FreshRSS

🔒
△ 🔃
☐ ☆ ✇ /r/netsec - Information Security News & Discussion

/r/netsec's Q2 2024 Information Security Hiring Thread

By /u/netsec_burn — April 2nd 2024 at 18:53

Overview

If you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.

We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.

Please reserve top level comments for those posting open positions.

Rules & Guidelines

Include the company name in the post. If you want to be topsykret, go recruit elsewhere. Include the geographic location of the position along with the availability of relocation assistance or remote work.

  • If you are a third party recruiter, you must disclose this in your posting.
  • Please be thorough and upfront with the position details.
  • Use of non-hr'd (realistic) requirements is encouraged.
  • While it's fine to link to the position on your companies website, provide the important details in the comment.
  • Mention if applicants should apply officially through HR, or directly through you.
  • Please clearly list citizenship, visa, and security clearance requirements.

You can see an example of acceptable posts by perusing past hiring threads.

Feedback

Feedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)

submitted by /u/netsec_burn
[link] [comments]
☐ ☆ ✇ WIRED

The XZ Backdoor: Everything You Need to Know

By Dan Goodin, Ars Technica — April 2nd 2024 at 08:00
Details are starting to emerge about a stunning supply chain attack that sent the open source software community reeling.
☐ ☆ ✇ WIRED

The Incognito Mode Myth Has Fully Unraveled

By Dell Cameron, Andrew Couts — April 1st 2024 at 21:22
To settle a years-long lawsuit, Google has agreed to delete “billions of data records” collected from users of “Incognito mode,” illuminating the pitfalls of relying on Chrome to protect your privacy.
☐ ☆ ✇ /r/netsec - Information Security News & Discussion

Last part of Lord Of The Ring0

By /u/Idov31 — April 1st 2024 at 13:36

Last chapter of my windows kernel development series with usermode and kernel mode memory patching, AMSI bypass driver and more

submitted by /u/Idov31
[link] [comments]
☐ ☆ ✇ WIRED

A Ghost Ship’s Doomed Journey Through the Gate of Tears

By Matt Burgess — April 1st 2024 at 06:00
Millions lost internet service after three cables in the Red Sea were damaged. Houthi rebels deny targeting the cables, but their missile attack on a cargo ship, left adrift for months, is likely to blame.
☐ ☆ ✇ WIRED

You Should Update Apple iOS and Google Chrome ASAP

By Kate O'Flaherty — March 31st 2024 at 10:00
Plus: Microsoft patches over 60 vulnerabilities, Mozilla fixes two Firefox zero-day bugs, Google patches 40 issues in Android, and more.
☐ ☆ ✇ WIRED

Yogurt Heist Reveals a Rampant Form of Online Fraud

By Andy Greenberg, Andrew Couts — March 30th 2024 at 13:00
Plus: “MFA bombing” attacks target Apple users, Israel deploys face recognition tech on Gazans, AI gets trained to spot tent encampments, and OSINT investigators find fugitive Amond Bundy.
☐ ☆ ✇ /r/netsec - Information Security News & Discussion

After almost 7 years, new version of drozer was released

By /u/agathocles11 — March 28th 2024 at 13:38

drozer 3.0.0 is compatible with Python 3 and modern Java was released. drozer is a very popular security testing framework for Android

submitted by /u/agathocles11
[link] [comments]
☐ ☆ ✇ WIRED

Jeffrey Epstein’s Island Visitors Exposed by Data Broker

By Dhruv Mehrotra, Dell Cameron — March 28th 2024 at 11:00
A WIRED investigation uncovered coordinates collected by a controversial data broker that reveal sensitive information about visitors to an island once owned by Epstein, the notorious sex offender.
☐ ☆ ✇ WIRED

‘Malicious Activity’ Hits the University of Cambridge’s Medical School

By Matt Burgess — March 27th 2024 at 16:36
Multiple university departments linked to the Clinical School Computing Service have been inaccessible for a month. The university has not revealed the nature of the “malicious activity.”
☐ ☆ ✇ /r/netsec - Information Security News & Discussion

Releasing Substation v1.0

By /u/jshlbrdd — March 26th 2024 at 17:28

My team recently released v1.0 of our open source security data pipeline toolkit — if you’re currently using or interested in systems like Cribl or Logstash, check it out!

submitted by /u/jshlbrdd
[link] [comments]
☐ ☆ ✇ WIRED

Judges Block US Extradition of WikiLeaks Founder Julian Assange—for Now

By Dell Cameron, Matt Burgess — March 26th 2024 at 10:53
A high court in London says the WikiLeaks founder won’t be extradited “immediately” and the US must provide more “assurances” about any extradition.
☐ ☆ ✇ WIRED

Chinese Hackers Charged in Decade-Long Global Spying Rampage

By Matt Burgess — March 25th 2024 at 18:22
US and UK officials hit Chinese hacking group APT31 with sanctions and criminal charges after they targeted thousands of businesses, politicians, and critics of China.
☐ ☆ ✇ /r/netsec - Information Security News & Discussion

Bootfuzz: MBR-based Fuzzer

By /u/lightgrains — March 24th 2024 at 02:36

A small fuzzer designed to test BIOS Services and Port IO for old MBR-based hosts.

submitted by /u/lightgrains
[link] [comments]
☐ ☆ ✇ WIRED

Apple Chip Flaw Leaks Secret Encryption Keys

By Andrew Couts — March 23rd 2024 at 10:00
Plus: The Biden administration warns of nationwide attacks on US water systems, a new Russian wiper malware emerges, and China-linked hackers wage a global attack spree.
☐ ☆ ✇ WIRED

The DOJ Puts Apple's iMessage Encryption in the Antitrust Crosshairs

By Andy Greenberg, Andrew Couts — March 21st 2024 at 21:59
Privacy and security are an Apple selling point. But the DOJ’s new antitrust lawsuit argues that Apple selectively embraces privacy and security features in ways that hurt competition—and users.
❌