Dark Reading: Attacks/Breaches
Shouldering the Increasingly Heavy Cloud Shared-Responsibility Model

There are a number of solutions that can help ensure security and compliance mandates are met in the cloud, but organizations should prioritize integration and policy-based management.

Hacking on Medium
Intermediate Nmap: TryHackMe Writeup By Hiddeni

https://cdn-images-1.medium.com/max/1497/1*j5GIgB6TCJpeOlHhYGIICA.png
Link → https://tryhackme.com/room/intermediatenmap

Continue reading on Medium »

Hacking on Medium
What is Quantum Cryptography?

https://cdn-images-1.medium.com/max/2600/1*CSrjCLKeqAdHtZ7cMcv-cw.jpeg
Everything you Need to Know About Quantum Cryptography | Karthikeyan Nagaraj

Continue reading on Medium »

Hacking on Medium
Part II: SaaS-ational Command and Control — Using Social Media and SaaS Platforms for Malicious…

https://cdn-images-1.medium.com/max/1800/0*QhZgJeDpxHpLkNI0.jpg
In a previous article, we explained how cybercriminals make use of Social Media, SaaS platforms, or pretty much any service with an API to…

Continue reading on Responsible Cyber »

Hacking on Medium
Stop Killing Your Malware! Learn to Perform Safe Scans for Self Developed Malwares

https://cdn-images-1.medium.com/max/600/0*s1aeuTeakYBvv18b.jpg
Message for Malware Developers

Continue reading on Medium »

Hacking on Medium
Can PDFs Contain Viruses? Test If You’ve Got A PDF Virus

https://cdn-images-1.medium.com/max/600/0*weksPQuo92Y6gHr7
Adobe PDF (Portable Document Format) files were once thought to be immune to viruses. However, since CNET announced a new virus was…

Continue reading on Medium »

Hacking on Medium
Hacking: It’s 80% Human, 20% Computer

https://cdn-images-1.medium.com/max/2600/0*8o31zFR5mGu-J-MM
Last week, as I was learning the fundamentals of reverse engineering, I made the decision to look into what makes a successful hack. I’m…

Continue reading on Medium »

hacking: security in practice
CISA: Multiple APTs exploited U.S. Government IIS Server, had access to a "federal civilian agency" from August to January 2023

https://external-preview.redd.it/4O6b4Dcel8Z0NiYizPUaWwpgmRnTx_kMNubxsewyibw.jpg?width=640&crop=smart&auto=webp&s=c9bcbca64c9fb6ae9a676c219ea9cf215ea86ade submitted by /u/misconfig_exe
[link] [comments]

hacking: security in practice
KillNet and affiliate hacktivist groups targeting healthcare with DDoS attacks

https://external-preview.redd.it/usdCPZphfsAuquLqU7eN4_ifcbScgMBVc97v7nOMQEg.jpg?width=640&crop=smart&auto=webp&s=0417a2ea975f0b81e5816d95be43647c45f8ed78 submitted by /u/SCI_Rusher
[link] [comments]

hacking: security in practice
Nmap keeps returning different results?

sudo nmap -Pn -p- -A -vvv IP_ADDRESS

The same nmap command has told me that: 10 ports are open (but not 6379 for Redis), that 3 ports are open including 6379 for Redis, and that every single port is closed.

I’m doing a CTF so I don’t expect a firewall to be messing with my results, and this is against a Windows machine if it matters (hence the -Pn). I’ve tried varying the command a bit as well, but I still get inconsistent results.

TL;DR

Since defensive measures are unlikely, what could cause nmap to behave unpredictably? Could it be related to heavy traffic from other users? Is this somehow related to Windows, since I’ve only ever had this happen when scanning Windows machines?

I appreciate any input

submitted by /u/Agent-BTZ
[link] [comments]

hacking: security in practice
What can be done with hosts stored in the Metasploit database?

Just been using Metasploit a bit recently and was just wondering what the point was of the database feature?

More specifically, can you use the hosts and their services which have been saved in the database (from an imported Nmap scan for example) to search for exploits which may be able to work on any of the hosts/services?

submitted by /u/melthamlewis
[link] [comments]