Dark Reading: Attacks/Breaches
FBI Helping Australian Authorities Investigate Massive Optus Data Breach: Reports

Initial reports suggest a basic security error allowed the attacker to access the company's live customer database via an unauthenticated API.

Hacking on Medium
Security Hardening: An Usability Perspective

https://cdn-images-1.medium.com/max/734/1*DhzOLTYmPUxAhxACmL6GaQ.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Proving Grounds-DC-1

https://cdn-images-1.medium.com/max/1716/1*-Fxr_WnoTSDLbz8iUOj4mg.png
Hi everyone! Today we are going to go over how to root DC-1 on Proving Ground by DCAU. Let’s get started

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
MetaMask — Some exciting things we didn’t know as users

https://cdn-images-1.medium.com/max/1200/1*J3_G_TGovFiY5619u4T1Rg.jpeg
September 28, 2022

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Kali Linux — Permanently changing or adding to the terminal path

https://cdn-images-1.medium.com/max/958/1*7w_dXySLbd7MHIJ-9KASYw.png
Permanently changing or adding to the terminal path

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Attack of the .d2s Files

https://cdn-images-1.medium.com/max/1045/0*tVahKy9NidmrYNLI
Today, we continue our Diablo Hacking Journey by examining and editing the character save file. Last time we found out that the file was…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Proactive Pentest, before a Pentest?
https://www.reddit.com/r/Pentesting/comments/xpzje1/proactive_pentest_before_a_pentest/

I am the system admin for a small company. 5 users and a couple public facing services (FTP, IIS website), plus internal servers (SQL, file server etc). Do you recommend any steps I can take and software I can run to find and remediate my own issues before I spend money on an external vendor/audit? I don't have the money right now for full scale Pentest or audit, but I feel like I want to take as many steps as I reasonably can myself, to find issues slowly. I know I won't do as good a job as a pro. Any recommendations? Are there 1 or 2 software tools I can use to get me 90% there? submitted by /u/maniac_me (https://www.reddit.com/user/maniac_me)
[link] (https://www.reddit.com/r/Pentesting/comments/xpzje1/proactive_pentest_before_a_pentest/) [comments] (https://www.reddit.com/r/Pentesting/comments/xpzje1/proactive_pentest_before_a_pentest/)

___________________________
@hacking_Attack
@Hacking_Video

Once upon a time, There lived a GHOST named “CYBERSECURITY”
https://medium.com/@kishorehariram/once-upon-a-time-there-lived-a-ghost-named-cybersecurity-dbba061908c9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I am writing this blog after seeing the evolution of cybersecurity in the past few months or years. I thought of starting this blog with…Continue reading on Medium » (https://medium.com/@kishorehariram/once-upon-a-time-there-lived-a-ghost-named-cybersecurity-dbba061908c9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Once upon a time, There lived a GHOST named “CYBERSECURITY”

I am writing this blog after seeing the evolution of cybersecurity in the past few months or years. I thought of starting this blog with…Continue reading on Medium »
Read more...

Freeze - Payload Generation Toolkit for Bypassing EDR
https://www.reddit.com/r/redteamsec/comments/xq0hsm/freeze_payload_generation_toolkit_for_bypassing/

submitted by /u/roobixx (https://www.reddit.com/user/roobixx)
[link] (https://github.com/optiv/Freeze) [comments] (https://www.reddit.com/r/redteamsec/comments/xq0hsm/freeze_payload_generation_toolkit_for_bypassing/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Law enforcement used smart phone locator, how?

One investigative journalist claimed, they have identified a device that when in proximity of a cell phone target (IMEL), if triggered give out loud noise to reveal its location.

I have not heard this before.

One thing is if possible this should be only used in high priority target.

I am interested in knowing the technology. GSM? Will it work even if the phone is switched off? All the cell phone maker is building their device building any extra chip inside? or is it using some sort of bug?

Note: This is not GSM tower ping, that I know.

submitted by /u/ch1253
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Pentest customer facing report ?
https://www.reddit.com/r/Pentesting/comments/xq28i5/pentest_customer_facing_report/

I'm curious, if a customer asks a business "do you do pentesting and can I see your report?" Is this a typical thing to share about your infrastructure? Isn't that private? Or is there some common high level type of generic standard report template that tells them "there were 5 issues and they are now fixed - the details are none of your business" ? submitted by /u/maniac_me (https://www.reddit.com/user/maniac_me)
[link] (https://www.reddit.com/r/Pentesting/comments/xq28i5/pentest_customer_facing_report/) [comments] (https://www.reddit.com/r/Pentesting/comments/xq28i5/pentest_customer_facing_report/)

___________________________
@hacking_Attack
@Hacking_Video