Dark Reading: Attacks/Breaches
Onapsis Announces New Offering to Jumpstart Security for SAP Customers

Company delivers new vulnerability management offering to help resource-constrained organizations combat increasing attacks on mission-critical SAP applications .

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
5-Buck DCRat Malware Foretells a Worrying Cyber Future

The Dark Crystal remote access Trojan (aka DCRat) breaks a few stereotypes, with coding done by a solo developer, using an obscure Web language and offering it at a frighteningly low price.

Dark Reading: Attacks/Breaches
Arctic Wolf Launches Arctic Wolf Labs Focused on Security Operations Research and Intelligence Reporting

New research-focused division focused on advancing innovation in the field of security operations.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cybercriminals Are Increasingly Exploiting Vulnerabilities in Windows Print Spooler

Kaspersky researchers discovered that cybercriminals made approximately 65,000 attacks between July 2021 and April 2022.

___________________________
@hacking_Attack
@Hacking_Video

How to best get started with pentesting both learning and with tooling and setting up a suite
https://www.reddit.com/r/Pentesting/comments/umka8w/how_to_best_get_started_with_pentesting_both/

I’ve done like one or two of the easier hackthebox machines and feel like I was definitely a bit over my head. I also have heard that it is best practice to not run any of the tools directly on your OS. I’m curious what the standard practices are. Should I make a kali bootable usb, or a VM, or something else? Also, I want to learn pentesting for both offensive and defensive purposes. I’d like to host my own webapp but want to be aware of potential attack vectors. I know this is a lot but I figured there might be some professionals in this sub with some advice. submitted by /u/regular_guy_anon (https://www.reddit.com/user/regular_guy_anon)
[link] (https://www.reddit.com/r/Pentesting/comments/umka8w/how_to_best_get_started_with_pentesting_both/) [comments] (https://www.reddit.com/r/Pentesting/comments/umka8w/how_to_best_get_started_with_pentesting_both/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
When a responsible disclosure goes south

https://cdn-images-1.medium.com/max/600/0*z4zIsSjXjGC8F4Ir.jpg
Screwing up a disclosure

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Governance Hacking: Swallowing Your Own Poison Pill

https://cdn-images-1.medium.com/max/1280/1*suZrQxCxpWOViO-xJHB-_Q.jpeg
Beanstalk lost 76M in digital assets because of a governance flaw, and your DAO can too.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ra Write-Up | Português-Brasil

https://cdn-images-1.medium.com/max/604/1*Bj3veqrxdlpgAUYMFDlLVw.png
Mais uma vez lidando com Pentest em Active Directory. Se lembrar de cada parte em um Pentest em AD, tentando trazer para a realidade, nada…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
RCE via Dependency Confusion

https://cdn-images-1.medium.com/max/1923/1*GxN5JF7wG_6lamkrt8209w.png
Hey there, I am Samrat Gupta aka Sm4rty, a Security Researcher and a Bug Bounty Hunter. In this Blog I will be sharing my recent finding…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Rash Of Cyber Attacks In 2020

https://cdn-images-1.medium.com/max/1920/1*V3eMOIR0XGCJG1AXhUb0NA.jpeg
Cyber security attacks are nothing new. As long as networks have existed, there have been network-based attacks. As long as secure…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
might be wrong sub but power draw if usb killer?

I'm designing a DIY project and trying to make it resistant to the usb killer, shorts, etc. I only plan on having one type of device plugged into the port which should only draw around 10ma from the usb port. Would the usb killer be able to charge from so little power if I were to limit the power supplied to the usb power rails?

submitted by /u/temmiesayshoi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is this game hackable?

Hey I was wondering if this game is hackable? I think it’s on a private server but was curious if anyone knows if there would be a way to get currency on it for free/ hack the mini games to get more payout or something

everskies.com

submitted by /u/moonboo987
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Found strange website when I miss spelt...

I remember it the past some websites from 4chan maybe this is a new one :D

pfs.io miss spelt from ipfs.io.

submitted by /u/Toni1012
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hackers are actively exploiting BIG-IP vulnerability with a 9.8 severity rating

https://external-preview.redd.it/FKUsR8c0TkBneE6jltFxGC7SCMJh9A-c0r-m9lXaleo.jpg?width=640&crop=smart&auto=webp&s=71a216234dc92a4b36ebf12a07042c6900c71fda submitted by /u/Minimum-Tomato-7379
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Strange Link (Don't Open)

So I receive a text message telling me I got a package waiting and I can resolve the problem on the following link.

http://5c1o.com/9Rsi0r

It's look like a shrinked link, so me being curious scan the URL and it seems it hasn't been reported, proceed to a virtual machine and open it to see how and what happened. The link opens por like 1 seconds a gift page and then loads a Google page (redirect) from what I have found no malware was installed and I can't ping the URL.

Any Ideas of what It can be?

submitted by /u/Cover_Prize
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video