Cybersecurity

5961 readers

282 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 2 years ago

MODERATORS

kid

[email protected]

1001

Europol says Home Routing mobile encryption feature aids criminals (www.bleepingcomputer.com)

submitted 6 months ago by kid to c/cybersecurity

1 comments fedilink

1002

Signal under fire for storing encryption keys in plaintext (stackdiary.com)

submitted 6 months ago by kid to c/cybersecurity

15 comments fedilink

1003

Opsec101 (opsec101.org)

submitted 6 months ago by [email protected] to c/cybersecurity

0 comments fedilink

1004

UEFI Malware - The Low Level Threat To Millions of PCs (odysee.com)

submitted 6 months ago by [email protected] to c/cybersecurity

1 comments fedilink

1005

A tool for encrypting files using puzzle based time-lock encryption and password (lemmy.world)

submitted 6 months ago by [email protected] to c/cybersecurity

0 comments fedilink

https://github.com/umutcamliyurt/TimeLockCrypt

1006

[Gamers Nexus] Zotac's Big Mistake | Consumer Warranty & Business Data Exposure (www.youtube.com)

submitted 6 months ago* (last edited 6 months ago) by [email protected] to c/cybersecurity

2 comments fedilink

Within the first minute of the vid I'm thinking holy shit Zotac!

easily googlable private customer and B2B info is publicly available

~~They're gonna have one hell of a class action coming their way~~

Edit:
alright I'm 5mins in and now I'm thinking there might not be a class action anymore but Zotac's information handling is just funny and confusing now

lmao love the quote from Zotac's partner😂:

If I can Google search my own credit memos... what the fuck is this? How can you be this insecure? How can you run a business like this?

1007

Cloudflare Details 1.1.1.1 Service Outage Incident (gbhackers.com)

submitted 6 months ago by kid to c/cybersecurity

4 comments fedilink

BGP, again.

1008

New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks (thehackernews.com)

submitted 6 months ago by kid to c/cybersecurity

0 comments fedilink

1009

Ethereum mailing list breach exposes 35,000 to crypto draining attack (www.bleepingcomputer.com)

submitted 6 months ago by kid to c/cybersecurity

2 comments fedilink

1010

OpenAI's internal AI details stolen in 2023 breach, NYT reports (www.reuters.com)

submitted 6 months ago by kid to c/cybersecurity

0 comments fedilink

1011

RockYou2024: 10 billion passwords leaked in the largest compilation of all time (cybernews.com)

submitted 6 months ago by kid to c/cybersecurity

28 comments fedilink

1012

Ghostscript Vulnerabilities Patched in Recent Ubuntu Updates (securityboulevard.com)

submitted 6 months ago by kid to c/cybersecurity

0 comments fedilink

1013

Operation Morpheus took down 593 Cobalt Strike servers used by threat actors (securityaffairs.com)

submitted 6 months ago by kid to c/cybersecurity

0 comments fedilink

1014

Ransomware Eruption: Novel Locker Malware Flows From ‘Volcano Demon' (www.darkreading.com)

submitted 6 months ago by kid to c/cybersecurity

0 comments fedilink

1015

OVHcloud blames record-breaking DDoS attack on MikroTik botnet (www.bleepingcomputer.com)

submitted 6 months ago by kid to c/cybersecurity

0 comments fedilink

1016

Traeger smokes security bugs threatening grillers' hard work (www.theregister.com)

submitted 6 months ago by [email protected] to c/cybersecurity

5 comments fedilink

1017

Brazil Data Regulator Bans Meta From Mining Data to Train AI Models (www.securityweek.com)

submitted 6 months ago by kid to c/cybersecurity

0 comments fedilink

1018

Polish government investigates Russia-linked cyberattack on state news agency (securityaffairs.com)

submitted 6 months ago by kid to c/cybersecurity

0 comments fedilink

1019

118

Authy Users' Phone Numbers Compromised via Twilio API Vulnerability (www.bleepingcomputer.com)

submitted 6 months ago by kid to c/cybersecurity

24 comments fedilink

1020

Formula 1 governing body discloses data breach after email hacks (www.bleepingcomputer.com)

submitted 6 months ago by kid to c/cybersecurity

1 comments fedilink

1021

Patelco shuts down banking systems following ransomware attack (www.bleepingcomputer.com)

submitted 6 months ago by kid to c/cybersecurity

3 comments fedilink

1022

Passkey Redaction Attacks Subvert GitHub, Microsoft Authentication (www.darkreading.com)

submitted 6 months ago by [email protected] to c/cybersecurity

19 comments fedilink

Adversary-in-the-middle attacks can strip out the passkey option from login pages that users see, leaving targets with only authentication choices that force them to give up credentials.

1023

Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug (www.securityweek.com)

submitted 6 months ago by kid to c/cybersecurity

8 comments fedilink

1024

Splunk Patches High-Severity Vulnerabilities in Enterprise Product (www.securityweek.com)

submitted 6 months ago by kid to c/cybersecurity

0 comments fedilink

1025

Latest Intel CPUs impacted by new Indirector side-channel attack (www.bleepingcomputer.com)

submitted 6 months ago by kid to c/cybersecurity

6 comments fedilink