HakByte: How to find anything on the internet with Google Dorks Hak5 2021-05-06 | On this first episode of HakByte, we cover Google Dorking, which is an OSINT technique that takes advantage of the Google Search engine with advanced search strings. This video covers basic google dorks that will allow you to filter out irrelevant information for a google search, finding insecure websites, and even discovering exposed password databases. Finally, an open source tool called pagodo is covered, which automatically can pass thousands of google dorks while avoiding detection from google.-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubsHost: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Ransomware Leader Arrested - ThreatWire Hak5 2024-06-19 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliYouTube: https://youtube.com/@endingwithaliEverywhere else: https://links.ali.devWant to work with Ali? endingwithalicollabs@gmail.com[❗] Join the Patreon→ https://patreon.com/threatwire0:00 0 - Intro00:12 1 - Two Final Updates02:26 2 - 💻📄➡️👾👹04:24 3 - Scattered Spider Is Scattered No More05:18 4 - OutroLINKS🔗 Story 1: Two Final Updateshttps://blogs.windows.com/windowsexperience/2024/06/07/update-on-the-recall-preview-feature-for-copilot-pcs/https://www.wired.com/story/epam-snowflake-ticketmaster-breach-shinyhunters/🔗 Story 2: 💻📄➡️👾👹https://www.techworm.net/2024/06/hackers-discord-emojis-command-linux-malware.htmlhttps://www.volexity.com/blog/2024/06/13/disgomoji-malware-used-to-target-indian-government/🔗 Story 3: Scattered Spider Is Scattered No Morehttps://krebsonsecurity.com/2024/06/alleged-boss-of-scattered-spider-hacking-group-arrested/https://www.darkowl.com/blog-content/threat-actor-spotlight-scattered-spider/https://panther.com/blog/the-scattered-spider-attack-safeguarding-your-okta-infrastructure/https://murciatoday.com/video-fbi-take-down-uk-hacker-in-spain-for-stealing-27m-usd-of-bitcoins_1000077536-a.html-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Community → https://www.hak5.org/communitySubscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Microsoft Recall got Recalled - ThreatWire Hak5 2024-06-12 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliYouTube: https://youtube.com/@endingwithaliEverywhere else: https://links.ali.devWant to work with Ali? endingwithalicollabs@gmail.com[❗] Join the Patreon→ https://patreon.com/threatwire0:00 0 - Intro00:12 1 - PHP is Vulnerable - Again!01:21 2 - What is Happening with Snowflake?05:24 3 - Jakoby06:19 4 - Recall Update08:04 5 - OutroLINKS🔗 Story 1: PHP is Vulnerable - Again!https://devco.re/blog/2024/06/06/security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en/https://www.securityweek.com/php-patches-critical-remote-code-execution-vulnerability🔗 Story 2: What is Happening with Snowflake?https://community.snowflake.com/s/question/0D5VI00000Emyl00AB/detecting-and-preventing-unauthorized-user-accesshttps://techcrunch.com/2024/06/07/snowflake-ticketmaster-lendingtree-customer-data-breach/https://techcrunch.com/2024/05/31/live-nation-confirms-ticketmaster-was-hacked-says-personal-information-stolen-in-data-breach/https://cloud.google.com/blog/topics/threat-intelligence/unc5537-snowflake-data-theft-extortionhttps://www.bleepingcomputer.com/news/security/shinyhunters-claims-santander-breach-selling-data-for-30m-customers/https://www.theverge.com/2024/6/3/24170876/snowflake-ticketmaster-santander-data-breach-detailshttps://www.securityweek.com/snowflake-attacks-mandiant-links-data-breaches-to-infostealer-infections/🔗 Story 3: Jakobyhttps://x.com/I_Am_Jakoby/status/1798476894146281650🔗 Story 4: Recall Updatehttps://www.windowscentral.com/software-apps/windows-11/microsoft-has-lost-trust-with-its-users-windows-recall-is-the-last-strawhttps://github.com/xaitax/TotalRecallhttps://blogs.windows.com/windowsexperience/2024/06/07/update-on-the-recall-preview-feature-for-copilot-pcs/-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Community → https://www.hak5.org/communitySubscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Microsoft