Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Tools

Vulnerabilities

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

PacketStorm
Cisco SD-WAN Security Bug Allows Root Code Execution new
Hackers Somehow Got Their Rootkit A Microsoft-Issued Digital Certificate new
Republicans Want The Brakes Pumped On Aviation Cybersecurity new
Ransomware Sinks Teeth Into Candy Corn Maker Ahead Of Halloween
Hackers Hijacked Thousands Of YouTube Accounts
Duo Sentenced For Roles In Running Bulletproof Hosting Service
Sim Swapper Doxes And SWATs His Accomplice
Black Market Cashes In On Fake COVID-19 Vaccination Records
Hackers Are Disguising Their Malicious JavaScript With A Trick
Google Finally Strips File Transfer Protocol Code From Chrome Browser
Hacker Defaces Donald Trump's Website
Microsoft Called Out As Big Malware Hoster
The Register
Better late than never: Microsoft rolls out a public preview of E2EE in Teams calls new
Recycled Cobalt Strike key pairs show many crooks are using same cloned installation new
Unhappy customers and their own tricks used against them, REvil ransomware gang reportedly pulled offline by 'multi-country' operations new
How your phone, laptop, or watch can be tracked by their Bluetooth transmissions new
YouTubers fell for shady 'sponsors' who seized, then sold, accounts new
We regret to inform you there's an RCE vuln in old version of WinRAR. Yes, the file decompression utility
Research finds consumer-grade IoT devices showing up... on corporate networks
What is self-learning AI and how does It tackle ransomware?
Uncle Sam to clip wings of Pegasus-like spyware – sorry, 'intrusion software' – with proposed export controls
We don’t want to be critical, but humans alone aren’t enough to protect your ICS
Not just deprecated, but deleted: Google finally strips File Transfer Protocol code from Chrome browser
NHS Digital exposes hundreds of email addresses after BCC blunder copies in entire invite list to 'Let's talk cyber' event
Reddit - NetSec
Server overload by enforcing DHE key exchange using minimal bandwidth new
Franken-phish: TodayZoo built from other phishing kits - Microsoft Security Blog new
Binary Analysis Framework B2R2 v0.5.0 released. new
50 Shades of SolarWinds Orion Deserialization (Part 1: CVE-2021–35215) new
PCI DSS Firewall Requirements new
Broken UDP scanning in Nmap v7.91 new
Cracking RDP NLA Supplied Credentials for Threat Intelligence new
How to build a network scanning analysis platform — Part I new
OffensiveVBA release
Semgrep Taint Mode Now in Beta
SharpCGHunter - A C# tool to receive the status of Windows Defender Credential Guard on network hosts
7 589 347 BGP route leaks and 4 357 906 BGP hijacks in Q3 2021
Bleeping Computer
The Week in Ransomware - October 22nd 2021 - Striking back new
SCUF Gaming store hacked to steal credit card info of 32,000 customers new
DarkSide ransomware rushes to cash out $7 million in Bitcoin new
Groove ransomware calls on all extortion gangs to attack US interests new
Microsoft: WizardUpdate Mac malware adds new evasion tactics new
Google cuts Play Store dev fees to 15% for all subscriptions new
Italian celebs' data exposed in ransomware attack on SIAE new
Microsoft Teams adds end-to-end encryption for one-to-one calls new
CISA: GPS software bug may cause unexpected behavior this Sunday new
Microsoft: Windows 11 printing issues fixed in the KB5006746 update new
Massive campaign uses YouTube to push password-stealing malware
Evil Corp demands $40 million in new Macaw ransomware attacks
The Hacker News
'Lone Wolf' Hacker Group Targeting Afghanistan and India with Commodity RATs new
Hackers Set Up Fake Company to Get IT Experts to Launch Ransomware Attacks new
Researchers Discover Microsoft-Signed FiveSys Rootkit in the Wild new
Before and After a Pen Test: Steps to Get Through It
Bug in Popular WinRAR Software Could Let Attackers Hack Your Computer
Product Overview: Cynet SaaS Security Posture Management (SSPM)
Malicious NPM Packages Caught Running Cryptominer On Windows, Linux, macOS Devices
U.S. Government Bans Sale of Hacking Tools to Authoritarian Regimes
Hackers Stealing Browser Cookies to Hijack High-Profile YouTube Accounts
Two Eastern Europeans Sentenced for Providing Bulletproof Hosting to Cyber Criminals
Researchers Break Intel SGX With New 'SmashEx' CPU Attack Technique
OWASP's 2021 List Shuffle: A New Battle Plan and Primary Foe

