Dark Reading: Attacks/Breaches
Microsoft Azure-Based Kerberos Attacks Crack Open Cloud Accounts

Two common attacks against on-premises Kerberos authentication servers — known as Pass the Ticket and Silver Ticket — can be used against Microsoft's Azure AD Kerberos, a security firms says.

Dark Reading: Attacks/Breaches
Zacks Investment Research Hack Exposes Data for 820K Customers

Zacks Elite sign-ups for the period 1999–2005 were accessed, including name, address, email address, phone number, and the password associated with Zacks.com.

Dark Reading: Attacks/Breaches
Google Pushes Privacy to the Limit in Updated Terms of Service

In the Play Store's ToS, a paragraph says Google may remove "harmful" applications from users' devices. Is that a step too far?

Dark Reading: Attacks/Breaches
Despite Slowing Economy, Demand for Cybersecurity Workers Remains Strong

New Cyberseek™ data shows US is short nearly 530,000 skilled cybersecurity staff.

Dark Reading: Attacks/Breaches
Researchers Pioneer PoC Exploit for NSA-Reported Bug in Windows CryptoAPI

The security vulnerability allows attackers to spoof a target certificate and masquerade as any website, among other things.

Dark Reading: Attacks/Breaches
GoTo Encrypted Backups Stolen in LastPass Breach

Encrypted backups for several GoTo remote work tools were exfiltrated from LastPass, along with encryption keys.

hacking: security in practice
*FULLY ETHICAL* What is the worst that I can do with a pc connected to a school network

Before I start I just want to say that everything is ethical and my school is running a test on their network and asked me to help along with a few other people.

What could I do if a school PC was connected to a school network via ethernet, would it be possible to get the school wifi password, could I access other pcs on the network, could I enter databases inside of the school?

The pcs are also running on kali live using a usb drive.

Any help is appreciated and once again everything is ethical

submitted by /u/RedNightBlood
[link] [comments]

hacking: security in practice
King of The Hill where I should start?

I want to start playing king of the hill on tryhackme but I cant find any tutorial on this topic. Where i should to learn this skill? Or what rooms I should enroll on tryhackme?

submitted by /u/Rezvord
[link] [comments]

hacking: security in practice
I have a Galaxy S7 phone that is completely worthless unless I can put a new operating system on it.

The Google Play services never works after a new install. I need a way to force an operating system on it. Can I do this through a micro SD card or through the PC? The phone works fine except for that stupid Google Play services won't work. Reboot after reboot won't work, I need to force an operating system on this worthless phone? Help me save this brick please. I don't have the money to buy a new phone at the moment!

submitted by /u/propheticguy
[link] [comments]

hacking: security in practice
Feroxbuster, Gobuster etc. on HTTPS

Is it possible to use these kind of tools on a HTTPS website? I tried it once with proxychains but even tho i excluded wildcards that returned to the main site, I still couldnt find any directories. Does it have some sort of protection?

submitted by /u/eltico69
[link] [comments]

Dark Reading: Attacks/Breaches
Snyk Gets Nod of Approval With ServiceNow Strategic Investment

One of the most closely watched security startups continues to build bank because its platform appeals to both developers and security pros.