Recall is a Bad Idea - ThreatWire Hak5 2024-06-05 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliYouTube: https://youtube.com/@endingwithaliEverywhere else: https://links.ali.devWant to work with Ali? endingwithalicollabs@gmail.com[❗] Join the Patreon→ https://patreon.com/threatwire0:00 0 - Intro00:11 1 - What is Happening with Ticketmaster01:19 2 - Security Breakdown Of Microsoft AI04:21 3 - Bricked Routers Source Discovered05:53 4 - OutroLINKS🔗 Story 1: What is Happening with Ticketmasterhttps://www.sec.gov/Archives/edgar/data/1335258/000133525824000081/lyv-20240520.htmhttps://itwire.com/business-it-news/security/not-us-snowflake-wrongly-implicated-in-ticketmaster-leak.htmlhttps://www.securityweek.com/hackers-boast-ticketmaster-breach-on-relaunched-breachforums/https://x.com/vxunderground/status/1796063116574314642 🔗 Story 2: Security Breakdown Of Microsoft AIhttps://blogs.microsoft.com/blog/2024/05/20/introducing-copilot-pcs/https://www.theverge.com/2024/6/3/24170305/microsoft-windows-recall-ai-screenshots-security-privacy-issueshttps://cyberplace.social/@GossiTheDog/112531054138802168https://doublepulsar.com/recall-stealing-everything-youve-ever-typed-or-viewed-on-your-own-windows-pc-is-now-possible-da3e12e9465ehttps://www.bbc.com/news/articles/cpwwqp6nx14o🔗 Story 3: Bricked Routers Source Discoveredhttps://www.bleepingcomputer.com/news/security/malware-botnet-bricked-600-000-routers-in-mysterious-2023-attack/https://blog.lumen.com/the-pumpkin-eclipse/-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Community → https://www.hak5.org/communitySubscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Apple’s Accidental Stalkerware - ThreatWire Hak5 2024-05-29 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliYouTube: https://youtube.com/@endingwithaliEverywhere else: https://links.ali.devWant to work with Ali? endingwithalicollabs@gmail.com[❗] Join the Patreon→ https://patreon.com/threatwire0:00 Intro00:10 1 - GitHub Enterprise Authentication Bypass01:10 2 - Apple’s Accidental Stalkerware03:55 3 - New DNSBomb Attack06:16 4 - OutroLINKS🔗 Story 1: https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.15https://www.darkreading.com/vulnerabilities-threats/github-authentication-bypass-opens-enterprise-server-attackers🔗 Story 2: Apple’s Accidental Stalkerwarehttps://www.theregister.com/2024/05/23/apple_wifi_positioning_system/https://www.govinfosecurity.com/surveillance-risk-apples-wifi-based-positioning-system-a-25330https://krebsonsecurity.com/2024/05/why-your-wi-fi-router-doubles-as-an-apple-airtag/https://cybersecuritynews.com/apples-wi-fi-positioning-system/https://www.cs.umd.edu/~dml/papers/wifi-surveillance-sp24.pdf🔗 Story 3: New DNSBomb Attackhttps://dnsbomb.net/https://cybersecuritynews.com/new-dos-attack-dnsbomb-exploiting/-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Community → https://www.hak5.org/communitySubscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Slack AI is Reading Your Chats - ThreatWire Hak5 2024-05-22 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Ali’s New Video: https://www.youtube.com/watch?v=NIpOeHFYZrM @endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliYouTube: https://youtube.com/@endingwithaliEverywhere else: https://links.ali.devWant to work with Ali? endingwithalicollabs@gmail.com[❗] Join the Patreon→ https://patreon.com/threatwire00:00 Intro00:09 Fluent Bit Memory Corruption Catastrophe01:22 Slack Training AI Using User Data02:42 Cybersecurity Fear Mongering on Twitter04:37 OutroLINKS🔗 Story 1: Fluent Bit Memory Corruption Catastrophehttps://www.tenable.com/blog/linguistic-lumberjack-attacking-cloud-services-via-logging-endpoints-fluent-bit-cve-2024-4323https://www.darkreading.com/cloud-security/critical-bug-dos-rce-data-leaks-in-all-major-cloud-platforms🔗 Story 2: Slack Training AI Using User Datahttps://x.com/QuinnyPig/status/1791220276350390575https://slack.com/help/articles/25076892548883-Guide-to-Slack-AIhttps://slack.com/help/articles/28310650165907-Security-for-Slack-AIhttps://slack.com/help/articles/28244420881555-Manage-Slack-AI-settings-for-your-organization🔗 