Threat Wire

Exploits

Packet Storm Exploits
Windows IKEEXT AuthIP Unvalidated GSS_ID Privilege Escalation new
Online Course Registration 1.0 SQL Injection new
Clinic Management System 1.0 Code Execution / SQL Injection new
Jetty 9.4.37.v20210219 Information Disclosure new
Small CRM 3.0 Cross Site Scripting
NIMax 5.3.1f0 Denial Of Service
Easy Chat Server 3.1 Directory Traversal
SonicWall SMA 10.2.1.0-17sv Password Reset
Macro Expert 4.7 Unquoted Service Path
WordPress Enfold Theme 4.8.3 Cross Site Scripting
Online Motorcycle (Bike) Rental System 1.0 SQL Injection
Backdoor.Win32.LanaFTP.k Heap Corruption
Exploit-DB Webapps
[webapps] Jetty 9.4.37.v20210219 - Information Disclosure
[webapps] Clinic Management System 1.0 - SQL injection to Remote Code Execution
[webapps] Online Course Registration 1.0 - Blind Boolean-Based SQL Injection (Authenticated)
[webapps] Small CRM 3.0 - 'description' Stored Cross-Site Scripting (XSS)
[webapps] Easy Chat Server 3.1 - Directory Traversal and Arbitrary File Read
[webapps] SonicWall SMA 10.2.1.0-17sv - Password Reset
[webapps] Dolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation
[webapps] WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS)
[webapps] myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS)
[webapps] Online Motorcycle (Bike) Rental System 1.0 - Blind Time-Based SQL Injection (Unauthenticated)
[webapps] Support Board 3.3.4 - 'Message' Stored Cross-Site Scripting (XSS)
[webapps] Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read
Exploit-DB Local and Privilege Escalation
[local] Macro Expert 4.7 - Unquoted Service Path
[local] SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path
[local] Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial-of-Service (PoC)
[local] Google SLO-Generator 2.0.0 - Code Execution
[local] Ether_MP3_CD_Burner 1.3.8 - Buffer Overflow (SEH)
[local] Cyberfox Web Browser 52.9.1 - Denial-of-Service (PoC)
[local] XAMPP 7.4.3 - Local Privilege Escalation
[local] Microsoft Windows cmd.exe - Stack Buffer Overflow
[local] TotalAV 5.15.69 - Unquoted Service Path
[local] Active WebCam 11.5 - Unquoted Service Path
[local] ECOA Building Automation System - Missing Encryption Of Sensitive Information
[local] Facebook ParlAI 1.0.0 - Deserialization of Untrusted Data in parlai
Exploit-DB DoS
[dos] NIMax 5.3.1f0 - 'VISA Alias' Denial of Service (PoC)
[dos] NIMax 5.3.1 - 'Remote VISA System' Denial of Service (PoC)
[dos] Redragon Gaming Mouse - 'REDRAGON_MOUSE.sys' Denial-Of-Service (PoC)
[dos] Yenkee Hornet Gaming Mouse - 'GM312Fltr.sys' Denial-Of-Service (PoC)
[dos] SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service
[dos] Telegram Desktop 2.9.2 - Denial of Service (PoC)
[dos] Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)
Exploit-DB Shellcode
Exploit-DB Papers
Exploit-DB Remote
[remote] Cypress Solutions CTM-200/CTM-ONE - Hard-coded Credentials Remote Root (Telnet/SSH)
[remote] Cypress Solutions CTM-200 2.7.1 - Root Remote OS Command Injection
[remote] Mitrastar GPT-2541GNAC-N1 - Privilege escalation
[remote] Apache James Server 2.3.2 - Remote Command Execution (RCE) (Authenticated) (2)
[remote] Cisco small business RV130W 1.0.3.44 - Inject Counterfeit Routers
[remote] ECOA Building Automation System - Hard-coded Credentials SSH Access
[remote] crossfire-server 1.9.0 - 'SetUp()' Remote Buffer Overflow
[remote] Neo4j 3.4.18 - RMI based Remote Code Execution (RCE)
[remote] Denver Smart Wifi Camera SHC-150 - 'Telnet' Remote Code Execution (RCE)

LiveOverflow

Vulnerabilities

Full Disclosure
[CSA-2021-003] Remote Code Execution in GridPro Request Management for Windows Azure Pack new
Onapsis Security Advisory 2021-0020: SAP Enterprise Portal - Exposed sensitive data in html body new
Onapsis Security Advisory 2021-0019: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP IGS service new
Onapsis Security Advisory 2021-0018: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP Gateway service new
Onapsis Security Advisory 2021-0017: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP Enqueue service new
Onapsis Security Advisory 2021-0016: XXE in SAP JAVA NetWeaver System Connections new
Onapsis Security Advisory 2021-0015: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP Dispatcher service new
Backdoor.Win32.LanaFTP.k / Heap Corruption
Backdoor.Win32.LanFiltrator.11.b / Unauthenticated Remote Command Execution
Virus.Win32.Ipamor.c / Unauthenticated Remote System Reboot
Trojan-Proxy.Win32.Ranky.z / Unauthenticated Open Proxy
Worm.Win32.Runfer.bpo / Insecure Service Path
NIST National Vulnerability Database
CVE-2021-42258 new
CVE-2020-36501 new
CVE-2020-36502 new
CVE-2020-36499 new
CVE-2020-36496 new
CVE-2020-36494 new
CVE-2020-36492 new
CVE-2020-36491 new
CVE-2020-36493 new
CVE-2020-36495 new
CVE-2020-36488 new
CVE-2020-36485 new

Tools

Exploit Dev

Reddit - Exploit Dev
Fuzzing Firefox using In-process Fuzzing with Frida (Browser Security)
Getting start with exploit development
Pentest tool projectp
What certs should I get to help my appeal with recruiters?
Creating a Basic Python Reverse Shell Listener
Exploiting SRAND +RE w/Ghidra
Top 5 books to learn Reverse Engineering - Learn Hacking #2
How can exploit mitigations be easier implemented?
Out of curiosity what do the A's stand for in buffer overflow attacks?
How I found 2 BUGS in the "TOP 3 Most Downloaded" PyPI package with Google's Atheris Fuzzer
Pentest network python tool
Undetectable backdooring PE file by Encoding and Dual code caves
Source Incite
Chasing a Dream :: Pre-authenticated Remote Code Execution in Dedecms
Pwn2Own Vancouver 2021 :: Microsoft Exchange Server Remote Code Execution
Google Project Zero
Windows Exploitation Tricks: Relaying DCOM Authentication
Using Kerberos for Authentication Relay Attacks
How a simple Linux kernel memory corruption bug can lead to complete system compromise
Fuzzing Closed-Source JavaScript Engines with Coverage Feedback
Understanding Network Access in Windows AppContainers
Security Researchers
What’s the difference between Attack Surface Monitoring and Vulnerability Scanning?
Ethical hacker shares top tips to protect your attack surface
Fact check: that "forensics" of the Mesa image is crazy
Clean Up in the Digital Aisle: Privacy Concerns with Sobeys Inc. “Caper Carts” System
100 terabyte home NAS
Staying sane in cybersecurity and dealing with burnout
Comments on the Federal Government’s Proposed Approach to Address Harmful Content Online
Pandemic Privacy Explained
Pandemic Privacy: A Preliminary Analysis of Collection Technologies, Data Collection Laws, and Legislative Reform during COVID-19
Meet a Hacker Hero – Eva Galperin
Check: that Republican audit of Maricopa

