Dark Reading: Attacks/Breaches
What InfoSec Pros Can Teach the Organization About ESG

Security pros' experience with transparency and evaluating third-party partners positions them to act as key environmental, social, and governance advisers.

Dark Reading: Attacks/Breaches
Mutare Voice Network Threat Survey Shows Nearly Half of Organizations Experienced Vishing or Social Engineering Attacks in Past Year

Unsecured voice traffic, skyrocketing adoption of Teams-centric enterprise collaboration tools widen enterprise cybersecurity gaps and increase risk of breach.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Data-Centric Security Market Worth $12.3B by 2027 - Exclusive Report by MarketsandMarkets™

.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Jerry (HTB) writeup

https://cdn-images-1.medium.com/max/696/1*xJdn8wP5gtNOlFdbhSNU2w.png
Today we will pwn the second box of the beginner track, called Jerry.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: Kenobi — Walkthrough

https://cdn-images-1.medium.com/max/847/1*_wqOaFP0QTXGnHeX_1J0Ng.png
Hi! It is time to look at the Kenobi room on TryHackMe. I am making these walkthroughs to keep myself motivated to learn cyber security…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
3 Tips for Facing the Harsh Truths of Cyber Security in 2022

https://cdn-images-1.medium.com/max/1280/1*OCF0UUcGZ7jiZ48gQWy5OQ.jpeg
Ransomware is widespread in today’s digital landscape, and there is virtually no way to eliminate the threat completely. Companies should…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Creating a Network Scanner With Python

https://cdn-images-1.medium.com/max/1777/0*xoED-SHpjqnYcSBb
Today i am going to show you how to make your own web scanner with Python. So let’s start!!!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
'AIG' Threat Group Launches With Unique Business Model

The rapidly growing Atlas Intelligence Group relies on cyber-mercenaries to carry out its missions.

Dark Reading: Attacks/Breaches
Lax Security Fuels Massive 8220 Gang Botnet Army Surge

The threat group 8220 Gang's cryptocurrency miner and botnet reach has exploded to 30,000 global hosts, a notable increase over the past month, researchers say.

Dark Reading: Attacks/Breaches
Feds Recoup $500K From Maui Ransomware Gang

Law enforcement hopes that retuning ransom payments to impacted businesses will demonstrate that working with the feds following a cybersecurity breach is "good business."

___________________________
@hacking_Attack
@Hacking_Video

Need help with Hydra
https://www.reddit.com/r/Pentesting/comments/w3yfbx/need_help_with_hydra/

Hello I'm starting learning Pen Testing and I want to try simple brute force on site I got permission to try to and my command's doesn't work as I expected to, because Hydra doesn't recognise even account I created for this. In browser link to login site looks like example.com/en/login but in network tab of browser inspection it is method Post with URL like example.com/api/auth/callback/credentials? And the Request is "redirect=false&email=e-mail@mail.com (mailto:e-mail@mail.com)&password=anypassword&csrfToken=LongTokenId&callbackURL=example.com/en/login&json=true" so the command I've tried to use was: hydra -L /directory to file/emailtest -P /directory to file/passtest example.com -V http-post-form "/api/auto/callback/credentials?:email=^USER^&password=^PASS^:S=logout" And this can't really find my e-mail and password working, should I try to use example.com/en/login in command line instead of those API/../credentials or I should use whole request with token and redirect stuff or maybe someone could try to help me with command that I could see how this should be done, I can say that I've tried on "easy" site like from HackTheBox but there weren't tokens ect so I'm kinda confused with reality rn. Thanks for all the answers and sorry for my English submitted by /u/AffectionateTrash202 (https://www.reddit.com/user/AffectionateTrash202)
[link] (https://www.reddit.com/r/Pentesting/comments/w3yfbx/need_help_with_hydra/) [comments] (https://www.reddit.com/r/Pentesting/comments/w3yfbx/need_help_with_hydra/)

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/2_44PImXxjqNOENVY8ER4jcA7i0kfsQCtjjf-UNx8Rk.jpg Video of an example

Image from discord bot

Image from device that acts like controller

submitted by /u/appelsiensam
[link] [comments]

https://external-preview.redd.it/O7OdaRMb-J3k44S3DIARR5JYqeO8TtZ3Qpslz2quqFc.jpg?width=640&crop=smart&auto=webp&s=79d4f1ca0cf8d0b98ec97ea6e43b5919fc3f9ec9 This simple script I made shows that it is insecure to use cloud based screenshot utilities because people can just scrape all the images from there in no time!

learn more

https://preview.redd.it/h12dp0kwasc91.png?width=1000&format=png&auto=webp&s=d6d095f27aa24b1592c8db91452eca389c624e61

submitted by /u/appelsiensam
[link] [comments]

hacking: security in practice
I got hacked what should I do?

It was a random link.

submitted by /u/Blackhermit0
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
(Reverse) SSH tunnel from work over HTTP(s) proxy to a home computer behind NAT?

Hello guys,

when working from home, I am supposed to access my work computers in the office with Remotedesktop/VNC. But this VNC is very very very slow, so work is no fun.

There is also no direct SSH access: Home -> Work.

However, I would like to have SSH access from home to my computer in the office.

I have two work computers in the office: one with Ubuntu 18.4 and root access and a PC with Windows 10 with Putty but without root access, so theoretically I could make an (reverse?) SSH tunnel from my work computer with Linux to my PC at home, which also has Ubuntu.

The two computers at the office are behind NAT and an HTTP(s) proxy.

The machine at home is behind NAT, but my router at home is reachable from the internet via a public IP (both IPv4 and IPv6), so I can set up port forwarding: 443 on the router -> 22 (or another) on the PC.

I would also like to use an SSH key for this.
I got:
[Linux@work], [Windows@work] ---> [Proxy@work] ---> Internet <---[Router@home] <---[Linux@home]


I want:
[Linux@home] --ssh-tunnel--> [Linux@work]

Is this possible at all?

And if so, how?

submitted by /u/letmyseeyoustripped
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video