Story 3: Cybersecurity Fear Mongering on Twitterhttps://x.com/alifcoder/status/1792108250248380451https://x.com/Parul_Gautam7/status/1791836699888079127-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Community → https://www.hak5.org/communitySubscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Is Elon Musk a Security Expert? - ThreatWire Hak5 2024-05-15 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliYouTube: https://youtube.com/@endingwithaliEverywhere else: https://links.ali.devWant to work with Ali? endingwithalicollabs@gmail.com[❗] Join the Patreon→ https://patreon.com/threatwire0:00 Intro00:10 1 - NextJS Vulnerabilities Discovered02:06 2 - New Technique Allows VPN Bypass04:31 3 - FIDO2 Flaw Exposes MITM Attack05:51 4 - Signal Vs Telegram08:24 5 - Outro LINKS🔗 Story 1: NextJS Vulnerabilities Discoveredhttps://portswigger.net/web-security/request-smuggling/advanced/response-queue-poisoninghttps://github.com/advisories/GHSA-77r5-gw3j-2mpfhttps://github.com/advisories/GHSA-fr5h-rqp8-mj6ghttps://cybersecuritynews.com/next-js-server-compromise/🔗 Story 2: New Technique Allows VPN Bypasshttps://www.leviathansecurity.com/blog/tunnelvisionhttps://cybersecuritynews.com/tunnelvision/🔗 Story 3: FIDO2 Flaw Exposes MITM Attackhttps://www.silverfort.com/blog/using-mitm-to-bypass-fido2/https://gbhackers.com/fid02-mitm-vulnerability/🔗 Story 4: Signal Vs Telegramhttps://www.city-journal.org/article/signals-katherine-maher-problemhttps://www.ccn.com/news/technology/telegram-vs-signal-elon-musk-claims-vulnerabilities/https://www.businessinsider.com/elon-musk-encrypted-messenger-app-wars-telegram-signal-2024-5https://twitter.com/elonmusk/status/1787589564917490059https://news.ycombinator.com/item?id=40341716https://nitter.poast.org/matthew_d_green/status/1789687898863792453____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Malicious Cable Detector by O.MG Hak5 2024-05-10 | Get O.MG gear: https://hak5.org/omg https://o.mg.lol Music by KANGA (https://kanga.bandcamp.com/)____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
LockBitSupp Revealed? - ThreatWire Hak5 2024-05-08 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliYouTube: https://youtube.com/@endingwithaliEverywhere else: https://links.ali.dev[❗] Join the Patreon→ https://patreon.com/threatwire0:00 Intro00:00:08 1 - CISA and FBI Release New Developer Warning00:01:42 2 - GitLab Vuln is Leading to Account Takeovers00:03:02 3 - Ministry of Defence Hacked00:04:08 4 - LockBit Troll 00:05:52 OutroLINKS🔗 Story 1: CISA and FBI Release New Developer Warninghttps://www.cisa.gov/sites/default/files/2024-05/Secure_by_Design_Alert_Eliminating_Directory_Traversal_Vulnerabilities_in_Software_508c%20%283%29.pdf https://www.bleepingcomputer.com/news/security/cisa-urges-software-devs-to-weed-out-path-traversal-vulnerabilities/🔗 Story 2: GitLab Vuln is Leading to Account Takeovershttps://www.bleepingcomputer.com/news/security/cisa-says-gitlab-account-takeover-bug-is-actively-exploited-in-attacks/https://www.cisa.gov/news-events/alerts/2024/01/10/cisa-adds-one-known-exploited-vulnerability-cataloghttps://www.darkreading.com/application-security/critical-gitlab-bug-exploit-account-takeover-cisahttps://thehackernews.com/2024/05/cisa-warns-of-active-exploitation-of.html🔗 Story 3: Ministry of Defence Hackedhttps://www.bbc.com/news/uk-68966497https://news.sky.com/story/china-hacked-ministry-of-defence-sky-news-learns-13130757https://news.sky.com/story/china-responsible-for-two-cyber-attack-campaigns-in-uk-says-dowden-13101680🔗 Story 4: LockBit Troll https://twitter.com/NCA_UK/status/1787492550342799746https://twitter.com/vxunderground/status/1787234502323978385https://techcrunch.com/2024/05/06/police-resurrect-lockbits-site-and-troll-the-ransomware-gang/https://twitter.com/vxunderground/status/1787845917803946131/photo/1 https://twitter.com/vxunderground/status/1787854092406083800 ____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