Reversing/I like ASM

Reddit - Reverse Engineering
Writing Disassemblers for VM-based Obfuscators
CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader
XNTSV 3.00 Undocumented structures viewer for Windows
Tool List Sanity Check [Crosspost from r/Malware]
binocle: I built a graphical tool to visualize binary data
Zydis Disassembler Library - Release v3.2.0
Golang used in SolarWind to 2
Tracing system calls in-process, using a chain loader
Reversing Golang used in SolarWinds
Here's my website where I post reversing stuff. I'm also looking for a job in the field. Enjoy the content!
Fuzzy Snapshots of Firefox IPC
A Look At Some Real-World Obfuscation Techniques
Reddit - Game Hacks
How to Make Cheat Engine Scripts | GH201 new
Affordable Fortnite Soft AIM, and Silent Aim, Hacks for, GTA, RUST, COD, Valorant, EFT and more!
Affordable Fortnite Soft AIM, and Silent Aim, Hacks for, GTA, RUST, COD, Valorant, EFT and more!
Collapse Rust Cheat
Rust lifetime script (30-20€)
War robot hacks?
NEW MINECRAFT HACKS
Rust Script (BUY1 GET 1 FREE LIMITED TIME)
Rust scripts
Collapse Rust Cheat
I need hacks for Fortnite and warzone for free
Collapse Rust Cheat
Reddit - REGames
1994 MS-DOS game Tube reverse-engineering project by rep-stosw new
I'm trying to alter this save just cause i am curious to see what happens later in the game...
Is Rockstar/TT likely to care about a RE project for a 20 year old game that they don't plan to remaster?
Space Cadet pinball bundled with Windows in the past reverse-engineered and ported to various platforms
Diablo 2 Resurrected Battle.net emulator?
Retro games reverse-engineering projects by ryiron
Is It Possible to Bring Mugen to Mobile?
Can I Make a Private Server For a Mobile Game?
RE solitaire game to win in one click
Getting menu textures from a game
Exploring DOS data files
Total newbie - how can I trace a specific action in the game ?
StackExchange - ReverseEngineering
Decompiling open source apps new
Which languages can be compiled to binary (asm)? new
extract firmware from .p7b file
What's purpose of mov ebx, [esp+0]?
How to found signature xxtea for lua
How to decrypt xxtea signature for lua
Why would compiler emit a null pointer assignment
How to deobfuscate Java application
Bypassing unsupported android TV box!
Reading from buffer and printing output to a text file
Using struct objects and constructors in hooked function
x64dbg Crash on Dynamic Debugging Remove Anti-Debugging Protection

Guided Hacking

Malware/APT

Reddit - Malware
PCI DSS Requirements new
Security Concepts Explained
Minecraft declared the most malware-infected game
Overview on OWASP, and how to enforce best cybersecurity practices
Solutions to running x86 OS VMs on the new M1X Macbook Pro?
Tool List Sanity Check
win64 malware gen
Demonstration how Android malware steals recovery phrase from Trust Crypto Wallet without user interaction and restricts access to victims smartphone
A useful resource for beginner malware analyts
So I am sharing again...
Glary Utilities seems bad now...
Unpacking Malware Techniques
Unit42
Case Study: From BazarLoader to Network Reconnaissance
Attackers Are Taking Advantage of the Open-Source Service Interactsh for Malicious Purposes
SilverTerrier – Nigerian Business Email Compromise
Wireshark Tutorial: Wireshark Workshop Videos Now Available
Credential Harvesting at Scale Without Malware
Highlights From the Unit 42 Cloud Threat Report, 2H 2021
Network Security Trends: May-July 2021
Threat Brief: OMI Vulnerabilities (CVE-2021-38645, CVE-2021-38647, CVE-2021-38648 and CVE-2021-38649)
Dangling Domains: Security Threats, Detection and Prevalence
Phishing Eager Travelers
PhishingJS: A Deep Learning Model for JavaScript-Based Phishing Detection
Finding Azurescape – Cross-Account Container Takeover in Azure Container Instances
FireEye Threat Research
ELFant in the Room – capa v3
Pro-PRC Influence Campaign Expands to Dozens of Social Media Platforms, Websites, and Forums in at Least Seven Languages, Attempted to Physically Mobilize Protesters in the…
PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers
Too Log; Didn't Read — Unknown Actor Using CLFS Log Files for Stealth
Detecting Embedded Content in OOXML Documents
Mandiant Discloses Critical Vulnerability Affecting Millions of IoT Devices
Purgalicious VBA: Macro Obfuscation With VBA Purging
Announcing the Eighth Annual Flare-On Challenge
UNC215: Spotlight on a Chinese Espionage Campaign in Israel

Bug Bounties

Crypto

Reddit - Crypto
LUKS encryption - SHA/WHIRLPOOL/RIPEMD-160 new
vanity public key grinding as unoutsourcable proof-of-work new
Is It Better To Digitally Sign A Hexadecimal Hash Or Byte-Representation Of The Hash?
Rocca: An Efficient AES-based Encryption Scheme for Beyond 5G
Encrytping a USB drive to use with Andorid and Windows
Remember Crown Sterling with their "TIME AI' cryptography nonsense at Blackhat? They now have a white paper (PDF).
Cracking Random Number Generators using Machine Learning – Part 1: xorshift128
Monthly cryptography wishlist thread
Weekly cryptography community and meta thread
How do I use XOF (SHAKE and cSHAKE) in openssl CLI and JavaScript
A Deeper Look at Machine Learning-Based Cryptanalysis
StackExchange - Crypto
Textbook RSA meet in the middle time complexity new
Is G' a pseudorandom generator? new
ECB... lacks diffusion(?) new
Is KMAC just SHA-3-256(KEY || message) new
Possible for a different key to decrypt properly? new
Computing cofactor of a custom elliptic curve new
How to decompose a public key into subgroups EC? new
Difference between Non-uniformly random and Uniformly random new
Exact security requirements for extendable output functions (XOF)? new
Trying to understand SIV mode new
CBC block vulnerability in TLS [closed] new
How to produce Auth Data and tag in GCM? Does MAC appended CTR mode encrypted text weaker than GCM?

