There are new available articles, click to refresh the page.

Before yesterday/r/netsec - Information Security News & Discussion

/r/netsec - Information Security News & Discussion
Hacking Terraform state to gain code execution and privilege escalation
February 28^th 2024 at 04:34

Hacking Terraform state to gain code execution and privilege escalation

By /u/dagrz-cloudsec

submitted by /u/dagrz-cloudsec
[link] [comments]

Related tags
- ❌
- r/netsec
February 28^th 2024 at 04:34

/r/netsec - Information Security News & Discussion
APT29 adopts new TTPs, according to a bunch of agencies
February 27^th 2024 at 22:40

APT29 adopts new TTPs, according to a bunch of agencies

By /u/Betterworldguys

submitted by /u/Betterworldguys
[link] [comments]

Related tags
- ❌
- r/netsec
February 27^th 2024 at 22:40

/r/netsec - Information Security News & Discussion
LOTP - Living Off the Pipeline
February 27^th 2024 at 22:12

LOTP - Living Off the Pipeline

By /u/fproulx

submitted by /u/fproulx
[link] [comments]

Related tags
- ❌
- r/netsec
February 27^th 2024 at 22:12

/r/netsec - Information Security News & Discussion
Data Scientists Targeted by Malicious Hugging Face ML Models with Silent Backdoor
February 27^th 2024 at 16:02

Data Scientists Targeted by Malicious Hugging Face ML Models with Silent Backdoor

By /u/SRMish3

submitted by /u/SRMish3
[link] [comments]

Related tags
- ❌
- r/netsec
February 27^th 2024 at 16:02

/r/netsec - Information Security News & Discussion
New Server Side Prototype Pollution Gadgets Scanner from Doyensec
February 27^th 2024 at 15:53

New Server Side Prototype Pollution Gadgets Scanner from Doyensec

By /u/ds_at

submitted by /u/ds_at
[link] [comments]

Related tags
- ❌
- r/netsec
February 27^th 2024 at 15:53

/r/netsec - Information Security News & Discussion
CVE-2023-52161: inet-wireless daemon (iwd) APs allowed clients to connect with a NULL key, bypassing the WiFi password
February 26^th 2024 at 22:10

CVE-2023-52161: inet-wireless daemon (iwd) APs allowed clients to connect with a NULL key, bypassing the WiFi password

By /u/supernetworks

submitted by /u/supernetworks
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 22:10

/r/netsec - Information Security News & Discussion
Windows Sysinternals - Sysmon - A practical guide to implementation and essential tips
February 26^th 2024 at 20:44

Windows Sysinternals - Sysmon - A practical guide to implementation and essential tips

By /u/clod81

submitted by /u/clod81
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 20:44

/r/netsec - Information Security News & Discussion
It's now possible to find the AWS Account ID for any S3 Bucket (private or public)
February 26^th 2024 at 15:22

It's now possible to find the AWS Account ID for any S3 Bucket (private or public)

By /u/tracebit

submitted by /u/tracebit
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 15:22

/r/netsec - Information Security News & Discussion
Advanced CyberChef Techniques for Configuration Extraction - Detailed Walkthrough and Examples
February 26^th 2024 at 14:30

Advanced CyberChef Techniques for Configuration Extraction - Detailed Walkthrough and Examples

By /u/Embeere

submitted by /u/Embeere
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 14:30

/r/netsec - Information Security News & Discussion
QR Code Phishing with EvilGophish
February 26^th 2024 at 14:58

QR Code Phishing with EvilGophish

By /u/fin3ss3g0d

submitted by /u/fin3ss3g0d
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 14:58

/r/netsec - Information Security News & Discussion
“SubdoMailing” — Thousands of Hijacked Major-Brand Subdomains Found Bombarding Users With Millions of Malicious Emails
February 26^th 2024 at 14:32

“SubdoMailing” — Thousands of Hijacked Major-Brand Subdomains Found Bombarding Users With Millions of Malicious Emails

By /u/pinpepnet

submitted by /u/pinpepnet
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 14:32

/r/netsec - Information Security News & Discussion
Security Incident & Vulnerability Response Playbooks
February 26^th 2024 at 12:56

Security Incident & Vulnerability Response Playbooks

By /u/zootea100

submitted by /u/zootea100
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 12:56