AntiVirus is a Virus - ThreatWire Hak5 2024-05-01 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliYouTube: https://youtube.com/@endingwithaliEverywhere else: https://links.ali.dev[❗] Join the Patreon→ https://patreon.com/threatwire0:00 Intro00:07 1 - Net Neutrality is BACK01:12 2 - Ivanti Connect Secure Zero Days Still Hitting Hard02:32 3 - AntiVirus is A Virus04:13 4 - UK has outlawed Passwords05:22. 5 - OutroLINKS🔗 Story 1: Net Neutrality is BACKhttps://docs.fcc.gov/public/attachments/DOC-402091A1.pdfhttps://www.pbs.org/newshour/politics/net-neutrality-reinstated-as-fcc-passes-measure-to-regulate-internet-providershttps://www.kvpr.org/npr-news/2024-04-29/net-neutrality-is-back-u-s-promises-fast-safe-and-reliable-internet-for-allhttps://www.fcc.gov/net-neutrality 🔗 Story 2: Ivanti Connect Secure Zero Days Still Hitting Hardhttps://www.cybersecuritydive.com/news/ivanti-connect-secure-state-linked-threat/708706/https://thehackernews.com/2024/01/chinese-hackers-exploit-zero-day-flaws.htmlhttps://www.mitre.org/news-insights/news-release/mitre-response-cyber-attack-one-its-rd-networkshttps://www.securityweek.com/mitre-hacked-by-state-sponsored-group-via-ivanti-zero-days/https://www.linkedin.com/feed/update/urn:li:activity:7187127053253586944/https://cyberscoop.com/ivanti-linked-breach-of-cisa-potentially-affected-more-than-100000-individuals/🔗 Story 3: AntiVirus is A Virushttps://decoded.avast.io/janrubin/guptiminer-hijacking-antivirus-updates-for-distributing-backdoors-and-casual-mining/🔗 Story 4: UK has outlawed Passwordshttps://arstechnica.com/gadgets/2024/04/connected-devices-with-awful-default-passwords-now-illegal-in-uk/https://www.etsi.org/deliver/etsi_en/303600_303699/303645/02.01.01_60/en_303645v020101p.pdf____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
New PuTTY Vulnerability - ThreatWire Hak5 2024-04-22 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliYouTube: https://youtube.com/@endingwithaliEverywhere else: https://links.ali.dev[❗] Join the Patreon→ https://patreon.com/threatwire0:00 Sophia d’Antoine0:36 - Potential T-Mobile Directory Leak2:32 - Palo Alto Networks Firewall Python Backdoor 4:20 - Twitter Hosted the Phishing Olympics6:14 - PuTTY Project Vulnerable7:28 - OutroLINKS🔗 Story 1: Potential T-Mobile Directory Leakhttps://www.t-mobile.com/support/plans-features/sim-protectionhttps://www.sciencedaily.com/releases/2016/05/160512085123.htmhttps://tmo.report/2024/04/t-mobile-employees-across-the-country-receive-cash-offers-to-illegally-swap-sims/🔗 Story 2: Palo Alto Networks Firewall Python Backdoor https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/https://unit42.paloaltonetworks.com/cve-2024-3400/https://security.paloaltonetworks.com/CVE-2024-3400https://labs.watchtowr.com/palo-alto-putting-the-protecc-in-globalprotect-cve-2024-3400/https://twitter.com/HackingLZ/status/1780239802496864474🔗 Story 3: Twitter Hosted the Phishing Olympicshttps://krebsonsecurity.com/2024/04/twitters-clumsy-pivot-to-x-com-is-a-gift-to-phishers/🔗 Story 4: PuTTY Project Vulnerablehttps://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-p521-bias.htmlhttps://thehackernews.com/2024/04/widely-used-putty-ssh-client-found.htmlhttps://www.openwall.com/lists/oss-security/2024/04/15/6____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Writing Threatwire Live with @endingwithali Hak5 2024-04-16 | Surprise live stream - working on writing Threatwire live. Come Join! -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
New OMG Cable - Woven & Unmarked Hak5 2024-04-15 | Now Available: https://hak5.org/omg -------☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