Podcasts

Security Weekly
Holy Guacamole - PSW #715 new
Space Force - PSW #714
Feeling Really Lame - PSW #713
Blinky Boxes - PSW #712
Everything's All Blurry - PSW #711
Playing Hanky Panky - PSW #710
The Magic Fix - PSW #709
Yard Sale - PSW #708
Burning Hard Drive - PSW #707
Turn That JIT Off! - PSW #706
Backhanded Softball - PSW #705
The Dr. Strange Moment - PSW #704
Risky.Biz
Risky Biz Feature Interview: Mark Dowd on the 0day market and future of exceptional access
Risky Business #642 -- Brits, Dutch and Aussies embrace Hounds Doctrine
Risky Business #641 -- Lawsuit: Ransomware contributed to baby's death
Risky Biz Snake Oilers: Mike Wiacek launches Stairwell, Red Canary on modern MDR and Datadog pitches full stack monitoring
Risky Business #640 -- Huh. The CIA really was out to neck Assange
Risky Business #639 -- USA's ransomware non-policy fails to meet its unstated objective
Risky Business #638 -- Licensed to Pwn
Snake Oilers: Get Signal Sciences in your CDN, automate canary generation and cloud your SIEM!
Risky Business #637 -- Infosec's bigfoot
Risky Business #636 -- Victims are shunning data extortion payments
Risky Biz Soap Box: Bad incentives make Microsoft a villain again
Risky Business #635 -- Owned via telnet? Must be "highly sophisticated attackers"!
The CyberWire
Counting coup against REvil (and other gangs are taking note). Export controls and dual use. A timing bug will surface this weekend. new
Evil Corp identified as the threat actor behind ransomware attacks on Sinclair and Olympus. Privateering. Fin7’s front company. Sentencing in a bulletproof hosting case.
Cyberespionage campaign looks a lot like SIGINT collection. Magnitude gets more capable. VPN exploits solicited. Ransomware trends. Seven years for UPMC hacker. Plenty of Candy…
TA505’s recent activity. Advice on defending organizations from BlackMatter. CISA RFI seeks EDR information. REvil’s halting attempts to return. Sinclair’s incident response.
A US broadcaster sustains a ransomware attack. North Korean catphis expelled from Twitter. REvil’s Tor sites are hijacked. Hacking back. Prosecution and responsible disclosure?
Ell Marquez: It's okay to be new. [Linux] [Career Notes]
Groove Gang making a name for themselves. [Research Saturday]
CISA and its partners warn of threats to water and wastewater treatment facilities. The curious case of Missouri teachers’ Social Security Numbers.
Notes from the underground: data breach extortion and a criminal market shuts down. International cooperation against ransomware. Cyber risk and higher education.
Cyber Espionage, again. Patched SolarWinds yet? Patch Tuesday. The international conference on ransomware has begun. Booter customers get a warning. A disgruntled insider alters aircraft…
Espionage by password spraying, and espionage via peanut butter sandwich. Ransomware and DDoS warnings. Two journalists get the Nobel Peace Prize
Extra: Let's talk about Facebook's research. [Caveat]
Cyber Security Interviews
ISC Daily Stormcast
ISC StormCast for Friday, October 22nd, 2021 new
ISC StormCast for Thursday, October 21st, 2021
ISC StormCast for Wednesday, October 20th, 2021
ISC StormCast for Tuesday, October 19th, 2021
ISC StormCast for Monday, October 18th, 2021
ISC StormCast for Friday, October 15th, 2021
ISC StormCast for Wednesday, October 13th, 2021
ISC StormCast for Tuesday, October 12th, 2021
ISC StormCast for Monday, October 11th, 2021
Darknet Diaries
102: Money Maker
Cyber Presents: How To Not Get Scammed In The Crypto Market
101: Lotería
100: NSO
99: The Spy
98: Zero Day Brokers

Threat Intel

Reddit - Onions
SOMETHING FISHY ON DREAD! Or was it me? new
Hosting a .onion new
When using Tor, it's really slow. (25s to load any page). Are there any solutions to make it faster? new
Hey you all what a night please message me for onion links to chat room also I need some advice on something. new
Best site to order substances? new
Does anyone know if OnionTube is down?
Why do people always recommend to read DNBible
any gore related links?
Websites for chemicals
Does anyone know why I lose network access when I try to open an onion site?
Could the mods of this sub update these v3 URLs on the sidebar?
Need helo finding archived pages.
Reddit - Pwned
Twitch hit by massive hack that reveals its entire source code and more
HaveIBeenPwned
CoinMarketCap - 3,117,548 breached accounts new
Thingiverse - 228,102 breached accounts
Playbook - 50,538 breached accounts
Fantasy Football Hub - 66,479 breached accounts
Republican Party of Texas - 72,596 breached accounts
LinkedIn Scraped Data - 125,698,496 breached accounts
Ajarn - 266,399 breached accounts
Epik - 15,003,961 breached accounts
IndiaMART - 20,154,583 breached accounts
Imavex - 878,209 breached accounts
SubaGames - 6,137,666 breached accounts
Eatigo - 2,789,609 breached accounts

