Introducing HackerOne Assets | HackerOne
This blog post is part 1 of an ongoing series that provide deep dives into HackerOne Assets and its core capabilities. Having the right automated…
Month: April 2023
Security Update: Spring4Shell Vulnerability Modules Already Scanning on Detectify
Numerous vulnerabilities have been found this week in Spring, a popular Java Web app development framework from VMware. Detectify Surface Monitoring and Application Scanning customers…
US, UK warn of govt hackers using custom malware on Cisco routers
The US, UK, and Cisco are warning of Russian state-sponsored APT28 hackers deploying a custom malware named ‘Jaguar Tooth’ on Cisco IOS routers, allowing unauthenticated…
Bash and shell expansions: lazy list-making
A tour of brace expansion, shell parameter expansions, and playing with substrings in Bash. It’s that time of year again! When stores start putting up…
Israeli Spyware Firm Shut Down After Its Hacking Tools Exposed
There have been accusations on QuaDream, the Israeli firm using hacking tools for spying on journalists, opposition figures, and advocacy organizations in at least 10…
Giving a Face to the Malware Proxy Service ‘Faceless’ – Krebs on Security
For the past seven years, a malware-based proxy service known as “Faceless” has sold anonymity to countless cybercriminals. For less than a dollar per day,…
DoNot APT Hackers Attack Via Android Malware via Chatting Apps
CYFIRMA recently detected a cyber-attack on a person living in Kashmir, India, and obtained two malware pieces from the victim’s mobile download folder. The investigation…
What is Spear Phishing ? Guide to Motives,Techniques and Prevention
Every day tens of thousands of Spear phishing emails are sent to millions of victims around the world. Cyber-attacks have different pathways now; they can…
Meeting the Mediation Team at H1-702
Hello world, we are the Mediation Team. For those who don’t know what we do – we are here to help the ethical hacking community…
Iranian hackers behind retaliatory cyberattacks on US orgs
Microsoft has discovered that an Iranian hacking group known as ‘Mint Sandstorm’ is conducting cyberattacks on US critical infrastructure in what is believed to be…
Ethical hacker: CISOs have more to worry about than a zero day exploit
TL/DR: The past six months have brought some herculean security issues such as Log4j and the more recent Spring4Shell. It’s now not uncommon to hear…
The care and feeding of an IoT device
Why IoT devices are, basically, puppies, and whether or not you should give somebody one for Christmas. Giving someone a puppy for Christmas might work…