How I hacked exam portal and got access to 10K+ users data including webcams
https://medium.com/@faique/how-i-hacked-exam-portal-and-got-access-to-10k-users-data-including-webcams-ec2262b43df7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello guys, I am Faique a security researcher and a bug bounty hunter and I welcome you to my write-up on a story of a hack that I did…Continue reading on Medium » (https://medium.com/@faique/how-i-hacked-exam-portal-and-got-access-to-10k-users-data-including-webcams-ec2262b43df7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Are APT groups using Posh C2 ? I could have sworn I read it multiple times but googling I cannot find anything. It’s possible I’m confusing it with PoshRat
https://www.reddit.com/r/redteamsec/comments/xkc2n6/are_apt_groups_using_posh_c2_i_could_have_sworn_i/

submitted by /u/HamburgersNHeroin (https://www.reddit.com/user/HamburgersNHeroin)
[link] (https://www.reddit.com/r/redteamsec/comments/xkc2n6/are_apt_groups_using_posh_c2_i_could_have_sworn_i/) [comments] (https://www.reddit.com/r/redteamsec/comments/xkc2n6/are_apt_groups_using_posh_c2_i_could_have_sworn_i/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Sophisticated Hermit Mobile Spyware Heralds Wave of Government Surveillance

At the SecTor 2022 conference in Toronto next month, researchers from Lookout will take a deep dive into Hermit and the shadowy world of mobile surveillance tools used by repressive regimes.

hacking: security in practice
SIM Swapper Abducted, Beaten, Held for $200k Ransom

https://external-preview.redd.it/FT-JNmsiSHvG9OUScqH7Edwqa0hcBG2j3b5BOZ-I1jg.jpg?width=320&crop=smart&auto=webp&s=387f7b1574ee27e8c6bebd12c3ab524e0f0635c9 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Show me the money!!

Hey guys what path would have the greatest likelihood of making the most money in ethical hacking? My son is a natural and has been devoting himself to all things hacking (ethically) and is not sure which path he should take and focus on. He is still in middle school but has comprehension and skill way past his age. Any opinions, comments, guidance, advice would be appreciated!

submitted by /u/CrookaveLLLi24
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
history will be the judge...

civilization has been driven by the technologies of war which in turn changed our lives... and mostly for the "better". it's a tribute to the dead that we have come so far with such little understanding, hacking into the future in more ways than one.

asking myself if sql injections would be frowned upon like database on nootropic drugs. i'm thinking enhancements though this is used in attacks all the time. meh, don't even know what is possible (yet!)

reminiscent of the days when backoraface was the defacto multi-tool of network technicians... when networking was cowboy and it was the wild wild west!

submitted by /u/evolverechosystems
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Data Scientists Dial Back Use of Open Source Code Due to Security Worries

Data scientists, who often choose open source packages without considering security, increasingly face concerns over the unvetted use of those components, new study shows.

Dark Reading: Attacks/Breaches
Don't Wait for a Mobile WannaCry

Attacks against mobile phones and tablets are increasing, and a WannaCry-level attack could be on the horizon.

Dark Reading: Attacks/Breaches
Cyber Insurers Clamp Down on Clients' Self-Attestation of Security Controls

After one company suffered a breach that could have been headed off by the MFA it claimed to have, insurers are looking to confirm claimed cybersecurity measures.

Dark Reading: Attacks/Breaches
15-Year-Old Python Flaw Slithers into Software Worldwide

An unpatched flaw in more than 350,000 unique open source repositories leaves software applications vulnerable to exploit. The path traversal-related vulnerability is tracked as CVE-2007-4559.

f2q1 — error code — over-the-range microwave

If you’re encountering an f2q1 — error code — over-the-range microwave oven, don’t fret — we’ve got you covered on what this means and how…Continue reading on Medium »
Read more...

How I hacked an exam portal and got access to 10K+ users data including webcams

Hello guys, I am Faique a security researcher and a bug bounty hunter and I welcome you to my write-up on a story of a hack that I did…Continue reading on InfoSec Write-ups »
Read more...

Arbitrum Saved From a Bug That Could Have Led to the Loss of $540M in Ethereum

A white hat hacker discovered and disclosed a bug on Arbitrum’s latest upgrade that could have resulted in the loss of $530 million ETH.Continue reading on Medium »
Read more...

Arbitrum Saved From a Bug That Could Have Led to the Loss of $540M in Ethereum
https://medium.com/@CryptoSavingExpert/arbitrum-saved-from-a-bug-that-could-have-led-to-the-loss-of-540m-in-ethereum-e6fccd4941e3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

A white hat hacker discovered and disclosed a bug on Arbitrum’s latest upgrade that could have resulted in the loss of $530 million ETH.Continue reading on Medium » (https://medium.com/@CryptoSavingExpert/arbitrum-saved-from-a-bug-that-could-have-led-to-the-loss-of-540m-in-ethereum-e6fccd4941e3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Article of the Day: Finding a Famous Female Hacker

https://cdn-images-1.medium.com/max/600/1*pWGJXP4Asec0cWobY0UtsQ.jpeg
Searching for Suzy Thunder — Claire L. Evans, The Verge, 1/26/2022

Continue reading on Hybrid Analyst »

___________________________
@hacking_Attack
@Hacking_Video