Privacy/VPNs

Slashdot - Rights
Amazon's Alexa Collects More of Your Data Than Any Other Smart Assistant new
Internet Service Providers Collect, Sell Horrifying Amount of Sensitive Data, Government Study Concludes new
Police Can't Demand You Reveal Your Phone Passcode and Then Tell a Jury You Refused new
Governments Turn Tables On Ransomware Gang REvil By Pushing It Offline new
Fed To Ban Policymakers From Owning Individual Stocks
Sony Patent Lets Viewers Vote and Pay To Boot Players From Games
Man Arrested For Uncensoring Japanese Porn With AI In First Deepfake Case
China's VPN Market Now Open To Foreign Investment
Mark Zuckerberg Has Been Added To a DC Lawsuit Over the Cambridge Analytica Scandal
New FCC Rules Could Force Wireless Carriers To Block Spam Texts
New FCC Rules Could Force Wireless Carriers To Block Spam Texts
Boris Johnson Strikes Deal With Bill Gates To Boost Green Technology
Reddit - Privacy
Limiting Whatsapp damage new
What are some examples of search result I won’t find on Google, but will on sth like DuckDuckGo? new
Possible Google drive hack new
How can I selectively block cookies, auto-play vids, and redirects on a Chromebook? new
Cloud storage provider new
Where in the US to buy a pixel with pre-installed Graphene OS? new
Entry level guides/compendium for privacy? new
GDPR Data Deletion sk sk new
I think my dad’s tracking our internet activity new
Can texts be compromised by using public WiFi ? new
Using my web host's (dreamhost) email service? new
‼️‼️‼️My iPhone was hacked PLEASE HELP‼️‼️‼️ new
Reddit - VPN
Will getting a vpn stop this hacker who got my credit information? new
Using double VPN? new
Help setting up a VPN on an Orbi RBR50 new
Bypassing multiple instances of game new
Internet providers collect "staggering" amounts of data -- U.S. FTC chair new
Can VPN usage on a device affect the connection of other devices using the same network?
Tunnel work vpn (on laptop) through personal vpn (on VPN router)
Kill switch with OpenVPN on iOS?
I get a better download speed with a vpn?
"Whole Home" VPN Privacy, at the router level
Creating a subscription on US website using a VPN
Working from home and must connect to company’s VPN, but would like my own for personal use. How can I make that work?
PrivacyTools.io
Instagram Censorship + Suspicious Behavior new
What is the second TOTP for in Raivo OTP? new
Comprehensive iOS Privacy Settings Guide new
Firefox and Net Monitor? new
If have 2FA enabled on a Twitter account, with my phone number, can anyone view my phone number, if they click on Forgot Password? (+1***8… new
Best windows 10/11 debloater? new
Can Google read my emails if I add my IMAP email account the iOS Gmail app ? new
Is it possible to degoogle a one plus 9 pro? new
‼️‼️‼️HELP MY IPHONE WAS HACKED‼️‼️‼️ new
Was wondering if you guy know of the best privacy file explorer for iPhones? new
Sign the petition, force big tech companies to fight disinformation within the EU new
Looking for a new email provider new
EFF
John Gilmore Leaves the EFF Board, Becomes Board Member Emeritus new
New Global Alliance Calls on European Parliament to Make the Digital Services Act a Model Set of Internet Regulations Protecting Human Rights and Freedom of… new
Police Can’t Demand You Reveal Your Phone Passcode and Then Tell a Jury You Refused
Victory! Oakland’s City Council Unanimously Approves Communications Choice Ordinance
Why Is It So Hard to Figure Out What to Do When You Lose Your Account?
Crowd-Sourced Suspicion Apps Are Out of Control
On Global Encryption Day, Let's Stand Up for Privacy and Security
EFF to Federal Court: Block Unconstitutional Texas Social Media Law
From Bangkok to Burlington — The Public Interest Social Internet
EFF Files New Lawsuit Against California Sheriff for Sharing ALPR Data with ICE and CBP
After Years of Delays and Alarmingly Flimsy Evidence, Security Expert Ola Bini’s Trial Set for This Week
EFF Joins Press Freedom Groups In Asking U.S. To Drop Assange Extradition Efforts

Help Wanted

Reddit - AskNetSec
What are you using for TLS decryption these days? new
Suricata new
Pricepoints for a quick pentest on a budget? new
How can viruses spread to other parts of your OS if all software is in binary code (and not source code)? new
Best course on this list? money-wise new
Matching 2+ mio mail addresses against a total of 3.2 billion addresses? new
In Windows, can a password be set to never expire when there is a max password age set in AD?
Degrees vs certs
Finding Job As a Malware Analyst
Are degrees really necessary to become a pentester?
What are the faults of a TOR w/ bridge over VPN Router vs ISP?
How useful is computer architecture knowledge in cybersecurity (blue team, analyst, etc.)?
Reddit - Netsec Students
Randomness in AES in CTR mode
Trying to figure out wording/terminology for resume
Ransomware 101: What Is Ransomware and How to Spot It on Your Network
What’s after support?
keep receiving this email with a weird link. Could someone analyze it and tell me what is going on?
Fuzzing Firefox using In-process Fuzzing with Frida video.
Anyone know if Respondus lockdown can detect screen-sharing?
Advice for high school student wanting to get into cyber security
TCMSecurity's Practical Ethical Hacking course temporary free, link and coupon code in text.
Edit and Resend from Chrome Like Firefox
When is it appropriate to re-image a computer when you get a defender virus alert?
VHL records lab priv esc?
Stackoverflow - Security
How to fix High vulnerabilities in Angular new
How to configure SpringBoot authentication for RestController new
Are Feature flags good for Authorisation/Permissions? new
Spring Security and Spring Cloud Gateway [closed] new
Using Data Protection API as a key manager for JWT new
Node Streaming Server Express HLS with JWT Authentication new
Restric GCP API Key To A Subset Of Endpoints For A Given API new
when the tools fail to detect ADS on live steams? new
Malware folder found in Users file - MacOS new
JWT sign. Two-piece secret key new
How to reproduce an exploit from the database www.exploit-db.com? new
how to fix "unquoted service path" vulnerabilities in Java [closed] new
Stack Exchange
Is it possible to create an NTFS partition having only the $MFT and $J tables ? Forensics CTF new
Sending emails as other persons from internal network in Outlook Online new
Why does this attack check the location of the server? new
Have I been hacked? I got an email from "account-security-noreply@accountprotection.microsoft.com" and now I am getting spam in my inbox new
Is end to end encryption over HTTP safe? new
Is resisting giving online banking password to 3rd party becoming increasingly futile and unnecessary? new
Is it possible to hide a servers location on the internet? new
Credit card reader writer new
How do i use custom exe with metasploit new
Web Security CTF Guidance new
Any risk on viewing the content of a RAR file without extracting it? new
Online service to download file from URL directly as zip new

Locks/Social Engineering

Reddit - Lockpicking
Anyone ever seen a video on these? If not I'm thinking of making one. It's a sterling lockout lock and the locking mechanism is pretty… new
American 1100 picked for the first time! new
Spooky picks used to open a Brinks 5-pin 3 ways. Raked, zipped, and single-pin-picked. The Sparrows Slasher set is scary fun. new
Medeco MX picked new
My first new
After feeling like I was on a never-ending plateau this felt absolutely amazing to finally open! new
Got to practice picking my 1100 from Fort Worth to Philly. And had some fun with gutting practice when I got home. (Really starting to… new
found this guy in the laundry room of the airbnb im in...brooklyn new
Burch Wächter Karat is a fun little pick! new
Lockman Megacross SP Picked new
LIIIIIIES!!!! new
One week into lockpicking. Managed to pick three yellow belt Burg Wächter padlocks. Will continue with some spool pin training 🙂 new
Reddit - Social Engineering
In COINTELPRO, FBI used anarchism to 'disrupt left', attack Vietnam & USSR new
Where will the update be posted once Hadnagy’s Institute for Social Engineering is about to kick off? new
Kennyshire and Bennyshire
Trick for getting a bug fixed by community/developers on open source projects.
Social engineered my way into getting paid to receive a penetration test from a fellow redditor (for national security reasons this is a joke)
A master social engineer
Deepfaked Voice Enabled $35 Million Bank Heist in 2020
how to do social engineering to get facebook password?
Do people know how others view them? | The Spotlight Effect | Psychology | Social Anxiety |
As black American, we already code switch , to blend into corporate environments. If I wear glasses and carry a clipboard, I bet I will…
How can I manipulate a friend to date me or become FWB?
How best to access security cameras footage from an apt. I don't live at

