Dark Reading: Attacks/Breaches
Internet Security & Encryption Pioneer Peter Eckersley Passes at 43

The founder of Let's Encrypt and an EFF technologist, Eckersley devoted his life's work to making the Internet safer and more secure.

Dark Reading: Attacks/Breaches
Critical QNAP NAS Zero-Day Bug Exploited to Deliver DeadBolt Ransomware

This is the fourth DeadBolt campaign this year against QNAP customers, but it differs from previous attacks in exploiting an unpatched bug instead of a known vulnerability.

Dark Reading: Attacks/Breaches
The 3 Fundamentals of Building an Effective IoMT Security Strategy

The high stakes and unique priorities for Internet of Medical Things devices require specialized cybersecurity strategies.

Dark Reading: Attacks/Breaches
EvilProxy Commodifies Reverse-Proxy Tactic for Phishing, Bypassing 2FA

The phishing-as-a-service offering targets accounts from tech giants, and also has connections to PyPI phishing and the Twilio supply chain attack.

Dark Reading: Attacks/Breaches
Cymulate Raises $70M Series D Funding for Continuous Security Posture Testing

Investor participation from prior round demonstrates confidence in the company's current and future performance.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are there any practical uses for viruses

This question is out of curiosity are there any use cases where it doesn't involve anything illegal and may have a positive effect?

submitted by /u/master_meme_monk
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Duplicating an unmarked key fob?

Hi, all. I’m at a loss of where to turn, so apologies in advance. I’m getting desperate.

I live in an apartment complex that has a car sticker to open the front gate to my complex, and a separate key fob to open my apartment door. My complex refuses to give me a duplicate of either key unless I have someone else on my lease.

Key fob duplication kiosks will not recognize my fob, I can’t mail it off to an online service since I need it everyday, and a couple locksmiths with access control I spoke to refuse to duplicate it unless the request comes from my complex.

No marks or anything on the fob to know the make/serial number/ANY details.

What are my options here? I travel for work and need a pet sitter. Are there some magic words I can say to my apartment complex, or can I duplicate these on my own? Any help is greatly appreciated. I feel quite trapped.

submitted by /u/findingmyself622
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How is this possible?

Last week I was contacted over the phone by a recruiter for a company I am trying to get into. He said he will email me an invite for the screening and after a day I let him know that I never got it. I checked my inbox (Yahoo) obviously but also kept my eye on spam as well. Finally, I looked at my Trash folder and there it was. I then noticed that all my emails from this company were getting put straight into the trash.

​

Here is where it gets creepy. I went into my settings thinking maybe I accidentally blocked the address, but what I found were multiple, high priority domains being blocked. Essentially, they were blocking multiple addresses from both my banks, this one specific company, and the IRS. And not just the general addresses, but more specific ones too. For example, I use Chase, and they blocked domains from Chase, Chase Fraud, and Chase Transaction Alerts. They did this with my other bank, and the recruiting domains of said company as well.

​

This seems like a very targeted attack and no way I would accidentally block all of these really important domains. How does this person know which bank I use, and which company I am trying to get into? Maybe they have access to my LinkedIn as well where I defined what jobs I am open to? And if they have access to all this stuff why only mess with me this way?

​

Am I going crazy or do you think someone is conducting a personal attack on me? Idk what other sub to put this into.

submitted by /u/Onsyde
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty { How I found an SSRF ( Reconnaissance ) }

Hello everyone, I am S Rahul, working as a Information Security Analyst at NUK 9 Auditors and A Bug bounty hunter at Hackerone, Bugcrowd…Continue reading on Medium »
Read more...

Bug Bounty { How I found an SSRF ( Reconnaissance ) }
https://srahulceh.medium.com/bug-bounty-how-i-found-an-ssrf-reconnaissance-7b1821a1b1fd?source=rss------bug_bounty-5

Hello everyone, I am S Rahul, working as a Information Security Analyst at NUK 9 Auditors and A Bug bounty hunter at Hackerone, Bugcrowd…Continue reading on Medium » (https://srahulceh.medium.com/bug-bounty-how-i-found-an-ssrf-reconnaissance-7b1821a1b1fd?source=rss------bug_bounty-5)

Hacking on Medium
A Concrete Bicycle, Hacking Lululemon, and Beavers Considered As Sustainability Engineers

https://cdn-images-1.medium.com/max/1200/0*oBSiEv0KceNDOcRd.jpg
I bring you the finest Internet reading in my weekly Linkfest

Continue reading on Medium »

Hacking on Medium
CyberDefenders: Insider Walkthrough

https://cdn-images-1.medium.com/max/1280/0*TQv_OOgXavBSHa-B.png
SPOILER ALERT: POSSIBLE SOLUTION

Continue reading on Medium »

Hacking on Medium
HackTheBox Writeup — Late

https://cdn-images-1.medium.com/max/2000/0*NPcNQ13OF-hSOdfl
Hello Guys , I am Faisal Husaini. My username on HTB is “fa1sal” . Also join me on discord.

Continue reading on Medium »

Dark Reading: Attacks/Breaches
Mysterious 'Worok' Group Launches Spy Effort With Obfuscated Code, Private Tools

The threat actor — whose techniques and procedures do not match known groups — has created custom attack tools, including a program that hides scripts in .PNG images.

Dark Reading: Attacks/Breaches
TeslaGun Primed to Blast a New Wave of Backdoor Cyberattacks

What under-the-hood details of newly discovered attack control panel tells us about how the Evil Corp threat group manages its ServHelper backdoor malware campaigns.

Dark Reading: Attacks/Breaches
As LA Unified Battles Ransomware, CISA Warns About Back-to-School Attacks

Hours after Los Angeles Unified School District hit with ransomware attack, CISA issued an alert that threat actors are actively targeting the education sector.