A New Kind of Phishing Attack - ThreatWire Hak5 2024-04-12 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliYouTube: https://youtube.com/@endingwithaliEverywhere else: https://links.ali.devIf you want to help Ali with her research project email her at endingwithaliresearch@gmail.com→ Please include (1️⃣) the size of your company and (2️⃣) what your company does. [❗] Join the book club on Patreon→ https://patreon.com/threatwire0:00 Intro0:08 - New Kind of Phishing Attack1:01 - Latrodectus3:24 - Discord DOS3:53 - Unsupported NAS devices left Vulnerable6:03 - OUTROLINKS🔗 Story 1: New Kind of Phishing Attack- https://lutrasecurity.com/en/articles/kobold-letters/🔗 Story 2: Latrodectus- https://www.darkreading.com/threat-intelligence/new-loader-takes-over-where-qbot-left-off- https://www.darkreading.com/cyber-risk/microsoft-warns-of-malware-delivery-via-google-urls- https://www.proofpoint.com/us/blog/threat-insight/latrodectus-spider-bytes-ice- https://thehackernews.com/2024/04/watch-out-for-latrodectus-this-malware.html🔗 Story 3: Discord DOS- https://twitter.com/vxunderground/status/1777199692184498257🔗 Story 4: Unsupported NAS devices left Vulnerable- https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383- https://github.com/netsecfish/dlink- https://www.computerworld.com/article/1723844/microsoft-sets-post-retirement-patching-record-with-windows-xp-fix-5-years-after-support-ended.html- https://www.neowin.net/news/ten-years-ago-windows-xp-received-its-final-update/____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
OWASP Oopsies and Calling XZ What It Is - ThreatWire Hak5 2024-04-06 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliYouTube: https://youtube.com/@endingwithaliEverywhere else: https://links.ali.dev@0xTib3riusTwitter: https://twitter.com/0xTib3riusTwitch: https://www.twitch.tv/0xTib3riusYouTube: https://www.youtube.com/Tib3riusEverywhere else: https://tib3rius.com/@TracketPacer Twitter: https://twitter.com/TracketPacerYouTube: https://www.youtube.com/c/tracketpacerTikTok: https://www.tiktok.com/@tracketpacerEverywhere else: https://www.tracketpacer.com/ [❗] Join the book club on Patreon→ https://patreon.com/threatwire0:00 Intro0:11 - Backdoor in XZ-Utils4:46 - OWASP Oopsies5:30 - UPDATE: NVD has broken its silence8:14 - UPDATE: AT&T Finally Admits The L8:57 - OUTROLINKS🔗 Story 1: Backdoor in XZ-Utilshttps://mastodon.social/@AndresFreundTec/112180406142695845https://www.wiz.io/blog/cve-2024-3094-critical-rce-vulnerability-found-in-xz-utilshttps://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2bhttps://www.mail-archive.com/xz-devel@tukaani.org/msg00566.htmlhttps://www.openwall.com/lists/oss-security/2024/03/29/4https://boehs.org/node/everything-i-know-about-the-xz-backdoor#fnref2https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27🔗 Story 2: OWASP Oopsieshttps://twitter.com/owasp/status/1774851614752313460https://www.bleepingcomputer.com/news/security/owasp-discloses-data-breach-caused-by-wiki-misconfiguration/https://owasp.org/blog/2024/03/29/OWASP-data-breach-notification.html🔗 Story 3: UPDATE: NVD has broken its silencehttps://www.first.org/conference/vulncon2024/https://www.infosecurity-magazine.com/news/nist-unveils-new-nvd-consortium/?&web_view=truehttps://sos-vo.org/news/nist-unveils-new-consortium-operate-its-national-vulnerability-databasehttps://nvd.nist.gov/general/news/nvd-program-transition-announcement🔗 Story 4: UPDATE: AT&T Finally Admits The Lhttps://www.securityweek.com/att-says-data-on-73-million-customers-leaked-on-dark-web/____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Introducing the new Threat Wire Hak5 2024-04-01 | Order today at https://Hak5.org____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Apple’s Unfixable Vulnerability - ThreatWire Hak5 2024-03-29 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliEverywhere else: https://links.ali.dev[❗] ThreatWire Patreon has moved to → https://patreon.com/threatwire0:00 - Intro0:13 - US Cyber Trust Mark is Now Official2:24 - Apple’s Unfixable Vulnerability4:23 - Another Python Supply Chain Attack5:50 - OutroLINKS🔗 Story 1: US Cyber Trust Mark is Now Officialhttps://www.whitehouse.gov/briefing-room/statements-releases/2022/10/11/fact-sheet-biden-harris-administration-delivers-on-strengthening-americas-cybersecurity/https://docs.fcc.gov/public/attachments/FCC-24-26A1.pdfhttps://www.jdsupra.com/legalnews/fcc-launches-u-s-cyber-trust-mark-4990595/https://cyberscoop.com/fcc-cyber-trust-mark/🔗 Story 2: Apple’s