CVE-2022-26809) as being of the most concern.

It exists in the Remote Procedure Call (RPC) Runtime Library, and rates 9.8 out of 10 on the CVSS scale, with exploitation noted as more likely. If exploited, a remote attacker could execute code with high privileges.

Danny Kim, principal architect at Virsec, noted that the vulnerability is specifically found in Microsoft’s Server Message Block (SMB) fu[...]

___________________________
@hacking_Attack
@Hacking_Video