Twitter bug let legacy verified accounts see blue check in their profile
Update 5/1/23: Title updated to reflect this bug only allowed the user to see their legacy check. See update at end of article. A silly Twitter…
Month: May 2023
Hackers use fake ‘Windows Update’ guides to target Ukrainian govt
The Computer Emergency Response Team of Ukraine (CERT-UA) says Russian hackers are targeting various government bodies in the country with malicious emails supposedly containing instructions on how…
Security@ 2021 Call for Speakers is Open
HackerOne’s global Security@ conference is back for its fifth year on September 20, 2021. Today, we’ve opened our call for speakers! Are you interested in…
Twitter bug let legacy verified accounts get the blue check back
Update 5/1/23: The bug was fixed by Twitter soon after posting this article. See update at end of article. A silly Twitter bug allowed previously-verified accounts…
Detectify security updates for 4 April
For continuous coverage, we push out major Detectify security updates every two weeks, keeping our tool up-to-date with new findings, features and improvements sourced from…
Twitter bug lets legacy verified accounts get the blue check back
Update 5/1/23: The bug was fixed by Twitter soon after posting this article. A silly Twitter bug allows previously-verified accounts to add their legacy ‘Blue…
A Chaos-Based Encryption Algorithm for Database System
Abstract: This paper introduces a new Database Transposition, Substitution and XORing Algorithm (DTSXA) based on using chaotic maps. It is based primarily on two well-known…
New Decoy Dog Malware Toolkit Uncovered: Targeting Enterprise Networks
May 01, 2023Ravie Lakshmanan An analysis of over 70 billion DNS records has led to the discovery of a new sophisticated malware toolkit dubbed Decoy…
Hackers leak images to taunt Western Digital’s cyberattack response
The ALPHV ransomware operation, aka BlackCat, has published screenshots of internal emails and video conferences stolen from Western Digital, indicating they likely had continued access…
Real-Time Protection Against Lateral Movement
May 01, 2023The Hacker NewsCyber Threat / Authentication Just a few short years ago, lateral movement was a tactic confined to top APT cybercrime organizations…
Reddit’s Bug Bounty Program Kicks Off: Q&A with Reddit’s Allison Miller and Spencer Koch, and Top Program Hacker @RENEKROKA
After three years running a successful private bug bounty program on HackerOne, Reddit has announced that it’s taking their bug bounty program public. We sat down with Reddit’s…
APT41’s PowerShell Backdoor Download Files From Windows
Researchers from Threatmon uncovered a targetted PowerShell backdoor malware attack from APT41 that bypasses the detections and allows threat actors to execute commands, download and…