Dark Reading: Attacks/Breaches
Patch ASAP: Critical Citrix, VMware Bugs Threaten Remote Workspaces With Takeover

Hole-y software alert, Batman: Cybercriminal faves Citrix Gateway and VMware Workspace ONE have authentication-bypass bugs that could offer up total access to attackers.

Dark Reading: Attacks/Breaches
Lacework Extends CNAPP Capabilities With Attack Path Analysis and Agentless Workload Scanning

Greater insight into attack paths and runtime visibility helps customers reduce risk and improve cloud security posture.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How US Businesses Suffer From the Lack of Personal Data Privacy Laws

The stalling of federal legislation and the continued expansion of data brokers are fueling a phishing epidemic.

Dark Reading: Attacks/Breaches
Long Island Midterm Votes Delayed Due to Cyberattack Aftereffects

Suffolk County had to hand deliver voting databases with ballot results to the county election headquarters.

Dark Reading: Attacks/Breaches
Experian, T-Mobile Pay Up in Multimillion-Dollar Data Breach Settlements

Massachusetts Attorney General announced settlements across multiple states for damages from Experian's 2012 and 2015 breaches that violated consumer protection and notification laws.

Dark Reading: Attacks/Breaches
A Better Way to Resist Identity-Based Cyber Threats

New approaches to identity access management are indispensable.

Dark Reading: Attacks/Breaches
Cloud9 Malware Offers a Paradise of Cyberattack Methods

The Swiss Army knife-like browser extension is heaven for attackers — and can be hell for enterprise users.

Dark Reading: Attacks/Breaches
What We Really Mean When We Talk About ‘Cybersecurity’

A lack of precision in our terminology leads to misunderstandings and confusion about the activities we engage in, the information we share, and the expectations we hold.

Dark Reading: Attacks/Breaches
Compliancy Group Urges Healthcare Organizations to Complete Their HIPAA Security Risk Assessments

An annual HIPAA security risk assessment is required to meet HIPAA requirements.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Confidence in Data Recovery Tools Low

IT practitioners are developing ransomware response plans, but many of them are not confident in their data resiliency tools.

Dark Reading: Attacks/Breaches
Research Finds Less Than a Quarter of Organizations Fully Confident Ex-Employees No Longer Have Access to Company Infrastructure

Teleport releases its second annual State of Infrastructure Access and Security report.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Industrial Control Systems (ICS) Security Market Worth $23.7B by 2027, Report Says

The market growth is driven by the convergence of IT and OT systems. By region, North America is estimated to account for the largest market size during the forecast period.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
The CIS Benchmarks Community Consensus Process

The CIS Benchmarks are unique for many reasons. None compare to the community consensus process that forms their hardening guidance. Learn how to get involved.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Extortion Economics: Ransomware's New Business Model

Ransomware-as-a-service lowers the barriers to entry, hides attackers’ identities, and creates multitier, specialized roles in service of ill-gotten gains.

Dark Reading: Attacks/Breaches
Instagram Star Gets 11 Years for Cybercrimes Used to Fund His Lavish Lifestyle

Prolific online scammer and social media influencer 'Hushpuppi' sentenced for bank cyber heists, BEC campaigns, money laundering, and more.

$70,000 bounty given by google to a hacker who accidentally bypass google pixel screen lock
https://secpy.medium.com/70-000-bounty-given-by-google-to-a-hacker-who-accidentally-bypass-google-pixel-screen-lock-a0845d09afa9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Google resolved a high security issue affecting all pixels devices.Continue reading on Medium » (https://secpy.medium.com/70-000-bounty-given-by-google-to-a-hacker-who-accidentally-bypass-google-pixel-screen-lock-a0845d09afa9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do NOP slides help in code execution off of the stack?

Hey guys, I wanted to ask, how do NOP slides ACTUALLY even help with getting shellcode to run in a basic buffer overflow? From my understanding, it is done because the stack pointer changes depending on the environment in which you are running the vulnerable binary. And because of that, there needs to be a way to compensate for the address changing; thus, the NOP slide helps to hit the shellcode after the EIP points to the stack pointer. Please correct me if I'm wrong.

Also, the reason this is somewhat confusing for me is that FROM MY EXPERIENCE isn't an issue if you just overwrite the EIP by pointing to an address with the instructions JMP ESP, which then accurately jumps to the stack pointer for that specific environment.

If my question isn't clear or doesn't make sense, please let me know and I'll rephrase it in a better way.

Thank you.

submitted by /u/Garlic-George-420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Understanding Of Cracking UNIX Passwords Using Python

The extensive selection of built-in and external libraries is where Python’s real power lies.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video