Dark Reading: Attacks/Breaches
Next-Gen Linux Malware Takes Over Devices With Unique Toolset

The Shikitega malware takes over IoT and endpoint devices, exploits vulnerabilities, uses advanced encoding, abuses cloud services for C2, installs a cyptominer, and allows full remote control.

Dark Reading: Attacks/Breaches
Iran-Linked APT Cozies Up to 'Enemies' in Trust-Based Spy Game

APT42 is posing as a friend to people considered threats to the government, using a raft of different tools to steal relevant info and perform surveillance.

Dark Reading: Attacks/Breaches
Some Employees Aren't Just Leaving Companies — They're Defrauding Them

Here are a few measures your organization can implement to minimize fraudulent behavior and losses.

hacking: security in practice
evilgophish

https://external-preview.redd.it/lK0M_nx9rv_E0G6EVbAsaP53of3jvuLW2EfAaKU1olg.jpg?width=640&crop=smart&auto=webp&s=44356f6677223685d412d6fbc854f1fd04233287 submitted by /u/edreatingmonkey
[link] [comments]

hacking: security in practice
200,000 North Face accounts hacked in credential stuffing attack

https://external-preview.redd.it/d5ySiHbUOauf8DA1YhRA7Bqg59nTVcPM5xqC7P3Lulo.jpg?width=640&crop=smart&auto=webp&s=f0b495713bef723d7bc464a9871ebe9ccde31285 submitted by /u/alertnoalert
[link] [comments]

hacking: security in practice
How to access data on a locked Samsung galaxy S8?

Hey guys. I'm trying to find out if it is possible to get access to the photos on a locked galaxy s8. Without laying out the whole sad story, the issue is that my wife's grandparents died in a car crash a few years ago and I was given her granddads phone to see if I could recover his photos. I tried originally and couldn't find any software or anything that claimed to be able to do it without wiping the device. I came across the phone in a box again and want to see if anything has changed. I'm hoping that maybe you guys would know if this is possible.

submitted by /u/Rex__Nihilo
[link] [comments]

Threat Hunting Tools: Our Recommendations
https://www.reddit.com/r/Pentesting/comments/x8af28/threat_hunting_tools_our_recommendations/

submitted by /u/alertnoalert (https://www.reddit.com/user/alertnoalert)
[link] (https://socprime.com/blog/threat-hunting-tools-our-recommendations/) [comments] (https://www.reddit.com/r/Pentesting/comments/x8af28/threat_hunting_tools_our_recommendations/)

evilgophish
https://www.reddit.com/r/redteamsec/comments/x8akz5/evilgophish/

submitted by /u/edreatingmonkey (https://www.reddit.com/user/edreatingmonkey)
[link] (https://github.com/fin3ss3g0d/evilgophish) [comments] (https://www.reddit.com/r/redteamsec/comments/x8akz5/evilgophish/)

How I found 3 RXSS on the Lululemon bug bounty program

Hi everybody, today i will show you how can simple technique lead you to find multiple series vulnerabilities across the whole subdomainsContinue reading on Medium »
Read more...

How I found 3 RXSS on the Lululemon bug bounty program
https://omar0x01.medium.com/how-i-found-3-rxss-on-the-lululemon-bug-bounty-program-fa357a0154c2?source=rss------bug_bounty-5

Hi everybody, today i will show you how can simple technique lead you to find multiple series vulnerabilities across the whole subdomainsContinue reading on Medium » (https://omar0x01.medium.com/how-i-found-3-rxss-on-the-lululemon-bug-bounty-program-fa357a0154c2?source=rss------bug_bounty-5)

The Difference Between Vulnerability, Threat and Risk
https://medium.com/@techeducative/the-difference-between-vulnerability-threat-and-risk-32945af605e?source=rss------bug_bounty-5

Terms in the Domain of Cyber SecurityContinue reading on Medium » (https://medium.com/@techeducative/the-difference-between-vulnerability-threat-and-risk-32945af605e?source=rss------bug_bounty-5)

Poliqlot XSS payload vasitəsilə bug bounty ($$$)
https://memmedrehimzade.medium.com/poliqlot-xss-payload-vasit%C9%99sil%C9%99-bug-bounty-946732c1ba98?source=rss------bug_bounty-5