Cybersecurity

6847 readers

16 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 2 years ago

MODERATORS

kid

[email protected]

Blasting Past WebP - An analysis of the NSO BLASTPASS iMessage exploit (googleprojectzero.blogspot.com)

submitted 1 day ago by [email protected] to c/cybersecurity

0 comments fedilink

Malicious npm Package Modifies Local 'ethers' Library to Launch Reverse Shell Attacks (thehackernews.com)

submitted 1 day ago by kid to c/cybersecurity

0 comments fedilink

'Lucid' Phishing-as-a-Service Exploits Faults in iMessage, Android RCS (www.darkreading.com)

submitted 1 day ago by kid to c/cybersecurity

2 comments fedilink

Oracle customers confirm data stolen in alleged cloud breach is valid (www.bleepingcomputer.com)

submitted 1 day ago by kid to c/cybersecurity

0 comments fedilink

New Windows zero-day leaks NTLM hashes, gets unofficial patch (www.bleepingcomputer.com)

submitted 1 day ago by kid to c/cybersecurity

0 comments fedilink

Browser-in-the-Browser attacks target CS2 players' Steam accounts (www.bleepingcomputer.com)

submitted 1 day ago by kid to c/cybersecurity

0 comments fedilink

CrushFTP CEO flames VulnCheck for assigning critical CVE (go.theregister.com)

submitted 1 day ago by [email protected] to c/cybersecurity

0 comments fedilink

FacePass security lapse exposes users' identification data (cybernews.com)

submitted 1 day ago by kid to c/cybersecurity

0 comments fedilink

Hackers Abuse COM Objects for Fileless Malware Lateral Movements (cybersecuritynews.com)

submitted 1 day ago by kid to c/cybersecurity

0 comments fedilink

UK fines software provider £3.07 million for 2022 ransomware breach (www.bleepingcomputer.com)

submitted 1 day ago by kid to c/cybersecurity

0 comments fedilink

New Atlantis AIO platform automates credential stuffing on 140 services (www.bleepingcomputer.com)

submitted 1 day ago by kid to c/cybersecurity

0 comments fedilink

China-linked FamousSparrow APT group resurfaces with enhanced capabilities - Help Net Security (www.helpnetsecurity.com)

submitted 1 day ago by kid to c/cybersecurity

0 comments fedilink

New Ransomware Group Claims Attack on US Telecom Firm WideOpenWest (www.securityweek.com)

submitted 1 day ago by kid to c/cybersecurity

0 comments fedilink

US defense contractor Morse settles infosec whistleblower suit for $4.6M (go.theregister.com)

submitted 2 days ago* (last edited 2 days ago) by [email protected] to c/cybersecurity

0 comments fedilink

Inside Kimsuky’s Latest Cyberattack: Analyzing Malicious Scripts and Payloads (labs.k7computing.com)

submitted 1 day ago by kid to c/cybersecurity

0 comments fedilink

RedCurl cyberspies create ransomware to encrypt Hyper-V servers (www.bleepingcomputer.com)

submitted 1 day ago by kid to c/cybersecurity

0 comments fedilink

A Sneaky Phish Just Grabbed my Mailchimp Mailing List (www.troyhunt.com)

submitted 3 days ago by [email protected] to c/cybersecurity

2 comments fedilink

You know when you're really jet lagged and really tired and the cogs in your head are just moving that little bit too slow? That's me right now, and the penny has just dropped that a Mailchimp phish has grabbed my credentials, logged into my account and exported the mailing