Dark Reading: Attacks/Breaches
Third Annual Global CISO Report Identifies Significant Shifts in Hiring and Retaining Security Talent

Research from Marlin Hawk also shows a 15% increase in CISOs holding STEM-related degrees year-over-year, diversifying the succession talent pool.

Dark Reading: Attacks/Breaches
Uber Breached, Again, After Attackers Compromise Third-Party Cloud

Threat actors leak employee email addresses, corporate reports, and IT asset information on a hacker forum after an attack on an Uber technology partner.

Doing it the researcher’s way: How I Managed to Get SSTI (Server Side Template Injection) which…
https://medium.com/@jazdprince/doing-it-the-researchers-way-how-i-managed-to-get-ssti-server-side-template-injection-which-66b239ca0104?source=rss------bug_bounty-5

Hello everyone,Continue reading on Medium » (https://medium.com/@jazdprince/doing-it-the-researchers-way-how-i-managed-to-get-ssti-server-side-template-injection-which-66b239ca0104?source=rss------bug_bounty-5)

hacking: security in practice
RFID locks and security.

Heyo first time poster on the this subreddit. My college uses RFID chips in our student ID'S to open our dorms, classroom buildings etc. It's a decently funded state university. If I cloned an my RFID tag to keep in my car for all the times I lock myself out. Am I in any danger of invalidating my ID by doing so.

I'd imagine there is some security to prevent someone from skimming a student ID and just walking into the facilities.

How deep does RFID lock security run? Or is it just cut and dry pass/fail check to what ever the ID is on the chip?

submitted by /u/TooStupid2figureout
[link] [comments]

hacking: security in practice
Tools for subdomain brute forcing

* Amass = https://github.com/OWASP/Amass
* sublist3r = https://github.com/aboul3la/Sublist3r
* subfinder = https://github.com/projectdiscovery/subfinder
* PureDNS = https://github.com/d3mondev/puredns
* MassDNS = https://github.com/blechschmidt/massdns
* GoBuster = https://github.com/OJ/gobuster
* reconFTW = https://github.com/six2dez/reconftw
* subscraper = https://github.com/m8sec/subscraper
* ffuf = https://github.com/ffuf/ffuf

submitted by /u/DrinkMoreCodeMore
[link] [comments]

Doing it the researcher’s way: How I Managed to Get SSTI (Server Side Template Injection) which…

Hello everyone,Continue reading on Medium »
Read more...

Deep Web
Deepweb review 2022

https://external-preview.redd.it/FtlI7y9DkNafGy8_ozUbpwi_tFsJeR9Ll935aEC1sbM.jpg?width=320&crop=smart&auto=webp&s=bb540a5c80806a133305e74cf012da30894373ac submitted by /u/Top-Power-5261
[link] [comments]

Hacking on Medium
How to access users divice in Flutter

https://cdn-images-1.medium.com/max/2600/1*L3qojEBijGVs5XPuKY5W5w.png
It is generally not possible to access a user’s device in a Flutter app. This is because accessing a user’s device without their explicit…

Continue reading on Medium »

Hacking on Medium
TryHackMe Advent of Cyber [Day 13]-> Packet Analysis with Wireshark

https://cdn-images-1.medium.com/max/700/0*dbTxzvOmh24cd6JG.png
Network packets are the basic unit of data in a network. They are the smallest unit of data that can be sent over a network. The network…

Continue reading on Medium »

Hacking on Medium
How to catch a cheating partner or spouse effectively

https://cdn-images-1.medium.com/max/600/1*xw7scpVABM7sjQY69Wko9A.jpeg
It is no new story that people have spoken about having a cheating partner from ages to ages, even before technology, literally from the…

Continue reading on Medium »