Dark Reading: Attacks/Breaches
What CISOs Can Do About Brand Impersonation Scam Sites

Apply these 9 tips to proactively fight fraudulent websites that steal customers' trust, money, and personally identifiable information.

Top sites for passive reconnaissance
https://medium.com/@TheUnwearyPentester/top-sites-for-passive-reconnaissance-1d9cc5625ac9?source=rss------bug_bounty-5

Passive reconnaissance is the process of collecting information in a covert manner about an intended target without the target knowing…Continue reading on Medium » (https://medium.com/@TheUnwearyPentester/top-sites-for-passive-reconnaissance-1d9cc5625ac9?source=rss------bug_bounty-5)

hacking: security in practice
Problems cracking Windows 10 password hash

Hello, I have problems cracking a windows password. Allegedly the hash is stored in the C:/Windows/System32/config/SAM file, but you also need the C:/Windows/System32/config/SYSTEM file. Then you can use a program called samdump2 to read the hash to then crack it.
Couple of problems:
1. Eventhough I know the password and put it in the wordlist, neither hashcat nor john are able to recognize it as the correct password.
2. When I change the password in Windows, shutdown and repeat the steps from before the result of samdump2 does not change.
Am I misunderstanding something? Has the location changed?

submitted by /u/knight-bus
[link] [comments]

hacking: security in practice
Dutch police take down Exclu encrypted chat service with 42 arrests, €4 million seized

https://external-preview.redd.it/fHfbIJF9JuqmYK7nybS1du4W_35UyOtuGZYrjC9lsAU.jpg?width=640&crop=smart&auto=webp&s=051b090f75a2dc2c7691680d2c6ee3b5697d2fcf submitted by /u/NinjaElectricMeteor
[link] [comments]

Update to the REF2924 intrusion set and related campaigns
https://www.reddit.com/r/redteamsec/comments/10svfku/update_to_the_ref2924_intrusion_set_and_related/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.elastic.co/security-labs/update-to-the-REF2924-intrusion-set-and-related-campaigns) [comments] (https://www.reddit.com/r/redteamsec/comments/10svfku/update_to_the_ref2924_intrusion_set_and_related/)

Hacking on Medium
Cybersecurity for Noobs: Part 1

https://cdn-images-1.medium.com/max/2600/0*rGi02zUx0JyxTWDg
A brief overview of how to get started in the Cybersecurity field

Continue reading on Martian Defense Cybersecurity »

Hacking on Medium
Don’t Be a Cybercriminal Unknowingly: The Dangers of Downloading Cracks from the Pirate Bay

https://cdn-images-1.medium.com/max/1024/1*H4fgMxPMUx1iX3l8UkTopw.png
We’ve all been guilty of skipping steps to get what we want, especially in this era of instant gratification.

Continue reading on Medium »

Hacking on Medium
Top five Cyber Threat Intel stories of the week: 01/30 to 02/03/2023

https://cdn-images-1.medium.com/max/1000/0*7r7ctBGyJVDsPEl7
Top 5 general threat intelligence stories of the week. This is from TLP white/open-source websites, so please feel free to share and enjoy…

Continue reading on Hunter Strategy »

Hacking on Medium
Illicit Trade and E-Commerce

https://cdn-images-1.medium.com/max/1254/1*aFqDy_xKiiA2St_Acro0Vg.jpeg
By Christian Hernandez

Continue reading on Medium »

Dark Reading: Attacks/Breaches
Iran-Backed Actor Behind 'Holy Souls' Cyberattack on Charlie Hebdo, Microsoft Says

The January attack was in retaliation for the satirical French magazine's decision to launch a cartoon contest to lampoon Iran's Supreme Leader.

Social mídia takeover. Como consegui ' tomar conta ' do perfil de um hacker no Twitter.

Meu nome é Diego, e vamos ao que interessa.Continue reading on Medium »
Read more...

CSRF Where Token is duplicated in Cookie | 2023

Portswigger Cross-Site Request Forgery Lab Simple Solution | Karthikeyan NagarajContinue reading on InfoSec Write-ups »
Read more...

Social mídia takeover. Como consegui ' tomar conta ' do perfil de um hacker no Twitter.
https://medium.com/@Diegoeducacao404.../social-m%C3%ADdia-takeover-como-consegui-tomar-conta-do-perfil-de-um-hacker-no-twitter-d315f2f16cb5?source=rss------bug_bounty-5