Hacking on Medium
Can You Be Tracked with a VPN?

It is not impossible that you can get tracked with a VPN. Free VPNs often cooperate with advertisers to collect user data. That is to say…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Found lost camera

Hi all, yesterday I found a camera on the beach. It was late evening and there was none around, so I decided to turn it on and I saw a picture of the owner and his wife ( or the other way around). I decided to pick it up with the intention of finding the owner.....

I would love to find the owner of this camera, but it sounds difficult. I was thinking about using Facebook AI facial recognition but I discovered that the AI facial recognition feature has been removed.

Is there any way I can find the owner?

submitted by /u/matteo94s
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
why do we never read about hackers being caught?

Every day, there must be hundreds if not thousands of "hacks". Even if it's a simple sql injection found by a google dork, it's still criminal and happens multiple times a day. And since a lot of the "small" hacks are done by newbie skids, catching them wont be that hard.

So is it just lack of focus from the authorities or is it that it just doesn't reach the headline in newspapers?

submitted by /u/Error_co-Id10T
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Do we have any more news on the Max headroom case?

Did we find more evidence? And did we find the guy who did this?

submitted by /u/Jean0406Alix
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CVE-2022–29622: (In)vulnerability Analysis
https://www.reddit.com/r/Pentesting/comments/v6rc41/cve202229622_invulnerability_analysis/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/JohnKeymanUK (https://www.reddit.com/user/JohnKeymanUK)
[link] (https://medium.com/@zsolt.imre/cve-2022-29622-in-vulnerability-analysis-5cf783c3721) [comments] (https://www.reddit.com/r/Pentesting/comments/v6rc41/cve202229622_invulnerability_analysis/)

___________________________
@hacking_Attack
@Hacking_Video

Sentinel-Attack - Tools To Rapidly Deploy A Threat Hunting Capability On Azure Sentinel That Leverages Sysmon And MITRE ATT&CK
http://www.kitploit.com/2022/06/sentinel-attack-tools-to-rapidly-deploy.html

___________________________
@hacking_Attack
@Hacking_Video

Sentinel ATT&CK aims to simplify (https://www.kitploit.com/search/label/Simplify) the rapid deployment of a threat hunting (https://www.kitploit.com/search/label/Threat%20Hunting) capability that leverages Sysmon (https://www.kitploit.com/search/label/Sysmon) and MITRE ATT&CK (https://attack.mitre.org/) on Azure Sentinel. DISCLAIMER: This tool requires tuning and investigative trialling to be truly effective in a production environment.

___________________________
@hacking_Attack
@Hacking_Video

Overview Sentinel ATT&CK provides the following tools: An ARM template (https://github.com/BlueTeamToolkit/sentinel-attack/blob/master/azuredeploy.json) to automatically deploy Sentinel ATT&CK to your Azure environment A Sysmon configuration file (https://github.com/BlueTeamToolkit/sentinel-attack/blob/master/sysmonconfig.xml) compatible with Azure Sentinel and mapped to specific ATT&CK techniques A Sysmon log parser (https://github.com/BlueTeamToolkit/sentinel-attack/blob/master/parser/Sysmon-OSSEM.txt) mapped against the OSSEM (https://github.com/Cyb3rWard0g/OSSEM) data model 117 ready-to-use Kusto detection rules (https://github.com/BlueTeamToolkit/sentinel-attack/tree/master/detections) covering 156 ATT&CK techniques A Sysmon (https://github.com/BlueTeamToolkit/sentinel-attack/tree/master/hunting)threat (https://www.kitploit.com/search/label/Threat) hunting workbook inspired by the Threat Hunting App (https://splunkbase.splunk.com/app/4305/) for Splunk (https://www.kitploit.com/search/label/Splunk) to help simplify threat hunts A Terraform (https://www.terraform.io/) script to provision a lab to test Sentinel ATT&CK Comprehensive guidance to help you use the materials in this repository Usage Head over to the WIKI (https://github.com/BlueTeamLabs/sentinel-attack/wiki) to learn how to deploy and run Sentinel ATT&CK. A copy of the DEF CON 27 cloud village presentation introducing Sentinel ATT&CK can be found here (https://2019.cloud-village.org/#talks?olafedoardo) and here (https://github.com/BlueTeamToolkit/sentinel-attack/tree/master/docs/DEFCON_attacking_the_sentinel.pdf). Contributing As this repository is constantly being updated and worked on, if you spot any problems we warmly welcome pull requests or submissions on the issue tracker. Authors and contributors Sentinel ATT&CK is built with Edoardo Gerosa Special thanks go to the following contributors: Olaf Hartong  Ashwin Patil  Mor Shabi  Adrian Corona (https://github.com/temores)

Download Sentinel-Attack (https://github.com/BlueTeamLabs/sentinel-attack)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Snowflake Debuts Cybersecurity Workload to Aid Visibility, Automation

The tool underpins cybersecurity capabilities including SIEM, SOAR, compliance automation, and vulnerability management.

Dark Reading: Attacks/Breaches
CISA Challenges Partners and Public to Push for 'More Than a Password' in New Social Media Campaign

Nation’s cyber defense agency urges America to enable multifactor authentication.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Forescout Announces Intent to Acquire Cysiv to Deliver Data-Powered Threat Detection and Response

Acquisition will leverage Forescout’s automated cybersecurity with Cysiv's cloud-native platform to deliver data-powered analytics for 24/7 threat detection and response.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Bugcrowd Expands Pen Testing Solutions with New Platform Services

Basic Pen Tests support rapid, basic vulnerability discovery, while Standard Pen Tests provide compliance-driven testing to meet requirements for Web apps, APIs, and networks.

___________________________
@hacking_Attack
@Hacking_Video