Dark Reading: Attacks/Breaches
LinkedIn Phishing Spoof Bypasses Google Workspace Security

A credential-stealing attack that spoofed LinkedIn and targeted a national travel organization skates past DMARC and other email protections.

Dark Reading: Attacks/Breaches
Threat Groups Repurpose Banking Trojans into Backdoors

Ursnif, a one-time banking Trojan also known as Gozi, becomes the latest codebase to be repurposed as a more general backdoor, as malware developers trend toward modularity.

Dark Reading: Attacks/Breaches
HR Departments Play a Key Role in Cybersecurity

A more secure organization starts with stronger alignment between HR and the IT operation.

Dark Reading: Attacks/Breaches
Spyderbat Raises Series A to Deliver Runtime Security Throughout Cloud Native Software Development Environments

Led by NTTVC, the funding enables further development of Cloud Native Intrusion Prevention from the team that invented Network Intrusion Prevention Systems.

Dark Reading: Attacks/Breaches
PayPal Introduces More Secure Payments with Passkeys

Passkeys are designed to replace passwords and allow seamless logins for consumers across devices and platforms.

Hacking on Medium
Mnemonic TryHackMe Writeup

https://cdn-images-1.medium.com/max/933/1*Uk28mEJNV-ZuMfPf8E_a7A.png
Mnemonic TryHackMe Walkthrough

Continue reading on Medium »

Hacking on Medium
how easily your phone can be hacked in 2022

https://cdn-images-1.medium.com/max/640/0*qn9db6_UgEnAv-YI.jpg
how easily your phone can be hacked

Continue reading on Medium »

Hacking on Medium
Relevant TryHackMe Writeup

https://cdn-images-1.medium.com/max/935/1*QE9IqnUZFy_oEDJxBkP8Ng.png
TryHackMe: Relevant Writeup

Continue reading on Medium »

Hacking on Medium
Investigadores detallan las vulnerabilidades del registro de eventos de Windows: LogCrusher y…

https://cdn-images-1.medium.com/max/1662/0*T53bkuITG97lmvW8
Los investigadores de ciberseguridad han revelado detalles sobre un par de vulnerabilidades en Microsoft Windows, una de las cuales podría…

Continue reading on Medium »

Hacking on Medium
Dark Web Introduction

https://cdn-images-1.medium.com/max/1920/1*1xMwcThmE2x3lANO4W1JuA.png
This will be the first blog of the Dark Web Documentary Series

Continue reading on Medium »

Hacking on Medium
Ghizer TryHackMe Writeup

https://cdn-images-1.medium.com/max/709/1*4EfGStwRBy4EbE4jSwuJCw.png
Ghizer TryHackMe Walkthrough

Continue reading on Medium »

hacking: security in practice
Help to hack (tweak) an application

Hi,

Despite I'm a developer, I'm not very familiar with anything related to hacking. I'm interested in find a way to tweak an application I use to stitch videos (Insta360 Stitcher, freely available on their website) as natively, this app offer to export a stitching using ProRes 4.2.2 HQ, (and other codecs) but do not offer the possibility to use ProRes 4.2.2 Standard. I asked Insta an "official" way to get it working, but there's none without modifying the app. And they don't seem very interested in modifying their app to add this codec to the list.

Actually, this wouldn't suppose "nothing", as this app uses ffmpeg (not sure if ffmpeg.exe is called from Prostitcher.exe or if Prostitcher embeds ffmpeg), but ProRes (422) is managed using profiles, and all of them must be included: Proxy 'apco', LT 'apcs', Standard 'apcn', HQ 'apch'. For some reason, Insta chose to only manage the HQ profile, when I'd like to use the Standard one.

With no clue about how to do this, I firstly thought about the strategy :

* a beautiful hack to add the option to the app : it would be great but being realistic, I can't do that, I'm a noob.
* Looking where the HQ profile is set and changing it to the Standard profile should be easier. Somewhere in the code, the parameter "-profile:v 3" must be used (ProRes 4.2.2 HQ) and I'd like to change it to "-profile:v 2". The problem is this app is not open source, and I don't know where to change that :D
* IF ffmpeg.exe is used by prostitcher.exe as an external tool (it is bundled into Insta360 Stitcher), another option would be check the ffmpeg version, cloning the ffmpeg repo and modify the code to invert the ProRes profiles (where is another question, but as the code is available, it should be possible). The question is : how can I be sure ffmpeg is used? Because executing a stiching from the GUI (the only way to use Insta360 Stitcher), I can see prostitcher.exe is executed in background in the Windows processes, but I can't see ffmpeg. I tried to open prostitcher.exe with an hex editor, and there are lots of reference to ffmpeg inside, but not the "bundle" one, I suppose they are traces from build process, as the path doesn't exist in my machine. I also found references to all the ProRes profiles, but it looked like error messages or usage messages rather than "code".

By the way, prostitcher.exe is a command line executable. I want to think that the GUI invokes this executable passing it some parameters. Is there a way to see which parameters the GUI is passing when it invokes the .exe on Windows? On Linux/Mac, they're listed in the PS command, but on Windows... I can't find them... That could help to know which parameters are needed, too...

So... If someone can help about the best way to achieve my goal, it would be great!

Thanks!

submitted by /u/cheloutevr
[link] [comments]

hacking: security in practice
DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector - Microsoft Security Blog

https://external-preview.redd.it/LMf08SltVhCAh_zVM0Zwobm4oE8yGdtoaxlEB7dFx_Y.jpg?width=640&crop=smart&auto=webp&s=7375c9e582cb9da169c7ae39283985e9cc4da1ea submitted by /u/DrinkMoreCodeMore
[link] [comments]

hacking: security in practice
Metasploitable-like machines for autmatic vulnerability testing

Hey, I'm searching for metasploitable like machines for some test of OpenVas, Qualys and Nessus. I search for everything except web for web I have different plans. In mean time I search vulnhub but I didn't find anything interesting yet.

submitted by /u/TracerP
[link] [comments]