Dark Reading: Attacks/Breaches
Cyberattackers Abuse Facebook Ad Manager in Savvy Credential-Harvesting Campaign

Facebook lead-generation forms are being repurposed to collect passwords and credit card information from unsuspecting Facebook advertisers.

Dark Reading: Attacks/Breaches
U-Haul Customer Contract Search Tool Compromised

Password compromise led to unauthorized access to a customer contract search tool over a five-month window, according to the company.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Accidentally logged into Capital One using gym’s wifi.

Since it’s not recommended to login to public wifis, should I take action to protect myself?

submitted by /u/IsaPixza
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

how do you bypass carbon black appcontrol?
https://www.reddit.com/r/Pentesting/comments/xdnqh2/how_do_you_bypass_carbon_black_appcontrol/

Title states my question.. just looking for your seasoned wisdom. Thanks in advance! submitted by /u/AccomplishedRush4869 (https://www.reddit.com/user/AccomplishedRush4869)
[link] (https://www.reddit.com/r/Pentesting/comments/xdnqh2/how_do_you_bypass_carbon_black_appcontrol/) [comments] (https://www.reddit.com/r/Pentesting/comments/xdnqh2/how_do_you_bypass_carbon_black_appcontrol/)

___________________________
@hacking_Attack
@Hacking_Video

Hydra
https://www.reddit.com/r/redteamsec/comments/xdogjb/hydra/

<!-- SC_OFF -->So I'm trying to use hydra to brute force a password check. It's for a class on VMs. How can I pull just logins from Active Directory? I've been able to pull users, but it's their legal names and not their logins. Then in Hydra, how do I know what protocol to use? <!-- SC_ON --> submitted by /u/w_sohl (https://www.reddit.com/user/w_sohl)
[link] (https://www.reddit.com/r/redteamsec/comments/xdogjb/hydra/) [comments] (https://www.reddit.com/r/redteamsec/comments/xdogjb/hydra/)

Hacking on Medium
WiFi Hacking

https://cdn-images-1.medium.com/max/797/1*j0QcGWI2yisfxL83SuN-7Q.png
WiFi

Continue reading on Medium »

Dark Reading: Attacks/Breaches
Key Takeaways From the Twitter Whistleblower's Testimony

Twitter did not know what data it had nor who had access to it, Peiter "Mudge" Zatko told Congressional lawmakers during a Senate panel hearing.

hacking: security in practice
How did discord crash gifs work?

There used to exist gifs that, if viewed, crashed the discord client. It seems the bug that allowed this has been patched since then, but I have had trouble finding information on how exactly it worked online.

How exactly did these gifs work?

Thank you!

submitted by /u/Binbasher-03
[link] [comments]

hacking: security in practice
Is learning Burpsuite worth it?

I've been reading articles on Burpsuite and it seems like a pretty good and comprehensive tool.

Is it worth it to take the time and kind of learn it in detail? What kind of actions can you perform with it? Does it exploit vulnerabilities, brute force, or anything like that?

submitted by /u/z0mbiechris
[link] [comments]

hacking: security in practice
Zero-day in WPGateway Wordpress plugin actively exploited in attacks

https://external-preview.redd.it/Tx5GLnB0IiD3yF3EHzK8ENkdTT_puUFnMi8wa2QCujw.jpg?width=640&crop=smart&auto=webp&s=e33d734ca582201613e62b48eecb62dbb83b3011 submitted by /u/Glad_Living3908
[link] [comments]

hacking: security in practice
Twitter whistleblower to Congress: A bad actor can take over any one of your accounts

https://external-preview.redd.it/o6eve-ZWE15Kw5OdWtdf-QIZ-4gLGzVOtVZ41ZR_Zxs.jpg?width=640&crop=smart&auto=webp&s=6f14e88bd779d3dab88c6b6cd85d1ec33b51d95b submitted by /u/lemon_bottle
[link] [comments]

hacking: security in practice
Use SSH tunnel with VNC for VPS inside VM ?

Hey guys,

is it recommended to use VNC as SSH tunnel inside a VM ?

Or is it unlikely to get hacked connecting within my Host Os? ( I mean technically.)

It's a kali linux working machine.

Personally, I feel better If I use SSH/VNC within a VM. But it's uncomfortably slower.

submitted by /u/Giomio27
[link] [comments]

hacking: security in practice
Iran-linked TA453 used new Multi-Persona Impersonation technique in recent attacks

https://external-preview.redd.it/jfjeK_279zcRCrZ3xAdvY-YD_7XXdUgCZxCA_JfTYz8.jpg?width=216&crop=smart&auto=webp&s=b402341be43d8f8c6bf5ecd1a53acca67b94eb4b submitted by /u/Glad_Living3908
[link] [comments]

hacking: security in practice
5 Russia-Linked Groups Target Ukraine in Cyberwar

https://external-preview.redd.it/YlTWMz2oZJb5u8XDPG4XK0NxQgasKwYCcF1gHIEKZnE.jpg?width=320&crop=smart&auto=webp&s=a59f2e3d448511c5f46c0b8e1ed63079bdd45504 submitted by /u/Straganaugth
[link] [comments]

hacking: security in practice
Removing google review job

Per title hiring

submitted by /u/SchemeSuccessful7640
[link] [comments]

A story of Host Header injection

Hii all, I am back with a new hacking story . A few days ago, I was hunting on one of the VPD program Where i find a host-head injection…Continue reading on Medium »
Read more...