kid

joined 6 months ago
MODERATOR OF
cybersecurity
sorted by: new top controversial old
19
Experts disclosed a critical information-disclosure flaw in Microsoft Copilot Studio (securityaffairs.com)
60
Hacker leaks upcoming episodes of Netflix shows online following security breach (www.bitdefender.com)
30
CVE-2024-7272: Critical Heap Overflow Vulnerability Discovered in FFmpeg, PoC Published (securityonline.info)
164
Russia tells citizens to switch off home surveillance because the Ukrainians are coming (www.theregister.com)
15
North Korean Hackers Deploy New MoonPeak Trojan in Cyber Campaign (thehackernews.com)
7
GitHub Enterprise Server vulnerable to critical auth bypass flaw (www.bleepingcomputer.com)
16
Hackers use PHP exploit to backdoor Windows systems with new malware (www.bleepingcomputer.com)
24
Average DDoS attack costs $6,000 per minute (to the victim) (www.helpnetsecurity.com)
12
Hackers target bank clients in Czechia, Hungary and Georgia in novel phishing campaign (therecord.media)
34
Pro-Russia group Vermin targets Ukraine with a new malware family (securityaffairs.com)
27
Ransomware Trends: Most Attacks Hit Between 1am and 5am, Study Finds (www.techrepublic.com)
FlightAware configuration error leaked user data for years in c/[email protected]
[–] [email protected] 3 points 2 days ago

Take that with a grain of salt.

35
Toyota confirms breach after stolen data leaks on hacking forum (www.bleepingcomputer.com)
Donald Trump interview with Elon Musk disrupted by DDoS Cyber Attack in c/[email protected]
The Illusion Of Reputational Damage in c/[email protected]
[–] [email protected] 5 points 2 weeks ago

I like to use the 2013 Target breach case. They lost $1 billion due to the attack, their stocks dropped significantly after the attack, had several lawsuits, they closed a few stores, and changed the CEO and CIO. But a few months later, all was forgiven, their stocks recovered, and life went on.

Don't get me wrong, the risks of a cyber attack have to be taken seriously. But I feel that I have overestimated the impacts of reputational damage my whole life, as an infosec professional. My thinking was always like this: if you get reputational damage, you are done, no chance to recover, it is the end of it.

I'm following the Crowdstrike case, but I would bet that they will lose some market share (mostly prospects), perhaps some layoffs, but stocks will come up eventually.

332 Million Email Addresses Scraped from SOCRadar.io Dumped Online in c/[email protected]
[–] [email protected] 3 points 2 weeks ago

Not as much as if it contained passwords, for sure. Bu it gives a nice mailing list for phishing and so on.

Major Russian banks hit with DDoS attacks as Ukraine claims responsibility in c/[email protected]
[–] [email protected] 10 points 3 weeks ago

Depends of the country. Disrupt with Internet/communications may be a crime in some countries.

Cyber firm KnowBe4 hired a fake IT worker from North Korea in c/[email protected]
[–] [email protected] 14 points 4 weeks ago

Kudos to SOC team.

CrowdStrike Explains Friday Incident Crashing Millions of Windows Devices in c/[email protected]
Police allege ‘evil twin’ in-flight Wi-Fi used to steal info in c/[email protected]
[–] [email protected] 2 points 1 month ago

Well, depends. If the user go to a captive portal to "authenticate" before the VPN could closes, than no. But, if the VPN can "pierce" through it (without any intervention from the AP), than yes. Anyways, If the user is willing to provide authentication data (like social media accounts, etc), nothing matters.

TeamViewer investigating intrusion of corporate IT environment in c/[email protected]
P2PInfect botnet targets REdis servers with new ransomware module in c/[email protected]
[–] [email protected] 3 points 1 month ago (2 children)

Yes.

303,481 servers worldwide, according to Shodan.

Ukraine says hackers abuse SyncThing tool to steal data in c/[email protected]
[–] [email protected] 2 points 2 months ago (2 children)

Interesting. I didn't know that syncthing does hole punching.

From a defense perspective, how would this work with an enterprise firewall, with UDP/TCP only allowed to specific destinations or specific sources. Example: only the internal DNS relay server can access 53/UDP and only the internal proxy server can access 80/443. What I mean is in a network with a very closed firewall, how would Syncthing be able to connect with peers?

Ukraine says hackers abuse SyncThing tool to steal data in c/[email protected]
[–] [email protected] 11 points 2 months ago (3 children)

Instance Rules

Be respectful. Everyone should feel welcome here.

view more: next ›