Dark Reading: Attacks/Breaches
CSAF Is the Future of Vulnerability Management

Version 2.0 of the Common Security Advisory Framework will enable organizations to automate vulnerability remediation.

Dark Reading: Attacks/Breaches
Proofpoint Nabs Illusive, Signaling a Sunset for Deception Tech

Former pure-play deception startup Illusive attracts Proofpoint with its repositioned platform focusing on identity threat detection and response (ITDR).

Dark Reading: Attacks/Breaches
Automated Cybercampaign Creates Masses of Bogus Software Building Blocks

The proliferation of automated cyberattacks against npm, NuGet, and PyPI underscores the growing sophistication of threat actors and the threats to open source software supply chains.

Dark Reading: Attacks/Breaches
How Our Behavioral Bad Habits Are a Community Trait and Security Problem

Learn to think three moves ahead of hackers so you're playing chess, not checkers. Instead of reacting to opponents' moves, be strategic, and disrupt expected patterns of vulnerability.

Dark Reading: Attacks/Breaches
Royal Ransomware Puts Novel Spin on Encryption Tactics

An emerging cybercriminal group linked with Conti has expanded its partial encryption strategy and demonstrates other evasive maneuvers, as it takes aim at healthcare and other sectors.

Dark Reading: Attacks/Breaches
Analysis Shows Attackers Favor PowerShell, File Obfuscation

Aiming to give threat hunters a list of popular attack tactics, a cybersecurity team analyzed collections of real-world threat data to find attackers' most popular techniques.

hacking: security in practice
FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked

submitted by /u/DrinkMoreCodeMore
[link] [comments]

hacking: security in practice
How do you find the Origin server if it's behind reverse proxy / CDN - easiest and cheapest ways?

Give me an example of how you would do this without needing some expensive subscription(s)?

submitted by /u/Intelligent-Way1288
[link] [comments]

hacking: security in practice
Here is my Day 1 walk through of TryHackMe's Advent of Cyber! A great event for beginners and experts alike. Still going on!

Going to drop these regularly until the end of the event. Let me know what you think!

You can still join today! It is great for beginners to learn and even people that know their way around get the chance to be hands on with things they might have other wise not touched.

​

See you there!

https://github.com/s1l1c0np1r4t3/TryHackMe-AdventOfCyber2022/blob/main/Day-1/TryHackMe-AdventOfCyber-Day1.md

submitted by /u/s1l1c0np1r4t3
[link] [comments]

Deep Web
I have no experience with the deep Web so looking for any help regarding my situation below.

Hi so I'm a young male who was druged and sexually assaulted not too long ago. Currently the detective involved with the case believes there is possible trafficking involved and that I got away simply because I woke up a lot sooner than the suspect thought I would and the way I escaped the detective thinks this person probably did not even consider I would even try to escape the way I did.

My question is even though I don't remember everything about the assault I remember certain things such as a lot of equipment that was brought into the room that was covered up that I couldn't see and other things that make me believe he was probably videotaping what he was doing as well.

He obviously would not post this stuff on a normal website however I have suspicion he could be posting it on dark web forms.

My question is, does anybody know a way I could try and look for this kind of thing to help with my case?

I have really no experience with the dark web and I don't want to go on websites that can possibly incriminate me or something like that because my intent is not to look at anything on the website, it is simply to try and find possible incriminating things about this guy and find the videos of me on these websites that can further help my case.

Does anybody know the proper things I need in order to even view these dark web forms to begin with and can anybody put me in the possible direction of where I should look for this kind of thing?

I would be looking at it via a cell phone. I don't have a computer or anything so pretty much just trying to see how to go about doing this on a phone.

Thanks!

submitted by /u/Cali_24-Sav
[link] [comments]

Exploit Collector
Ransom.Win64.AtomSilo MVID-2022-0666 Cryptography Logic Flaw

https://1.bp.blogspot.com/-3PgjWVftdQ0/WWlvP-R2mXI/AAAAAAAAIM8/iBQyafDa-iYc-AHcRZlLffBv9_pWsP_-gCLcBGAs/s1600/h30.png
Ransom.Win64.AtomSilo malware suffers from a cryptography logic flaw.

SHA-256 | 3f34b49de4ec6bce1e97067f5337c3513d5b66c17f2c5706a17f5ee88759871f

Download
Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2022
Original source: https://malvuln.com/advisory/5559e9f5e1645f8554ea020a29a5a3ee.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln
Backup media: infosec.exchange/@malvuln

Threat: Ransom.Win64.AtomSilo
Vulnerability: Crypto Logic Flaw
Family: AtomSilo
Type: PE64
MD5: 5559e9f5e1645f8554ea020a29a5a3ee
Vuln ID: MVID-2022-0666
Disclosure: 12/14/2022
Description: AtomSilo ransomware FAILS to encrypt non PE files that have a ".exe" in the filename. Creating specially crafted file names successfully evaded encryption for this malware sample.

E.g.

Test.exe.docx
Test.exe.pdf

Tested successfully in a virtual machine environment.
PoC Video:
https://www.youtube.com/watch?v=xyBt9Ppb-xc

Exploit/PoC:
Create files with ".exe" within the filename.
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com