hacking: security in practice
Anyones company regularly scanning all 65k ports?

For your company’s vulnerability management program, is anyone here regularly scanning all 65k ports for all/nearly all assets?

What do your scan profiles look like if so? If you’re not, are you just scanning top ports? Do you have certain assets you try to scan a wider range of ports for?

Thanks!

submitted by /u/secj44
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A CSRF vulnerability in the popular csurf package

https://external-preview.redd.it/NmT3De8f3wPwyWLamVzys73FjqITwsB2MSAsMdn7ApM.jpg?width=640&crop=smart&auto=webp&s=493f6379a5884149322ba1b3f67ca741aab331eb submitted by /u/adrian_rt
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
The HEAT Is On, Says Menlo Security

Neko Papez, senior manager, cybersecurity strategy for Menlo Security, helps customers understand if they’re vulnerable to highly evasive adaptive threats (HEAT).

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
DeepSurface Adds Risk-Based Approach to Vulnerability Management

DeepSurface’s Tim Morgan explains how network complexity and cloud computing have contributed to the challenge, and how automation can help.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Banyan Recommends Phased Approach When Introducing Zero Trust

Banyan Security’s Jayanth Gummaraju makes the case for why zero trust is superior to VPN technology.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Mimecast: Mitigating Risk Across a Complex Threat Landscape

Garrett O’Hara of Mimecast discusses how companies can bolster security of their Microsoft 365 and Google Workspace environments, since cloud services often add complexity.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Expiring Root Certificates Threaten IoT in the Enterprise

What happens when businesses' smart devices break? CSOs have things to fix beyond security holes.

Dark Reading: Attacks/Breaches
Identity Security Pain Points and What Can Be Done

Replacing passwords is not as easy as people think, but there is hope.

Dark Reading: Attacks/Breaches
How Qualys Reduces Risk and Enables Tool Consolidation

Sumedh Thakar, CEO of Qualys, explains how moving to a cloud-based asset management platform can simplify their strategies and improve overall security.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
New 'BianLian' Ransomware Variant on the Rise

Novel ransomware was created with the Go open source programming language, demonstrating how malware authors increasingly are opting to employ the flexible coding language.

Dark Reading: Attacks/Breaches
Cisco: All Intelligence is Not Created Equal

Threat intel has changed over the years and that’s changed how customers use it, says Matt Olney, director of Talos threat intelligence and interdiction at Cisco.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Pentera Helps Enterprises Reduce Their Security Exposure

Pentera’s Omer Zucker outlines exposure management’s biggest challenges in closing security gaps.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Tanium: Taking A Deeper Cut At Converged Endpoint Management

Tanium’s Chris Hallenbeck explains how converged endpoint management helps overcome obstacles to endpoint visibility.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Secureworks: How To Distinguish Hype From Reality With AI in SecOps

Secureworks’ Nash Borges describes how his team has applied AI and ML to threat detection.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
InQuest: Adding File Detection and Response to the Security Arsenal

InQuest’s Pedram Amini takes a deep dive into file detection and response as a way to prevent file-borne attacks.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Sophos Identifies Potential Tag-Team Ransomware Activity

Company research indicates ransomware gangs may be working in concert to orchestrate multiple attacks, explains Sophos’ John Shier.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Metasploit Creator Renames His Startup and IT Discovery Tool Rumble to 'runZero'

HD Moore's company has rebranded its IT, IoT, and OT asset discovery tool as the platform rapidly evolves.

Dark Reading: Attacks/Breaches
For Penetration Security Testing, Alternative Cloud Offers Something Others Don't

Alternative cloud providers offer streamlined capabilities for penetration testing, including more accessible tools, easy deployment, and affordable pricing.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Fake DDoS Protection Alerts Distribute Dangerous RAT

Adversaries are injecting malicious JavaScript into numerous WordPress websites that triggers phony bot-related checks.

Dark Reading: Attacks/Breaches
Charming Kitten APT Wields New Scraper to Steal Email Inboxes

Google researchers say the nation-state hacking team is now employing a data-theft tool that targets Gmail, Yahoo, and Microsoft Outlook accounts using previously acquired credentials.