Dark Reading: Attacks/Breaches
Niels Provos Joins Lacework as Head of Security Efficacy

Former Head of Security at Stripe and Distinguished Security Engineer at Google joins cloud security leader to help scale security excellence across customer base.

Dark Reading: Attacks/Breaches
Google Cloud and Palo Alto Networks Team to Protect the Modern Workforce

Enterprises can now adopt the industry's most comprehensive Zero Trust Network Access 2.0 to secure access to all applications from any device.

Dark Reading: Attacks/Breaches
KnowBe4 Supports Metaverse Safety Week

.

Dark Reading: Attacks/Breaches
Report: 79% of Employees Are Distracted at Work Amid a Year of Permacrisis

1Password's annual State of Access report reveals that distracted employees are twice as likely to do the bare minimum for security at work.

Dark Reading: Attacks/Breaches
Hackers Score Nearly $1M at Device-Focused Pwn2Own Contest

Offensive security researchers found 63 previously unreported vulnerabilities in printers, phones, and network-attached storage devices in the Zero Day Initiative's latest hackathon.

Dark Reading: Attacks/Breaches
The Cybersecurity Industry Doesn't Have a Stress Problem — It Has a Leadership Problem

Organizations need servant leaders to step forward and make their teams' professional effectiveness and happiness a priority.

Dark Reading: Attacks/Breaches
Third Annual Global CISO Report Identifies Significant Shifts in Hiring and Retaining Security Talent

Research from Marlin Hawk also shows a 15% increase in CISOs holding STEM-related degrees year-over-year, diversifying the succession talent pool.

Dark Reading: Attacks/Breaches
Uber Breached, Again, After Attackers Compromise Third-Party Cloud

Threat actors leak employee email addresses, corporate reports, and IT asset information on a hacker forum after an attack on an Uber technology partner.

Doing it the researcher’s way: How I Managed to Get SSTI (Server Side Template Injection) which…
https://medium.com/@jazdprince/doing-it-the-researchers-way-how-i-managed-to-get-ssti-server-side-template-injection-which-66b239ca0104?source=rss------bug_bounty-5

Hello everyone,Continue reading on Medium » (https://medium.com/@jazdprince/doing-it-the-researchers-way-how-i-managed-to-get-ssti-server-side-template-injection-which-66b239ca0104?source=rss------bug_bounty-5)

hacking: security in practice
RFID locks and security.

Heyo first time poster on the this subreddit. My college uses RFID chips in our student ID'S to open our dorms, classroom buildings etc. It's a decently funded state university. If I cloned an my RFID tag to keep in my car for all the times I lock myself out. Am I in any danger of invalidating my ID by doing so.

I'd imagine there is some security to prevent someone from skimming a student ID and just walking into the facilities.

How deep does RFID lock security run? Or is it just cut and dry pass/fail check to what ever the ID is on the chip?

submitted by /u/TooStupid2figureout
[link] [comments]

hacking: security in practice
Tools for subdomain brute forcing

* Amass = https://github.com/OWASP/Amass
* sublist3r = https://github.com/aboul3la/Sublist3r
* subfinder = https://github.com/projectdiscovery/subfinder
* PureDNS = https://github.com/d3mondev/puredns
* MassDNS = https://github.com/blechschmidt/massdns
* GoBuster = https://github.com/OJ/gobuster
* reconFTW = https://github.com/six2dez/reconftw
* subscraper = https://github.com/m8sec/subscraper
* ffuf = https://github.com/ffuf/ffuf

submitted by /u/DrinkMoreCodeMore
[link] [comments]

Doing it the researcher’s way: How I Managed to Get SSTI (Server Side Template Injection) which…

Hello everyone,Continue reading on Medium »
Read more...