Unfixable VulnerabilityApple Mitigation: https://developer.apple.com/documentation/xcode/writing-arm64-code-for-apple-platforms#Enable-DIT-for-constant-time-cryptographic-operationshttps://www.bleepingcomputer.com/news/security/new-gofetch-attack-on-apple-silicon-cpus-can-steal-crypto-keys/https://arstechnica.com/security/2024/03/hackers-can-extract-secret-encryption-keys-from-apples-mac-chips/https://gofetch.fail/https://www.cyberkendra.com/2024/03/gofetch-flaw-exposes-cryptographic-key.html🔗 Story 3: Another Python Supply Chain Attackhttps://checkmarx.com/blog/over-170k-users-affected-by-attack-using-fake-python-infrastructure/____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
CVEs ARE DYING - ThreatWire Hak5 2024-03-22 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliEverywhere else: https://links.ali.dev[❗] ThreatWire Patreon has moved to → https://patreon.com/threatwire0:00 Intro0:12 - The NVD is MIA2:09 - Linux Foundation CVE Reporting Changed4:16 - Cisco Acquires Splunk4:20 - It’s Literally Black Market Extortion6:06 - Is the AT&T Leak Real?7:02 - OUTROLINKS🔗 Story 1: The NVD is MIAhttps://blog.morphisec.com/national-vulnerability-database-defend-unpatched-vulnerabilitieshttps://anchore.com/blog/national-vulnerability-database-opaque-changes-and-unanswered-questions/https://nvd.nist.gov/https://www.hackread.com/nist-nvd-halt-leaves-vulnerabilities-untagged/🔗 Story 2: Linux Foundation CVE Reporting Changedhttps://github.com/torvalds/linux/blob/master/Documentation/process/cve.rsthttps://community.synopsys.com/s/question/0D5Uh000007i8czKAA/black-duck-nvd-and-linux-kernel-cve-processhttps://lwn.net/ml/linux-kernel/2024021314-unwelcome-shrill-690e@gregkh/https://lwn.net/Articles/961961/https://openssf.org/blog/2024/02/14/linux-kernel-achieves-cve-numbering-authority-status/This story had help with sourcing by Karl and Lacey! Thank you for the help!🔗 Story 3: Cisco Acquires Splunkhttps://www.cisco.com/site/us/en/about/corporate-strategy-office/acquisitions/splunk/index.html🔗 Story 4: It’s Literally Black Market Extortionhttps://grahamcluley.com/incognito-market-the-not-so-secure-dark-web-drug-marketplace/https://krebsonsecurity.com/2024/03/incognito-darknet-market-mass-extorts-buyers-sellers/🔗 Story 5: Is the AT&T Leak Real?https://www.scmagazine.com/brief/att-denies-alleged-data-leak-of-over-70m-individualshttps://www.bleepingcomputer.com/news/security/att-says-leaked-data-of-70-million-people-is-not-from-its-systems/https://www.theregister.com/2024/03/18/att_alleged_data_leak/https://www.nextgov.com/cybersecurity/2024/02/fcc-gives-telecom-companies-7-days-alert-authorities-discovered-data-breaches/394074/____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Encryption Market Heating Up - ThreatWire Hak5 2024-03-15 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliEverywhere else: https://links.ali.dev[❗] ThreatWire Patreon has moved to → https://patreon.com/threatwire0:00 Intro0:10 - Encryption market is heating up2:07 - Toddler Aged Malware Found3:11 - Admitting to human error4:08 - OutroLINKS🔗 Story 1: Encryption market is heating uphttps://bughunters.google.com/blog/5108747984306176/google-s-threat-model-for-post-quantum-cryptographyhttps://www.bleepingcomputer.com/news/security/tuta-mail-adds-new-quantum-resistant-encryption-to-protect-email/https://www.bleepingcomputer.com/news/security/signal-adds-quantum-resistant-encryption-to-its-e2ee-messaging-protocol/https://www.nist.gov/news-events/news/2022/07/nist-announces-first-four-quantum-resistant-cryptographic-algorithmshttps://csrc.nist.gov/Projects/post-quantum-cryptography/post-quantum-cryptography-standardization/round-3-submissionshttps://thenextweb.com/news/zama-holy-grail-cryptography-fully-homomorphic-encryption🔗 Story 2: Toddler Aged Malware Foundhttps://research.checkpoint.com/2024/magnet-goblin-targets-publicly-facing-servers-using-1-day-vulnerabilities/https://arstechnica.com/security/2024/02/as-if-two-ivanti-vulnerabilities-under-explot-wasnt-bad-enough-now-there-are-3/https://arstechnica.com/security/2024/03/never-before-seen-linux-malware-gets-installed-using-1-day-exploits/🔗 Story 3: Admitting to human errorhttps://blog.knowbe4.com/88-percent-of-data-breaches-are-caused-by-human-errorhttps://thecyberexpress.com/cybersecurity-mistakes-knowledge-gaps/https://www.kaspersky.com/blog/human-factor-360-report-2023/https://media.isc2.org/-/media/Project/ISC2/Main/Media/documents/research/ISC2_Cybersecurity_Workforce_Study_2023.pdf?rev=28b46de71ce24e6ab7705f6e3da8637e____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
