Dark Reading: Attacks/Breaches
Open Source Software Security Begins to Mature

Only about half of firms have an open source software security policy in place to guide developers in the use of components and frameworks, but those that do exhibit better security.

Dark Reading: Attacks/Breaches
AI Is Not a Security Silver Bullet

AI can help companies more effectively identify and respond to threats, as well as harden applications.

Dark Reading: Attacks/Breaches
56 Vulnerabilities Discovered in OT Products From 10 Different Vendors

Deep-dive study unearthed security flaws that could allow remote code execution, file manipulation, and malicious firmware uploads, among other badness.

Dark Reading: Attacks/Breaches
Reducing Risk With Zero Trust

Zero trust isn’t just about authentication. Organizations can combine identity data with business awareness to address issues such as insider threat.

I Found IDOR In Private Program Via API
https://medium.com/@mydudehello91/i-found-idor-in-private-program-via-api-875da81d4a54?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

WHOAMI:Continue reading on Medium » (https://medium.com/@mydudehello91/i-found-idor-in-private-program-via-api-875da81d4a54?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Telangana, Andhra Pradesh, Karnataka, Himachal Pradesh & Kerala — All Government bus services were…
https://infosecwriteups.com/telangana-andhra-pradesh-karnataka-himachal-pradesh-kerala-all-government-bus-services-were-885b44c21a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi Hackers! Welcome back to my new write-up. My name is Krishnadev P Melevila. I am a 20-Year-old Self-Learned Ethical Hacker.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/telangana-andhra-pradesh-karnataka-himachal-pradesh-kerala-all-government-bus-services-were-885b44c21a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to use a VPN to keep your online privacy protected

https://cdn-images-1.medium.com/max/600/1*Y401FUWJTWE0WtNQV0ua-w.png
1.What is a VPN and what does it do?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: Upload Vulnerabilities — Walkthrough

https://cdn-images-1.medium.com/max/1980/1*mfpro_Nzul5v1njYqUjzzg.png
Hi! I am making these walkthroughs to keep myself motivated to learn cyber security, and ensure that I remember the knowledge gained by…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
۸ کلاهبرداری رایج بیت کوین و نحوه جلوگیری از آنها​

https://cdn-images-1.medium.com/max/640/0*feaMBu0xJOL2sZ7k.jpg
کلاهبرداری های رایج بیت کوین و نحوه جلوگیری از آنها

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
An extra photon

https://cdn-images-1.medium.com/max/2600/1*gTKpW04SfIdZp-I_rmGzag.jpeg
A short fiction-now future-fact story

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Msprobe - Finding All Things On-Prem Microsoft For Password Spraying And Enumeration

https://blogger.googleusercontent.com/img/a/AVvXsEjqZLL3S1uWaZasPCU44aX8p703eJtkSajz4Tg14nbMiiw5cPLIuJNsdOfwDttJw67bKcqdUTbM3cMpM4VCsWrGGKMXguHGgXVqMz_8EFdpexSX1XH1gHfA8gvIBtUbBLeUGGTLUxTpb5f6CjEYerRxpImJ1X_8ql7Q1AS9vOuqRLloZL83dJkThQX0=w640-h438

Finding all things on-prem Microsoft for password spraying and enumeration.

The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft solutions. Screenshots of the tool in action are below:
Installing

Install the project using pipx

pipx install git+https://github.com/puzzlepeaches/msprobe.git


Usage

The tool has four different modules that assist with the discovery of on-prem Microsoft products:

* Exchange
* RD Web
* ADFS
* Skype for Business

The help menu and supported modules are shown below:

Usage: msprobe [OPTIONS] COMMAND [ARGS]...

Find Microsoft Exchange, RD Web, ADFS, and Skype instances

Options:
--help Show this message and exit.

Commands:
adfs Find Microsoft ADFS servers
exch Find Microsoft Exchange servers
full Find all Microsoft supported by msprobe
rdp Find Microsoft RD Web servers
skype Find Microsoft Skype servers


Examples

Find ADFS servers associated with apex domain:

msprobe adfs acme.com


Find RD Web servers associated with apex domain with verbose output:

msprobe rdp acme.com -v


Find all Microsoft products hostsed on-prem for a domain:

msprobe full acme.com


Coming Soon

* Full wiki for each module
* Fixes for lxml based parsing in RD Web module

Acknowledgements

* @p0dalirius for RDWArecon
* @b17zr for the ntlm_challenger.pyscript
* @ReverendThing for his project Carnivore and it's included subdomains
* @busterbcook and their tool msmailprobe heavily influenced the creation of this project
Download Msprobe

___________________________
@hacking_Attack
@Hacking_Video

Improving AI-based defenses to disrupt human-operated ransomware
https://www.reddit.com/r/redteamsec/comments/vhgs3j/improving_aibased_defenses_to_disrupt/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/ImprovingAIDefenses) [comments] (https://www.reddit.com/r/redteamsec/comments/vhgs3j/improving_aibased_defenses_to_disrupt/)

___________________________
@hacking_Attack
@Hacking_Video