/r/netsec - Information Security News & Discussion
Exploiting inconsistent UTF-8 handling in mbstring to bypass an XSS filter in Joomla
February 26^th 2024 at 08:45

Exploiting inconsistent UTF-8 handling in mbstring to bypass an XSS filter in Joomla

By /u/albinowax

submitted by /u/albinowax
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 08:45

/r/netsec - Information Security News & Discussion
Join us in Seoul this May. Last chance to submit you talk for TyphoonCon 2024!
February 26^th 2024 at 08:26

Join us in Seoul this May. Last chance to submit you talk for TyphoonCon 2024!

By /u/LongjumpingLime4139

submitted by /u/LongjumpingLime4139
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 08:26

/r/netsec - Information Security News & Discussion
Actively exploited open redirect in Google Web Light
February 26^th 2024 at 07:09

Actively exploited open redirect in Google Web Light

By /u/jk0pr

submitted by /u/jk0pr
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 07:09

/r/netsec - Information Security News & Discussion
SEO Poisoning to Domain Control: The Gootloader Saga Continues
February 26^th 2024 at 01:16

SEO Poisoning to Domain Control: The Gootloader Saga Continues

By /u/TheDFIRReport

submitted by /u/TheDFIRReport
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 01:16

/r/netsec - Information Security News & Discussion
Go Go XSS Gadgets: Chaining a DOM Clobbering Exploit in the Wild
February 24^th 2024 at 17:05

Go Go XSS Gadgets: Chaining a DOM Clobbering Exploit in the Wild

By /u/poltess0

submitted by /u/poltess0
[link] [comments]

Related tags
- ❌
- r/netsec
February 24^th 2024 at 17:05

/r/netsec - Information Security News & Discussion
Continuously fuzzing Python C extensions
February 23^rd 2024 at 15:37

Continuously fuzzing Python C extensions

By /u/Schwag

submitted by /u/Schwag
[link] [comments]

Related tags
- ❌
- r/netsec
February 23^rd 2024 at 15:37

/r/netsec - Information Security News & Discussion
Code injection or backdoor: A new look at Ivanti's CVE-2021-44529
February 23^rd 2024 at 11:53

Code injection or backdoor: A new look at Ivanti's CVE-2021-44529

By /u/albinowax

submitted by /u/albinowax
[link] [comments]

Related tags
- ❌
- r/netsec
February 23^rd 2024 at 11:53

/r/netsec - Information Security News & Discussion
Python Risk Identification Tool for generative AI (PyRIT)
February 23^rd 2024 at 02:40

Python Risk Identification Tool for generative AI (PyRIT)

By /u/___printf_chk

submitted by /u/___printf_chk
[link] [comments]

Related tags
- ❌
- r/netsec
February 23^rd 2024 at 02:40

/r/netsec - Information Security News & Discussion
New TP-Link authentication Bypass!
February 22^nd 2024 at 14:50

New TP-Link authentication Bypass!

By /u/Status_Resolve2971

submitted by /u/Status_Resolve2971
[link] [comments]

Related tags
- ❌
- r/netsec
February 22^nd 2024 at 14:50

/r/netsec - Information Security News & Discussion
SHA-256 Under the Hood
February 22^nd 2024 at 09:23

SHA-256 Under the Hood

By /u/pickeydotai

submitted by /u/pickeydotai
[link] [comments]

Related tags
- ❌
- r/netsec
February 22^nd 2024 at 09:23

/r/netsec - Information Security News & Discussion
A stealthy threat uncovered: TeaBot on Google Play Store | Cleafy Labs
February 22^nd 2024 at 09:09

A stealthy threat uncovered: TeaBot on Google Play Store | Cleafy Labs

By /u/f3d_0x0

submitted by /u/f3d_0x0
[link] [comments]

Related tags
- ❌
- r/netsec
February 22^nd 2024 at 09:09

/r/netsec - Information Security News & Discussion
“To live is to fight, to fight is to live! - IBM ODM Remote Code Execution (watchTowr Labs)
February 22^nd 2024 at 09:02

“To live is to fight, to fight is to live! - IBM ODM Remote Code Execution (watchTowr Labs)