White House said to use Rust - ThreatWire Hak5 2024-02-28 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliEverywhere else: https://links.ali.dev[❗] ThreatWire Patreon has moved to → https://patreon.com/threatwire0:00 - Intro0:11 - LockBit Update1:23 - White House recommends Rust2:54 - Apple Quantum Safe4:03 - OutroLINKS🔗 Story 1: LockBit Updatehttps://www.hackread.com/lockbit-ransomware-returns-taunts-fbi-data-leaks/https://www.hackread.com/nca-lockbit-gang-source-code-arrest-tool-revealed/https://www.justice.gov/opa/pr/us-and-uk-disrupt-lockbit-ransomware-varianthttps://therecord.media/lockbit-relaunch-attempt-follwing-takedownhttps://www.reuters.com/technology/cybersecurity/us-indicts-two-russian-nationals-lockbit-cybercrime-gang-bust-2024-02-20/🔗 Story 2: White House Recommends Rusthttps://www.youtube.com/watch?v=xVYSvkogoUM&t=2s&ab_channel=TheWhiteHousehttps://www.bleepingcomputer.com/news/security/white-house-urges-devs-to-switch-to-memory-safe-programming-languages/https://www.whitehouse.gov/oncd/briefing-room/2024/02/26/press-release-technical-report/https://www.whitehouse.gov/wp-content/uploads/2024/02/Final-ONCD-Technical-Report.pdf🔗 Story 3: Apple Quantum Safehttps://security.apple.com/blog/imessage-pq3/https://www.schneier.com/blog/archives/2024/02/apple-announces-post-quantum-encryption-algorithms-for-imessage.html____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
I-S00N China File Drop - ThreatWire Hak5 2024-02-22 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliEverywhere else: https://links.ali.dev[❗] ThreatWire Patreon has moved to → https://patreon.com/threatwire0:00 Intro0:11 - What is happening with LockBit?0:48 - Linux Kernel Added as CNA1:02 - I-S00N China file drop2:12 - Using Audio to Generate Fingerprint Attacks 4:02 - ChatGPT Accounts Linked to APTs Deleted5:51 - OutroLINKS🔗 Story 1: What is happening with LockBit?https://www.inforisktoday.com/lockbit-infrasttructure-seized-by-us-uk-police-a-24395https://www.bleepingcomputer.com/news/security/lockbit-ransomware-disrupted-by-global-police-operation/🔗 Story 2: Linux Kernel Added as CNAhttps://www.cve.org/Media/News/item/news/2024/02/13/kernel-org-Added-as-CNAhttp://www.kroah.com/log/blog/2024/02/13/linux-is-a-cna/🔗 Story 3: I-S00N China file drophttps://threadreaderapp.com/thread/1759326049262019025.htmlhttps://thecyberexpress.com/chinese-ministry-of-public-security-breach/https://github.com/I-S00N/I-S00N🔗 Story 4: Using Audio to Generate Fingerprint Attackshttps://www.ndss-symposium.org/wp-content/uploads/2024-618-paper.pdfhttps://www.tomshardware.com/tech-industry/cyber-security/your-fingerprints-can-be-recreated-from-the-sounds-made-when-you-swipe-on-a-touchscreen-researchers-new-side-channel-attack-can-reproduce-partial-fingerprints-to-enable-attackshttps://beebom.com/master-print-ai-generated-fingerprint-unlock-smartphone/🔗 Story 5: ChatGPT Accounts Linked to APTs Deletedhttps://www.bleepingcomputer.com/news/security/openai-blocks-state-sponsored-hackers-from-using-chatgpt/https://www.microsoft.com/en-us/security/blog/2024/02/14/staying-ahead-of-threat-actors-in-the-age-of-ai/https://openai.com/blog/disrupting-malicious-uses-of-ai-by-state-affiliated-threat-actors____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Writing Threatwire Live with @endingwithali Hak5 2024-02-20 | Surprise live stream - working on writing Threatwire live. Come Join! -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