Hak5

Security Blogs

Security Bloggers Network
Why Businesses Need a New Standard of Credential Stuffing Protection new
Ask the Expert: How can I make my vulnerability solution more responsive? new
Ask the Expert: What is the difference between vulnerability management and attack surface management? new
Microsoft OneDrive Used for Ransom Operations new
DEF CON 29 Aerospace Village – Steve Luczynski’s & Larry Grossman’s ‘Federal Perspective On Aerospace’ new
Ask the Expert: How do you level up your vulnerability management? new
Why TSA’s pipeline security directive is necessary new
CommitStrip ‘Meanwhile, In A Parallel Universe…’ new
Disable Time Sync NOW—Ugly GPSd Bug Brings Sunday FAILs new
Why Did Vietnam War POW Jump From Helicopters to their Death? new
Journey to a Cybersecurity Strategy new
DEF CON 29 Aerospace Village – Panel: True Story, Hackers In The Aerospace Sector’ new
ThreatPost
FIN7 Lures Unwitting Security Pros to Carry Out Ransomware Attacks new
REvil Servers Shoved Offline by Governments – But They’ll Be Back, Researchers Say new
Threat Actors Abuse Discord to Push Malware new
U.S. Ban on Sales of Cyberattack Tools Is Anemic, Experts Warn
TA551 Shifts Tactics to Install Sliver Red-Teaming Tool
Gigabyte Allegedly Hit by AvosLocker Ransomware
Why is Cybersecurity Failing Against Ransomware?
Ransomware Sinks Teeth into Candy-Corn Maker Ahead of Halloween
Google Crushes YouTube Cookie-Stealing Channel Hijackers
VPN Exposes Data for 1M Users, Leading to Researcher Questioning
Geriatric Microsoft Bug Exploited by APT Using Commodity RATs
Squirrel Bug Lets Attackers Execute Code in Games, Cloud Services
digitalmunition
eHacking News
Elastic Stack API Security Vulnerability Exposes Customer and System Data
The expert assessed the prospects of cybersecurity company Group-IB after the arrest of its founder
Analysts Warn of Telegram Powered Bots Stealing Bank OTPs
Newly Discovered 'Tomiris’ Backdoor Linked to SolarWinds Attack Malware
Ransomware Attack On Major European Bookseller
RansomEXX Comes into Action Encrypting Files Using AES-CBC
GriftHorse Malware has Infected More than 10 Million Android Devices
Turkish National Charged for DDoS Attack on U.S. Company
Cybersecurity experts have discovered a new hacker group
Scammers are Using Twitter Bots for PayPal and Venmo Scams
Bandwidth Suffers Outages Caused by DDoS Attack
Nobelium APT Group Uses Custom Backdoor to Target Windows Domains
Wired - Security
New Sex Toy Standards Let Some Sensitive Details Slide new
How Hackers Hijacked Thousands of YouTube Accounts
How to Switch From Google Authenticator to Another 2FA App
How to Switch From Google Authenticator to Another 2FA App
Hackers Keep Targeting the US Water Supply
Missouri Threatens to Sue a Reporter Over a Security Flaw
A Telegram Bot Told Iranian Hackers When They Got a Hit
Telegram Is Becoming a Cesspool of Anti-Semitic Content
How to Permanently Delete Your Facebook Account
Someone Hacked a US Warship Facebook Account to Stream Games
Cloudflare Isn't Liable for Sites That Hawk Counterfeits
A Devastating Twitch Hack Sends Streamers Reeling
Krebs on Security
Missouri Governor Vows to Prosecute St. Louis Post-Dispatch for Reporting Security Vulnerability
How Coinbase Phishers Steal One-Time Passwords
Patch Tuesday, October 2021 Edition
What Happened to Facebook, Instagram, & WhatsApp?
FCC Proposal Targets SIM Swapping, Port-Out Fraud
Apple AirTag Bug Enables ‘Good Samaritan’ Attack
Indictment, Lawsuits Revive Trump-Alfa Bank Story
Does Your Organization Have a Security.txt File?
Trial Ends in Guilty Verdict for DDoS-for-Hire Boss
Customer Care Giant TTEC Hit By Ransomware
Microsoft Patch Tuesday, September 2021 Edition
KrebsOnSecurity Hit By Huge New IoT Botnet “Meris”
Naked Security
REvil ransomware gang allegedly forced offline by law enforcement counterattacks new
S3 Ep55: Live malware, global encryption, dating scams, and secret emanations [Podcasts]
“To the moon!” Cryptocurrency hamster Mr Goxx trades online 24/7
Cybersecurity Awareness Month: Building your career
LANtenna hack spies on your data from across the room! (Sort of)
S3 Ep54: Another 0-day, double Apache patch, and Fight The Phish [Podcast]
Romance scams with a cryptocurrency twist – new research from SophosLabs
Apple quietly patches yet another iPhone 0-day – check you have 15.0.2
Cybersecurity awareness month: Fight the phish!
Apache patch proves patchy – now you need to patch the patch
S3 Ep53: Apple Pay, giftcards, cybermonth, and ransomware busts [Podcast]
Apache web server zero-day bug is easy to exploit – patch now!
Schneier on Security
Friday Squid Blogging: Squid Eating Maine Shrimp new
Nation-State Attacker of Telecommunications Networks new
Problems with Multifactor Authentication
Textbook Rental Scam
Using Machine Learning to Guess PINs from Video
Ransomware Attacks against Water Treatment Plants
Missouri Governor Doesn’t Understand Responsible Disclosure
Friday Squid Blogging: New Giant Squid Video
Security Risks of Client-Side Scanning
Recovering Real Faces from Face-Generation ML System
Suing Infrastructure Companies for Copyright Violations
Airline Passenger Mistakes Vintage Camera for a Bomb
Linux Security
These stealthy hackers avoid Windows but target Linux as they look to steal phone data> new
Newly Found npm Malware Mines Cryptocurrency on Windows, Linux, macOS Devices>
Oracle Releases GraalVM 21.3 With Java 17 Support, Other Enhancements>
LibreOffice 7.2.2 Community Released with 68 Bug Fixes, Update Now>
Linux Foundation raises $10M to support open-source security project>
KubeCon + CloudNativeCon Highlights Security for Open Source>
Say hello to Ubuntu Frame>
Debian GNU/Linux 11.1 “Bullseye” Released with 24 Security Updates and 75 Bug Fixes>
LibreOffice, OpenOffice bug allows hackers to spoof signed docs>
FontOnLake malware infects Linux systems via trojanized utilities>
How to use this unique method of securing SSH>
Code Execution Bug Affects Yamale Python Package — Used by Over 200 Projects>
Dark Reading
aDolus Raises $2.5M to Secure Critical Infrastructure and Grow Sales and Marketing Team new
'TodayZoo' Phishing Kit Cobbled Together From Other Malware new
7 Ways to Lock Down Enterprise Printers new