By /u/dx7r__

submitted by /u/dx7r__
[link] [comments]

Related tags
- ❌
- r/netsec
February 22^nd 2024 at 09:02

/r/netsec - Information Security News & Discussion
Statically detecting AWS Canary Tokens without setting them off
February 21^st 2024 at 18:10

Statically detecting AWS Canary Tokens without setting them off

By /u/wifihack

submitted by /u/wifihack
[link] [comments]

Related tags
- ❌
- r/netsec
February 21^st 2024 at 18:10

/r/netsec - Information Security News & Discussion
re: Zyxel VPN Series Pre-auth Remote Command Execution
February 21^st 2024 at 16:23

re: Zyxel VPN Series Pre-auth Remote Command Execution

By /u/chicksdigthelongrun

submitted by /u/chicksdigthelongrun
[link] [comments]

Related tags
- ❌
- r/netsec
February 21^st 2024 at 16:23

/r/netsec - Information Security News & Discussion
Ongoing Malware Laced Developer Job Interviews
February 21^st 2024 at 15:43

Ongoing Malware Laced Developer Job Interviews

By /u/louis11

submitted by /u/louis11
[link] [comments]

Related tags
- ❌
- r/netsec
February 21^st 2024 at 15:43

/r/netsec - Information Security News & Discussion
A deep dive into the RansomHouse encryptor
February 21^st 2024 at 14:34

A deep dive into the RansomHouse encryptor

By /u/ShadowStackRE

submitted by /u/ShadowStackRE
[link] [comments]

Related tags
- ❌
- r/netsec
February 21^st 2024 at 14:34

/r/netsec - Information Security News & Discussion
Detection Rules Development Framework
February 21^st 2024 at 09:36

Detection Rules Development Framework

By /u/netbiosX

submitted by /u/netbiosX
[link] [comments]

Related tags
- ❌
- r/netsec
February 21^st 2024 at 09:36

/r/netsec - Information Security News & Discussion
PEAP Phase-2 authentication in Linux's wpa_suppcliant could be bypassed
February 21^st 2024 at 01:47

PEAP Phase-2 authentication in Linux's wpa_suppcliant could be bypassed

By /u/omegga

submitted by /u/omegga
[link] [comments]

Related tags
- ❌
- r/netsec
February 21^st 2024 at 01:47

/r/netsec - Information Security News & Discussion
Lockbit Ransomeware global taketown
February 20^th 2024 at 21:56

Lockbit Ransomeware global taketown

By /u/foundapairofknickers

submitted by /u/foundapairofknickers
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 21:56

/r/netsec - Information Security News & Discussion
Exploiting Cacheable Responses
February 20^th 2024 at 15:29

Exploiting Cacheable Responses

By /u/6W99ocQnb8Zy17

submitted by /u/6W99ocQnb8Zy17
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 15:29

/r/netsec - Information Security News & Discussion
GitHub - mlcsec/FormThief: Spoofing desktop login applications with WinForms and WPF
February 20^th 2024 at 15:25

GitHub - mlcsec/FormThief: Spoofing desktop login applications with WinForms and WPF

By /u/Frequent_Passenger82

submitted by /u/Frequent_Passenger82
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 15:25

GitHub - naksyn/Embedder: Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies

By /u/naksyn_

submitted by /u/naksyn_
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 12:41

Auto DNS poisoning: while charging Android smartphone via computer it is possible to perform automated and even remotely controlled DNS poisoning without any user interaction

By /u/barakadua131

submitted by /u/barakadua131
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 10:29

/r/netsec - Information Security News & Discussion
AS-REP Roasting
February 20^th 2024 at 08:14

AS-REP Roasting

By /u/netbiosX

submitted by /u/netbiosX
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 08:14

/r/netsec - Information Security News & Discussion
Ivanti Connect Secure Under Attack: Uncovering Five Exploitable CVEs - XXE
February 20^th 2024 at 02:26

Ivanti Connect Secure Under Attack: Uncovering Five Exploitable CVEs - XXE

By /u/appsec1337

submitted by /u/appsec1337
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 02:26

/r/netsec - Information Security News & Discussion
Code Review Like a Pro
February 19^th 2024 at 20:49

Code Review Like a Pro

By /u/HayMiz

submitted by /u/HayMiz
[link] [comments]

