hacking: security in practice
Is he talking about the Flipper and if not is what he saying reasonable and a true possibility

https://external-preview.redd.it/mrPNDlBSyKqO-U5XiATWiVJr8jgSMOsFOys2gis_l9g.jpg?width=320&crop=smart&auto=webp&s=1c9a1c3d5556ab2047fccef6326145aeb220aef7 Apologies but i figure yall would have a greater insight into my curiousity. My question pertains to what's said around the 10 min mark. Curious if yall think he's talking about the Flipper or if it's something else being he describes it as a single card, that said it makes me wonder if it's even plausible. What are yall thoughts and how do you think it works.

submitted by /u/CoffeeTofee
[link] [comments]

hacking: security in practice
BingBang: AAD misconfiguration led to Bing.com search results manipulation and account takeover

https://external-preview.redd.it/kkYDG9pouUNbU3XijuSYTy3VAm04YsY984UhCp7o2TA.jpg?width=640&crop=smart&auto=webp&s=74b20fee2d5a4b7b211f6fb21e6bc9c30a80c460 submitted by /u/sagitz_
[link] [comments]

Dark Reading: Attacks/Breaches
Trojan-Rigged Tor Browser Bundle Drops Malware

Attackers are targeting cryptocurrency accounts belonging to users in Russia and more than 50 other countries.

Dark Reading: Attacks/Breaches
Phishing Emails Up a Whopping 569% in 2022

Credential phishing emails are the clear favorite of threat actors, with a 478% spike last year, new research shows.

Dark Reading: Attacks/Breaches
Cybersecurity Investment Outlook Remains Grim as Funding Activity Sharply Declines

Security analysts expect little improvement until at least the second half of the year.

Dark Reading: Attacks/Breaches
Using Observability to Power a Smarter Cybersecurity Strategy

With an infrastructure for observability, security teams can make better decisions about access and identity-based threats.

Dark Reading: Attacks/Breaches
Google: Commercial Spyware Used by Governments Laden With Zero-Day Exploits

Google TAG researchers reveal two campaigns against iOS, Android, and Chrome users that demonstrate how the commercial surveillance market is thriving despite government-imposed limits.

Hacking on Medium
How much is your dev team spending on GPT-4?

https://cdn-images-1.medium.com/max/612/1*cPt-4Pk8Jayo_LHK0MeUoA.jpeg
When OpenAI released GPT-4 a couple of weeks ago now, AI developers were still scrambling to transition from the completion model…

Continue reading on Medium »

Hacking on Medium
CTI Flash Briefing: CrowdStrike Tracking Active Intrusion Campaign Targeting 3CX Customers

https://cdn-images-1.medium.com/max/700/0*phtT9eNc5b0oRi42.png
Breakdown: Anyone using the softphone application 3CXDesktopApp from 3CX needs to monitor for any type of anomalous activity on their…

Continue reading on Hunter Strategy »

Hacking on Medium
Phishing Scams

Phishing is a type of online scam in which attackers create a fake website or email that looks like it is from a legitimate source in…

Continue reading on Medium »

Hacking on Medium
How CryptCard Prevents Hacking

https://cdn-images-1.medium.com/max/1920/0*GA1KxokmEATe2BQA.jpg
Reports of cryptocurrency platforms getting hacked are becoming far too regular.

Continue reading on Medium »

https://preview.redd.it/c11lsa2txrqa1.jpg?width=640&crop=smart&auto=webp&s=5251a672adaec74235c31ea91a73a91bb57bb048 submitted by /u/Dinervc_HDD
[link] [comments]

hacking: security in practice
List of common vulnerabilities?

I've been getting a bit further into some hacking, and I've found learning about the different common vulnerabilities like XSS, SQLi, SSTI, buffer overflows, command injection, etc. and what makes them work super fun, are there any good resources you reccomend as a decently thorough "field guide" for what they are, how they can be exploited, what you can do with them, how you can identify them, etc?

submitted by /u/TheMightyFlyingSloth
[link] [comments]

Bug Bounty Hakkında Bilmeniz Gerekenler!

Merhaba arkadaşlar derlemiş olduğum bu makale de sizlere soru cevap olarak gerekli tüm bilgileri vereceğim.Continue reading on Medium »
Read more...