What Does Better Insider Risk Management Look Like? new
What Squid Game Teaches Us About Cybersecurity new
Google Buckles Down on Android Enterprise Security
Malware Abuses Core Features of Discord
Cybrary Launches New Partnership with Check Point Software to Make Cybersecurity Training Accessible to All
Security Teams Still Favor Prevention Over Detection
Akamai Technologies Completes Acquisition of Guardicore to Extend Its Zero Trust Solutions to Help Stop Ransomware
Plurilock to Acquire Assets of CloudCodes Software
Invicti Security Announces $625 Million Growth Investment Led by Summit Partners
Securelist
Russian-speaking cybercrime evolution: What changed from 2016 to 2021
Trickbot module descriptions
Lyceum group reborn
Whitehat Security Blog
HITB News
How hackers hijacked thousands of high-profile YouTube accounts
The ‘Broadband Gap’ Is Now a Housing Problem
Facebook Can't Hide Its Problems Behind a New Name
The new MacBook Pro seems to have an HDMI 2.0 port, not 2.1
Intel slipped—and its future now depends on making everyone else’s chips
CDC advisory panel unanimously approves expanded COVID vaccine boosters
White House to Enlist 30 Countries to Fight Ransomware
Intel launches its next-generation neuromorphic processor—so, what’s that again?
A Simple Bug Is Leaving AirTag Users Vulnerable to an Attack
Bring on the Fist Bumps and Nasal Swabs—Tech Conferences Are Back
Apple Pay security flaw allows hackers to steal your money when your iPhone is locked
Coinbase hackers exploit multi-factor flaw to steal from 6,000 customers
The RISKS Digest
Dubai’s Ruler Hacked Phones of His Ex-Wife and Her Lawyers, UK Court Says
Hyperbole
Google Chat spam?
How the WhatsApp Outage Hurt Small Businesses in India
Expensive hotel room!!!
Missouri governor accuses journalist who warned state about cybersecurity flaw of criminal ‘hacking’
Trans man says confusion caused cervical screening delay
Special Report: How AT&T helped build far-right One America News
Apple's App Tracking Transparency circumvented by some apps
The FDA Should Better Regulate Medical Algorithms
Security risks of insulin pumps
Keyword warrants
Kaspersky Blog
How to check a suspicious e-mail sender | Kaspersky official blog new
How smartphone makers track users | Kaspersky official blog
Using your face to pay for lunch? | Kaspersky official blog
How to cut back on social media use | Kaspersky official blog
New features of the Trickbot Trojan | Kaspersky official blog
How to ask Kaspersky experts a question | Kaspersky official blog
Cybersecurity careers are for everyone | Kaspersky official blog
Feature phones can be dangerous, too | Kaspersky official blog
71 Windows vulnerabilities | Kaspersky official blog
Transatlantic Cable podcast, episode 223 | Kaspersky official blog
CVE-2021-40449: Trojan delivery vulnerability | Kaspersky official blog
Farm equipment security at DEF CON 29 | Kaspersky official blog
Adam Shostack & friends
Turning off the lights?
Training Discount
Star Wars Jokes?
Blog updates
25 Years In Appsec: Looking Back
The COVID testbed and AI
Graham Cluley
Donald Trump’s Truth Social account posts a picture of a pig defecating new
Recorded Future Identity Intelligence prevents identity fraud and disrupts attackers – learn more now new
Romance scam suspects rounded up in South Africa after 100 women targeted new
US Government warns of BlackMatter ransomware attacks against critical infrastructure
Smashing Security podcast #248: Press F12 to hack
Free BlackByte decryptor released, after researchers say they found flaw in ransomware code
Acer hacked (for the second time this year)
Disrupt adversaries and prevent identity fraud with Recorded Future Identity Intelligence
Analysis of 80 million ransomware samples reveals a world under attack
Smashing Security podcast #247: Rickrolling submarine secrets
Bank of America employee indicted for email scam that targeted businesses
Google gives away 10,000 free security keys to high-risk users
Rapid7
2022 Planning: Designing Effective Strategies to Manage Supply Chain Risk new
Hands-On IoT Hacking: Rapid7 at DefCon IoT Village, Part 1
A Matter of Perspective: Agent-Based and Agentless Approaches to Cloud Security, Part 1
OWASP Top 10 Deep Dive: Injection and Stack Traces From a Hacker's Perspective
Passwordless Network Scanning: Same Insights, Less Risk
4 Simple Steps for an Effective Threat Intelligence Program
Turn On, Tune In, Drop the Noise: Achieve Better Cloud Security by Reducing Noise
[Security Nation] Michael Daniel on the Cyber Threat Alliance
Patch Tuesday - October 2021
This Was the Summer of AppSec: All the Improvements We Made in Q3
Have You Checked the New Kubernetes RBAC Swiss Army Knife?
What's New in InsightVM: Q3 2021 in Review
Hacker News (YCombinator) - Security
Hackernews.com new
Police Can’t Demand You Reveal Your Phone Passcode Then Tell a Jury You Refused new
Police can’t demand you reveal your phone passcode then tell a jury you refused new
New Kubernetes high severity vulnerability alert: CVE-2021-25742 new
New Kubernetes high–severity vulnerability alert new
Let’s Talk about PAKE
Let’s Talk about PAKE (2018)
Gov Parson pushes to prosecute reporter who found security flaw in state site
Cloudflare’s Pace of Innovation
Zuckerberg named as defendant in Facebook privacy suit
Valorant's anti-cheat system requires TPM 2.0 and secure boot on Windows 11
U.S. Tightens Export Controls on Items Used in Surveillance of Private Citizens
Hacker Noon #Security
People's Privacy and GAFAM (Google, Apple, Facebook, Amazon, Microsoft) new
How to Avoid Becoming a Cyber Victim new
Beyond WhatsApp: Alternative Options for Secure Messenger Apps new
Everything You Need to Know About a White Hat Hacker
K.I.S.S. on a Threat Model, Like it is Hot P.1
MITRE ATT&CK & D3FEND Framework are Redefining Counter-efforts to Cyberattacks
The KonMari Method for Your Digital Footprint: How to Clean up Your Digital Clutter Like Marie Kondo
"Don't take your freedom for granted", advised Backend Developer Julien Maury
"Every time you browse the web, you leave fingerprints behind"
Proving Unconditional Possession of a Private Key: A Short Story
"Racism and vigilantism are pervasive on safety platforms"
Uber and Lyft Drivers are Increasingly Victims of Carjacking