Related tags
- ❌
- r/netsec
February 19^th 2024 at 20:49

/r/netsec - Information Security News & Discussion
Top 10 web hacking techniques of 2023
February 19^th 2024 at 17:08

Top 10 web hacking techniques of 2023

By /u/loselasso

submitted by /u/loselasso
[link] [comments]

Related tags
- ❌
- r/netsec
February 19^th 2024 at 17:08

/r/netsec - Information Security News & Discussion
A technical analysis of the BackMyData ransomware used to attack hospitals in Romania
February 19^th 2024 at 12:50

A technical analysis of the BackMyData ransomware used to attack hospitals in Romania

By /u/CyberMasterV

submitted by /u/CyberMasterV
[link] [comments]

Related tags
- ❌
- r/netsec
February 19^th 2024 at 12:50

/r/netsec - Information Security News & Discussion
TPMs Hate Him! (Some Weird Tricks To Break FDE and Bypass Attestation)
February 16^th 2024 at 18:27

TPMs Hate Him! (Some Weird Tricks To Break FDE and Bypass Attestation)

By /u/Elastic-Platypus

submitted by /u/Elastic-Platypus
[link] [comments]

Related tags
- ❌
- r/netsec
February 16^th 2024 at 18:27

/r/netsec - Information Security News & Discussion
Hello Lucee! Let us hack Apple again?
February 15^th 2024 at 19:56

Hello Lucee! Let us hack Apple again?

By /u/thewhippersnapper4

submitted by /u/thewhippersnapper4
[link] [comments]

Related tags
- ❌
- r/netsec
February 15^th 2024 at 19:56

SiCat - an advanced exploit search tool designed to identify and gather information about exploits from both open sources and local repositories effectively

By /u/DrinkMoreCodeMore

submitted by /u/DrinkMoreCodeMore
[link] [comments]

Related tags
- ❌
- r/netsec
February 15^th 2024 at 18:37

/r/netsec - Information Security News & Discussion
CVE-2024-23724: Ghost CMS Stored XSS Leading to Owner Takeover
February 13^th 2024 at 16:29

CVE-2024-23724: Ghost CMS Stored XSS Leading to Owner Takeover

By /u/hackers_and_builders

submitted by /u/hackers_and_builders
[link] [comments]

Related tags
- ❌
- r/netsec
February 13^th 2024 at 16:29

/r/netsec - Information Security News & Discussion
Analysis of Mirai variant leveraging CVE-2023-1389
February 19^th 2024 at 06:21

Analysis of Mirai variant leveraging CVE-2023-1389

By /u/Permafr0stsec

submitted by /u/Permafr0stsec
[link] [comments]

Related tags
- ❌
- r/netsec
February 19^th 2024 at 06:21

/r/netsec - Information Security News & Discussion
Exploiting TRACE
February 16^th 2024 at 16:41

Exploiting TRACE

By /u/6W99ocQnb8Zy17

submitted by /u/6W99ocQnb8Zy17
[link] [comments]

Related tags
- ❌
- r/netsec
February 16^th 2024 at 16:41

/r/netsec - Information Security News & Discussion
Exploiting Unsynchronised Clocks
February 16^th 2024 at 16:39

Exploiting Unsynchronised Clocks

By /u/6W99ocQnb8Zy17

submitted by /u/6W99ocQnb8Zy17
[link] [comments]

Related tags
- ❌
- r/netsec
February 16^th 2024 at 16:39

/r/netsec - Information Security News & Discussion
A Double Free vulnerability on the libdicom library and an in-depth analysis of the DICOM file format.
February 16^th 2024 at 16:22

A Double Free vulnerability on the libdicom library and an in-depth analysis of the DICOM file format.

By /u/voidz0r

submitted by /u/voidz0r
[link] [comments]

Related tags
- ❌
- r/netsec
February 16^th 2024 at 16:22

GitHub - deeexcee-io/duppy: python flask app which utilises ngrok and gunicorn to securely download and upload files to local machine over the internet. all handled by the bash script.

