Hacking on Medium
U.S. braces for China to eclipse Russian cyberthreat

https://cdn-images-1.medium.com/max/2040/1*VcL_n9Bq8hzPPqDdWo9DyQ.png
The heads of CISA, the NSA and GCHQ warn that China, not Russia, is the greatest threat.

Continue reading on README_ »

___________________________
@hacking_Attack
@Hacking_Video

Is HackTheBox held in high regard inside the industry?
https://www.reddit.com/r/Pentesting/comments/y3zglu/is_hackthebox_held_in_high_regard_inside_the/

Do you guys inside consider this a good resume addition? Would it increase someones chances for transitioning from systems/networking career to a pen test role? submitted by /u/mrthomasbombadil (https://www.reddit.com/user/mrthomasbombadil)
[link] (https://www.reddit.com/r/Pentesting/comments/y3zglu/is_hackthebox_held_in_high_regard_inside_the/) [comments] (https://www.reddit.com/r/Pentesting/comments/y3zglu/is_hackthebox_held_in_high_regard_inside_the/)

___________________________
@hacking_Attack
@Hacking_Video

Story about Escalation of HTML Injection to EC2 Instance credentials leak

Hello all, Thank for overwhelming response here i am with my new finding tale.Continue reading on Medium »
Read more...

Top 10 Best Bug Bounty Tools in 2022

In today’s world, cybersecurity holds top priority for most organizations and governments. Large companies are investing millions of…Continue reading on Medium »
Read more...

CVE-2022–33077: IDOR to change address of any customer via parameter pollution in nopCommerce <= 4.5

TL;DR: A POST request to edit the address endpoint involved two addressID parameters (one in the URL and other in the request body)…Continue reading on Medium »
Read more...

Story about Escalation of HTML Injection to EC2 Instance credentials leak
https://medium.com/@Cybervenom/story-about-escalation-of-html-injection-to-ec2-instance-credentials-leak-e2cbd7343a83?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello all, Thank for overwhelming response here i am with my new finding tale.Continue reading on Medium » (https://medium.com/@Cybervenom/story-about-escalation-of-html-injection-to-ec2-instance-credentials-leak-e2cbd7343a83?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Top 10 Best Bug Bounty Tools in 2022
https://thenurhabib.medium.com/top-10-best-bug-bounty-tools-in-2022-a3d6a049f0fe?source=rss------bug_bounty-5

In today’s world, cybersecurity holds top priority for most organizations and governments. Large companies are investing millions of…Continue reading on Medium » (https://thenurhabib.medium.com/top-10-best-bug-bounty-tools-in-2022-a3d6a049f0fe?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

CVE-2022–33077: IDOR to change address of any customer via parameter pollution in nopCommerce <= 4.5
https://medium.com/@rohan_pagey/cve-2022-33077-idor-to-change-address-of-any-customer-via-parameter-pollution-in-nopcommerce-4-5-2fa4bc763cc6?source=rss------bug_bounty-5

TL;DR: A POST request to edit the address endpoint involved two addressID parameters (one in the URL and other in the request body)…Continue reading on Medium » (https://medium.com/@rohan_pagey/cve-2022-33077-idor-to-change-address-of-any-customer-via-parameter-pollution-in-nopcommerce-4-5-2fa4bc763cc6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Concerns Over Fortinet Flaw Mount; PoC Released, Exploit Activity Grows

The authentication bypass flaw in FortiOS, FortiProxy and FortiSwitchManager is easy to find and exploit, security experts say.

Dark Reading: Attacks/Breaches
Fast Fashion Retailer Data Breach Draws $1.9M Fine

New York AG fines Shein and Romwe parent company for failure to protect customer data and downplaying the 2018 compromise of 46 million shopper records.

Dark Reading: Attacks/Breaches
Microsoft 365 Message Encryption Can Leak Sensitive Info

The default email encryption used in Microsoft Office's cloud version is leaky, which the company acknowledged but said it wouldn't fix.

Dark Reading: Attacks/Breaches
Acuity Reports Increase in Cyber Liability Insurance Claims as Cybercrime Skyrockets

Acuity Insurance reports ongoing increased insurance risk for individuals and businesses.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is their a way or anyone working on adding quantum cryptography to the tor network

Quantum encryption is the future but https TCP encryption is broken and crackable the reality is the tor network is not secure because encryption is being broken with quantum computers Could any of these algorithms integrate into tor? I would also like to note it’s likely not smart to add government approved cryptography to the tor network but theoretically is it possible or being worked on? https://csrc.nist.gov/Projects/post-quantum-cryptography/post-quantum-cryptography-standardization/round-3-submissions

submitted by /u/Phantasius224
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top 10 Best Bug Bounty Tools in 2022

In today’s world, cybersecurity holds top priority for most organizations and governments. Large companies are investing millions of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Реализуем Frey-Rück Attack чтобы получить секретный ключ “K” (NONCE)

https://cdn-images-1.medium.com/max/731/0*U7N3bnT99yfN7HI1.png
В этой статье мы реализуем эффективный алгоритм Frey-Rück Attack для подписи ECDSA в транзакции блокчейна Биткоина. В наших более ранних…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video