Security in Mainstream Media

Google News Hacking
After 'Stealing' $16M, This Teen Hacker Seems Intent on Testing 'Code Is Law' in the Courts - CoinDesk new
Hackers Exploit Flaw In BQE Software's Billing System To Deploy Ransomware: Huntress - CRN new
Facebook suing a Ukranian hacker it alleges scraped and sold its data - Business Insider new
Warriors’ Draymond Green hopes opposing coaches start hacking him, so he get ‘free points’ - San Francisco Chronicle new
Hacked again? Riviera Beach Fire Rescue's Twitter page taken over by cryptocurrency promoter - WPTV.com new
Hackers Have Been Using a Rootkit That Somehow Got Microsoft's Digital Seal of Approval - Gizmodo new
Donald Trump's social media platform Truth Social hacked by Anonymous - USA TODAY new
This TikTok Makeup Hack Creates Perfect Cat-Eyes With Press-On Nails — See Video - Allure new
Erie Hack serves up innovative ideas for a healthier Lake Erie and Cuyahoga River - cleveland.com new
Hacking Software: Time to Limit Exports to Foreign Governments? - MSSP Alert new
5 ways to keep vaccine 'cold chain' safe from hackers - GCN.com new
Hacking For Homebuilding Winners Announced, Positioning Boise As Construction Innovation Headquarters - Forbes new
Google Cyber Security
City and County aim to increase cybersecurity - 1011now new
Utah health insurance organization announces cyber security breach - ABC 4 new
CISA awards $2 million to cybersecurity programs for rural, diverse communities - ZDNet new
Atento detects cyber-security attack in Brazil on October 17 - Seeking Alpha new
DOJ's Aggressive Cyber-Standards Enforcement for Govt Contractors - The National Law Review new
Buckle Up: Cybersecurity Rules of the Road | Connected Life - Noozhawk new
Newsom Administration Announces First Multi-year Cybersecurity Roadmap to Protect Californians' Privacy and Security | California Governor - Office of Governor Gavin Newsom new
Cyber Security Today, Week in Review for Oct. 22, 2021 - IT World Canada new
2021 NJ Cybersecurity Virtual Conference Recap - Seton Hall University News & Events new
DOT identifies major cyber security flaws at FMCSA - TheTrucker.com - The Trucker new
WSAZ Now Desk | FBI shares safety tips during Cybersecurity Awareness Month - WSAZ-TV new
Does Homeland Security have too much discretion in hiring cybersecurity people? - Federal News Network new

Thirsty for more

Hacker News (YCombinator)
Stayflexi (YC W21) Is Hiring new
Facebook Faulted by Staff over Jan. 6 Insurrection: 'Abdication' new
Feasibility of a Dune Ornithopter new
Fastmail is having problems again new
Blockchain voting is overrated among uninformed but underrated among informed new
Another former Facebook employee has filed a whistleblower complaint new
Qventus (YC W15) Is Hiring a Senior Full Stack Engineer new
Why Fake Shutters Make Me Angry new
Fake shutters make me angry new
NPM package ‘ua-parser-JS’ with more than 7M weekly download is compromised new
Living Alone in the U.S. Is Harder Than It Should Be new
The Hidden Costs of Living Alone new
Reddit - Cyberpunk
Aeon Flux VHS cover art by Peter Chung new
Persuading, OCs in Cyberpunk RED Campaign. Art by me new
Hawaii has deployed a robot dog to scan homeless people new
/ThE-B|RTh/ by Amir Zand new
“MINI-METROPOLIS” by HeavensLastAngel new
Any love for Bloodnet? Cyberpunk Vampire RPG (1993) new
God and robots: Will AI transform religion? - BBC News new
New trailer for my open-world cyberpunk RPG, called Without Judgement. new
悟佛龛 by 臣页 new
Down'n'Out by Beksultan Tokochev new
城中村特别棒 by Xinjun Zhang new
Weaponized Toys - FPV tech and how it might shape the future of urban insurgencies, terrorism or even warfare new
Reddit - Security CTF
Windows Privilege Escalation Explained | TryHackMe Windows Privesc new
File and Directory Operations With PoweShell | Advent of Cyber TryHackMe
CVE-2022-1337; CVSS:10
Python package extending codecs featuring CLI tools for encoding/decoding almost anything
Awesome SANS Community CTF: Bootup. Had a lot of fun and learned a lot!
DEADFACE CTF 2021 - Challenge Walkthroughs [Beginner Friendly]
Another fun challenge from DeadFace 2021 CTF. We needed to find nmap traces from a 29MB pcap file. In this video walkthrough we will see…
The DeadFace 2021 finished yesterday. One of the best CTFs I've played. Here you can find the video walkthrough of Forensics Bloodshed 1, 2 &…
CTF - Forensics Analysis JPEG file
Hack The Box: dynstr - Write-up by Khaotic
How To Use FireEye RedLine For Incident Response P1 | TryHackMe RedLine
Looking for a CTF team
Reddit - Sysadmin
HP OfficeJet 9015 new
To Kyocera copier users experiencing 0x4803 scan errors: new