By /u/Leading-Employer-828

submitted by /u/Leading-Employer-828
[link] [comments]

Related tags
- ❌
- r/netsec
February 15^th 2024 at 21:34

/r/netsec - Information Security News & Discussion
Microsoft 365 AiTM detection: the lessons learned
February 15^th 2024 at 17:40

Microsoft 365 AiTM detection: the lessons learned

By /u/wez32

submitted by /u/wez32
[link] [comments]

Related tags
- ❌
- r/netsec
February 15^th 2024 at 17:40

/r/netsec - Information Security News & Discussion
SOC Interview Questions
February 14^th 2024 at 21:36

SOC Interview Questions

By /u/ogunal00

submitted by /u/ogunal00
[link] [comments]

Related tags
- ❌
- r/netsec
February 14^th 2024 at 21:36

/r/netsec - Information Security News & Discussion
Staying ahead of threat actors in the age of AI
February 14^th 2024 at 18:56

Staying ahead of threat actors in the age of AI

By /u/SCI_Rusher

submitted by /u/SCI_Rusher
[link] [comments]

Related tags
- ❌
- r/netsec
February 14^th 2024 at 18:56

/r/netsec - Information Security News & Discussion
Snap Trap: The Hidden Dangers Within Ubuntu's Package Suggestion System
February 14^th 2024 at 13:20

Snap Trap: The Hidden Dangers Within Ubuntu's Package Suggestion System

By /u/ilay789

submitted by /u/ilay789
[link] [comments]

Related tags
- ❌
- r/netsec
February 14^th 2024 at 13:20

/r/netsec - Information Security News & Discussion
Can you Tell When A Power Outage Occurred? -- Determining How Long a Wi-Fi AP Has Been Active
February 14^th 2024 at 11:29

Can you Tell When A Power Outage Occurred? -- Determining How Long a Wi-Fi AP Has Been Active

By /u/wirelessbits

submitted by /u/wirelessbits
[link] [comments]

Related tags
- ❌
- r/netsec
February 14^th 2024 at 11:29

/r/netsec - Information Security News & Discussion
Azure Devops Zero-Click CI/CD Vulnerability
February 13^th 2024 at 22:05

Azure Devops Zero-Click CI/CD Vulnerability

By /u/roy_6472

submitted by /u/roy_6472
[link] [comments]

Related tags
- ❌
- r/netsec
February 13^th 2024 at 22:05

/r/netsec - Information Security News & Discussion
Google chronicle - query by subnet
February 13^th 2024 at 18:19

Google chronicle - query by subnet

By /u/BurkeSooty

Hi,

How would I build a query to filter by source or destination subnet in chronicle, i'm guessing the only way to do this is via regex but I cannot get it to work, is this possible in Chronicle?

submitted by /u/BurkeSooty
[link] [comments]

Related tags
- ❌
- r/netsec
February 13^th 2024 at 18:19

/r/netsec - Information Security News & Discussion
Security Review Of Okta's TOP-10 Security Posture Features to prevent the next breach
February 13^th 2024 at 16:31

Security Review Of Okta's TOP-10 Security Posture Features to prevent the next breach

By /u/Or1rez

submitted by /u/Or1rez
[link] [comments]

Related tags
- ❌
- r/netsec
February 13^th 2024 at 16:31

/r/netsec - Information Security News & Discussion
Unpack RedLine stealer using dnSpyEx - Part 3 - Securityinbits
February 13^th 2024 at 10:39

Unpack RedLine stealer using dnSpyEx - Part 3 - Securityinbits

By /u/securityinbits

submitted by /u/securityinbits
[link] [comments]

Related tags
- ❌
- r/netsec
February 13^th 2024 at 10:39

/r/netsec - Information Security News & Discussion
Overview: Evidence Collection of Ivanti Connected Secure Appliances
February 13^th 2024 at 09:59

Overview: Evidence Collection of Ivanti Connected Secure Appliances

By /u/OwnPreparation3424

submitted by /u/OwnPreparation3424
[link] [comments]

Related tags
- ❌
- r/netsec
February 13^th 2024 at 09:59

/r/netsec - Information Security News & Discussion
Running BOFs with 'bof-launcher' library
February 12^th 2024 at 14:54

Running BOFs with 'bof-launcher' library

By /u/mzet-

submitted by /u/mzet-
[link] [comments]

Related tags
- ❌
- r/netsec
February 12^th 2024 at 14:54