Hunting for Low and Slow Password Sprays Using Machine Learning (ML Deep Dive)
https://www.reddit.com/r/redteamsec/comments/wlw18g/hunting_for_low_and_slow_password_sprays_using/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/HuntingLowandSlow) [comments] (https://www.reddit.com/r/redteamsec/comments/wlw18g/hunting_for_low_and_slow_password_sprays_using/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
The Time Is Now for IoT Security Standards

Industry standards would provide predictable and understandable IoT security frameworks.

Dark Reading: Attacks/Breaches
New Cross-Industry Group Launches Open Cybersecurity Framework

18 companies led by Amazon and Splunk announced the OCSF framework, to provide a standard way for sharing threat detection telemetry among different monitoring tools and applications.

Dark Reading: Attacks/Breaches
4 Flaws, Other Weaknesses Undermine Cisco ASA Firewalls

More than 1 million instances of firewalls running Cisco Adaptive Security Appliance (ASA) software have four vulnerabilities that undermine its security, a researcher finds.

Dark Reading: Attacks/Breaches
Cyber-Insurance Fail: Most Businesses Lack Ransomware Coverage

Even among businesses with cyber insurance, they lack coverage for basic costs of many cyberattacks, according to a BlackBerry survey.

Dark Reading: Attacks/Breaches
Cisco Confirms Data Breach, Hacked Files Leaked

Ransomware gang gained access to the company's VPN in May by convincing an employee to accept a multifactor authentication (MFA) push notification.

New research findings from Faraday goes to DEF CON
https://www.reddit.com/r/Pentesting/comments/wlyub5/new_research_findings_from_faraday_goes_to_def_con/

<!-- SC_OFF -->Corporate networks overlap with home networks in the remote work era, and sensitive information abounds behind consumer-grade routers. But these devices might not be designed with security as a priority. Get ready for our research team's top investigation on routers this Friday at DefCon. https://faradaysec.com/blog-new-research-from-faraday-goes-to-def-con/ "A preliminary Shodan search revealed over 60,000 vulnerable routers with their admin panel exposed worldwide." "This is often the problem with IoT devices and especially with OEM since vendors do not always plan long-term maintenance, and security becomes a responsibility of the end-user." This Friday at 3 pm at Defcon, more details will be revealed. https://forum.defcon.org/node/241835 https://defcon.org/html/defcon-30/dc-30-schedule.html https://preview.redd.it/e2riym17q4h91.png?width=760&format=png&auto=webp&s=942612ced9781eb6f61787042488aadd1cd5928f <!-- SC_ON --> submitted by /u/Faradaysecurity (https://www.reddit.com/user/Faradaysecurity)
[link] (https://www.reddit.com/r/Pentesting/comments/wlyub5/new_research_findings_from_faraday_goes_to_def_con/) [comments] (https://www.reddit.com/r/Pentesting/comments/wlyub5/new_research_findings_from_faraday_goes_to_def_con/)

Hacking on Medium
Cisco confirma que ha sido pirateado por Yanluowang Ransomware Gang

https://cdn-images-1.medium.com/max/1235/0*VqMx7p7CsK6VIgKU
PUBLICADO EN 11 AGOSTO, 2022P EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Dusting attack explained

https://cdn-images-1.medium.com/max/612/1*dprdiCIav4psp9VauO3Djw.jpeg
Have you ever received small amounts of crypto you couldn’t explain? If yes then you’re under attack!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phishing saldırılarında patlama yaşanıyor

https://cdn-images-1.medium.com/max/1200/1*iHVNK1mXZYhu-JPqAaKNtg.jpeg
Yemleme diğer bilinen adlarıyla phishing, oltalama, kimlik avı genellikle hackerların hedef kişiye hediye, indirim veya benzeri cezbedici…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Year of the rabbit (thm) writeup

https://cdn-images-1.medium.com/max/600/1*VCS2-0lgck0uJfEpapLCtQ.jpeg
Welcome back, let’s start off with nmap:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Piratas informáticos detrás de los ataques de Cuba Ransomware, utilizando el nuevo malware RAT

https://cdn-images-1.medium.com/max/1543/0*3b4_kbB7-6-XjLxF
PUBLICADO EN 11 AGOSTO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
IOCs converted into custom queries for free and without registration

https://external-preview.redd.it/FkMnzZvU67ioOtYGGa_1jaHaxFv4MRzq3gfs1HFjDgc.jpg?width=640&crop=smart&auto=webp&s=5946cf95107a120a0f1205017209d725a742e86e submitted by /u/Successful_Mix_8988
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What's the point of XSS attack when you can only inject the script from the computer that has opened the target website ?

I'm just a beginner web developer and not a hacker. I watched several videos about XSS. Live attacks etc, but in all of them the hacker was injecting the script from the computer he was visiting the website and "stealing" the password and username he has entered on that same webpage. What's the point then ?

submitted by /u/lotsofhugszerofucks
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video