Cybersecurity

7231 readers
47 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 2 years ago
MODERATORS
kid
[email protected]
listing: all - local
926
10
New Mirai botnet targets industrial routers with zero-day exploits (www.bleepingcomputer.com)
submitted 4 months ago by kid to c/cybersecurity
0 comments fedilink
927
9
CISA warns of critical Oracle, Mitel flaws exploited in attacks (www.bleepingcomputer.com)
submitted 4 months ago by kid to c/cybersecurity
1 comments fedilink
928
85
Telegram hands over data on thousands of users to US law enforcement (www.bleepingcomputer.com)
submitted 4 months ago by kid to c/cybersecurity
11 comments fedilink
929
7
New EAGERBEE Variant Targets ISPs and Governments with Advanced Backdoor Capabilities (thehackernews.com)
submitted 4 months ago by kid to c/cybersecurity
0 comments fedilink
930
15
CISA says Treasury was the only US agency breached via BeyondTrust (www.helpnetsecurity.com)
submitted 4 months ago by kid to c/cybersecurity
1 comments fedilink
931
7
Android Security Updates: Patch for Critical RCE Vulnerabilities (gbhackers.com)
submitted 4 months ago by kid to c/cybersecurity
0 comments fedilink
932
13
Thousands of SonicWall Devices Remain Vulnerable to CVE-2024-40766 (securityonline.info)
submitted 4 months ago by kid to c/cybersecurity
0 comments fedilink
933
12
CVE-2024-20154: Critical RCE Flaw in MediaTek Chipsets Impacts Millions (securityonline.info)
submitted 4 months ago by kid to c/cybersecurity
0 comments fedilink
934
22
PoC Exploit Released for Critical OpenSSH Vulnerability (CVE-2024-6387) (gbhackers.com)
submitted 4 months ago by kid to c/cybersecurity
1 comments fedilink
935
13
UN aviation agency investigating reports of possible data breach (www.reuters.com)
submitted 4 months ago by kid to c/cybersecurity
0 comments fedilink
936
46
Washington sues T-Mobile over 2021 data breach that spilled 79 million customer records (techcrunch.com)
submitted 4 months ago by kid to c/cybersecurity
1 comments fedilink
937
35
Microsoft Bing shows misleading Google-like page for 'Google' searches (www.bleepingcomputer.com)
submitted 4 months ago by kid to c/cybersecurity
1 comments fedilink
938
30
Chinese Hackers Double Cyber-Attacks on Taiwan (www.infosecurity-magazine.com)
submitted 4 months ago by kid to c/cybersecurity
0 comments fedilink
939
13
New AI Jailbreak Method 'Bad Likert Judge' Boosts Attack Success Rates by Over 60% (thehackernews.com)
submitted 4 months ago by kid to c/cybersecurity
0 comments fedilink
940
193
Windows 11 BitLocker Bypassed to Extract Encryption Keys (gbhackers.com)
submitted 4 months ago by kid to c/cybersecurity
24 comments fedilink
 
 

An attacker with physical access can abruptly restart the device and dump RAM, as analysis of this memory may reveal FVEK keys from recently running Windows instances, compromising data encryption.

The effectiveness of this attack is, however, limited because the data stored in RAM degrades rapidly after the power is cut off.

941
63
iPhone Sharing the Photos by Default to Apple (gbhackers.com)
submitted 4 months ago by kid to c/cybersecurity
6 comments fedilink
 
 

Titled “Enhanced Visual Search,” this toggle permits iPhones to transmit photo data to Apple by default, raising concerns about user privacy and data-sharing practices.

942
18
Wordpress Plugin Vulnerability Exposes 3 Million Websites to Injection Attacks (gbhackers.com)
submitted 4 months ago by kid to c/cybersecurity
0 comments fedilink
943
89
Windows 10 users urged to upgrade to avoid "security fiasco" (www.bleepingcomputer.com)
submitted 4 months ago by kid to c/cybersecurity
56 comments fedilink
 
 

Cybersecurity firm ESET is urging Windows 10 users to upgrade to Windows 11 or Linux to avoid a "security fiasco" as the 10-year-old operating system nears the end of support in October 2025.

"It's five minutes to twelve to avoid a security fiasco for 2025," explains ESET security expert Thorsten Urbanski.

944
34
ASUS Critical Vulnerabilities Let Attackers Execute Arbitrary Commands (gbhackers.com)
submitted 4 months ago by kid to c/cybersecurity
2 comments fedilink
945
30
Apple Offers $95M to Settle Siri Privacy Lawsuit (www.darkreading.com)
submitted 4 months ago by kid to c/cybersecurity
1 comments fedilink
946
17
US sanctions Chinese company linked to Flax Typhoon hackers (www.bleepingcomputer.com)
submitted 4 months ago by kid to c/cybersecurity
0 comments fedilink
947
27
A Windows filetype update may have complicated cyber threat detection efforts (www.techradar.com)
submitted 4 months ago by kid to c/cybersecurity
6 comments fedilink
948
11
Nuclei flaw lets malicious templates bypass signature verification (www.bleepingcomputer.com)
submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/cybersecurity
0 comments fedilink
 
 

A now-fixed vulnerability in the open-source vulnerability scanner Nuclei could potentially allow attackers to bypass signature verification while sneaking malicious code into templates that execute on local systems.

949
96
It looks like the Raspberry Pi RP2350 Hacking Challenge has been beaten — Hacker gains access to the OTP secret by glitching the RISC-V cores to enable debugging (www.tomshardware.com)
submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/cybersecurity
5 comments fedilink
 
 

Engineer Aedan Cullen may be in line for the $20K prize.

950
12
Bad Tenable plugin updates take down Nessus agents worldwide (www.bleepingcomputer.com)
submitted 4 months ago by kid to c/cybersecurity
1 comments fedilink
view more: ‹ prev next ›