Dark Reading: Attacks/Breaches
Ex-CIA Programmer Found Guilty of Stealing Vault 7 Data, Giving It to Wikileaks

Joshua Schulte has been convicted for his role in the Vault 7 Wikileaks data dump that exposed invasive US cyber intelligence tactics.

Dark Reading: Attacks/Breaches
How Attackers Could Dupe Developers into Downloading Malicious Code From GitHub

Developers need to be cautious about whom they trust on GitHub because it's easy to establish fake credibility on the platform, security vendor warns.

Dark Reading: Attacks/Breaches
What Are the Risks of Employees Going on a 'Hybrid Holiday'?

As more employees plan on taking longer holidays and working remotely from the destination for part of that time, organizations have to consider the risks. Like Wi-Fi networks.

Dark Reading: Attacks/Breaches
Netwrix Auditor Bug Could Lead to Active Directory Domain Compromise

IT asset tracker and auditor software has a critical issue with insecure object deserialization that could allow threat actors to execute code, researchers say.

Hacking on Medium
HackTheBox’s “Blue” Writeup

https://cdn-images-1.medium.com/max/702/1*1y9cleAmPXdJAxYpBV152g.png
HackTheBox’s “Blue” is a neat little machine that teaches you how easy, and therefore scary, the NSA developed windows exploit “MS17–010”…

Continue reading on System Weakness »

Hacking on Medium
How I got CEH (Certified Ethical Hacker) Master Certified. (Resources included)

https://cdn-images-1.medium.com/max/1385/1*cE0wh7lE1x1fPNRZh-iFvQ.jpeg
Hello Infosec Family. I am Shubham Ghosh, an Information Security Analyst with an experience of 2+ years from Jharkhand, India. This…

Continue reading on Medium »

Hacking on Medium
Mantis Botnet detrás del mayor ataque HTTPS DDoS dirigido a clientes de Cloudflare

https://cdn-images-1.medium.com/max/1640/0*1fpJokczUjywpS8O
PUBLICADO EN 15 JULIO, 2022 EHACKING

Continue reading on Medium »

Null to Bug: Insecure Direct Object Reference
https://medium.com/@dajon/null-to-bug-insecure-direct-object-reference-4cf96c6eeb0f?source=rss------bug_bounty-5

What is Null to Bug?Continue reading on Medium » (https://medium.com/@dajon/null-to-bug-insecure-direct-object-reference-4cf96c6eeb0f?source=rss------bug_bounty-5)

hacking: security in practice
How to figure out who hacked my LinkedIn account?

Someone recently hacked into my LinkedIn account to post anti-vaxxer comments on a company's vaccine policy post. This has caused me to lose connections. As someone who believes in science I found it to be very disturbing. Is there a way to figure out who may be the perpetrator?

I do have a former friend who is an anti-vaxxer. We have recently fallen out because she wouldn't stop texting my husband, so I think she is a suspect, but she is an unemployed accountant so I don't know if this is something she is capable of doing.

submitted by /u/Adventurous_Dog1116
[link] [comments]

hacking: security in practice
is wpa and wpa2 possible to crack nowadays ;

i old-fashioned to do wep stuff a while back and they used to say that wpa and wpa2 was impossible to crack, but im‌‌‌‌‌‌‌‌‌‌‌‎­just curious, is that stuff as easy as wep used to be? or is it still 'impossible', sorry ive been out of the loop on stuff like this but just curious

submitted by /u/grumpywatching
[link] [comments]