DEF CON was actually cancelled?! - ThreatWire Hak5 2024-02-15 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliEverywhere else: https://links.ali.dev[❗] ThreatWire Patreon has moved to → https://patreon.com/threatwire0:00 Intro0:12 - Is this app speedrunning getting hacked?2:07 - Can your Toothbrush be used DDOS someone?2:20 - FCC finalizes data breach regulations for telecom companies3:11 - DEFCON was actually canceled? 4:50 - OUTROLINKS🔗 Story 1: Is this app speedrunning getting hacked?https://techcrunch.com/2022/02/22/stalkerware-network-spilling-data/https://www.hackread.com/stalkerware-app-thetruthspy-hacked-data-stolen/https://maia.crimew.gay/posts/fuckstalkerware-4/https://techcrunch.com/2024/02/12/new-thetruthspy-stalkerware-victims-is-your-android-device-compromised/🔗 Story 2: Can your Toothbrush be used DDOS someone?https://www.bleepingcomputer.com/news/security/no-3-million-electric-toothbrushes-were-not-used-in-a-ddos-attack/https://www.businessinsider.com/girl-tweets-smart-fridge-mom-confiscated-devices-viral-2019-8🔗 Story 3: FCC finalizes data breach regulations for telecom companieshttps://www.sec.gov/news/press-release/2023-139https://www.fcc.gov/fcc-seeks-comment-proposed-updates-trs-data-breach-reporting-requirementshttps://insideprivacy.com/technology/the-fcc-expands-scope-of-data-breach-notification-rules/https://www.federalregister.gov/documents/2024/02/12/2024-01667/data-breach-reporting-requirements#p-16🔗 Story 4: DEFCON was actually canceled?https://forum.defcon.org/node/248360https://forum.defcon.org/node/248358____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
China is able to trace your Airdrops - ThreatWire Hak5 2024-01-24 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliEverywhere else: https://links.ali.devIf you want to help Ali with her research project email her at endingwithaliresearch@gmail.com→ Please include (1️⃣) the size of your company (2️⃣) what your role title is and (3️⃣) a little summary of what your job entails. [❗] ThreatWire Patreon has moved to → https://patreon.com/threatwire00:00 Intro0:12 - SEC Twitter (x) Hacked! 1:52 - IT kind of does their job and gets in trouble3:16 - China is able to trace your Airdrops4:09 - Outro LINKS🔗 Story 1: SEC Twitter (x) Hacked! https://www.sec.gov/secgov-x-account https://www.bleepingcomputer.com/news/security/sec-confirms-x-account-was-hacked-in-sim-swapping-attack/ https://twitter.com/GulGeeOfficial/status/1744864569712144760🔗 Story 2: IT kind of does their job and gets in troublehttps://bleepingcomputer.com/news/security/court-charges-dev-with-hacking-after-cybersecurity-issue-disclosure/ https://www.heise.de/news/Warum-ein-Sicherheitsforscher-im-Fall-Modern-Solution-verurteilt-wurde-9601392.html 🔗 Story 3: China is able to trace your Airdropshttps://sfj.beijing.gov.cn/sfj/sfdt/ywdt82/flfw93/436331732/index.htmlhttps://time.com/6553473/china-cracked-apple-airdrop/ 🔗 Bonus Story - https://arstechnica.com/gadgets/2024/01/convicted-murderer-filesystem-creator-writes-of-regrets-to-linux-list/ ____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Cyber Kidnapping & Cartas Controversial Cap Table Tactics Exposed! - ThreatWire Hak5 2024-01-10 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliEverywhere else: https://links.ali.devIf you want to help Ali with her research project email her at endingwithaliresearch@gmail.com→ Please include (1️⃣) the size of your company (2️⃣) what your role title is and (3️⃣) a little summary of what your job entails. [❗] ThreatWire Patreon has moved to → https://patreon.com/threatwire0:00 - Intro0:14 - What is happening with Carta?2:14 - Cyber Kidnapping?2:50 - Crypto-hackers are active on Twitter3:35 - Outro LINKS🔗 Story 1: What is going on with Carta?https://twitter.com/karrisaarinen/status/1743824345334714587https://twitter.com/henrysward/status/1743794996732735679 https://twitter.com/henrysward/status/1743794996732735679 🔗 Story 2: Cyber Kidnapping?https://cybertalk.org/2024/01/08/the-latest-cyber-kidnapping-victim-u-s-exchange-student/https://www.newsnationnow.com/cybersecurity/cyber-kidnapping-scam-trend/ 🔗 Story 3: Crypto-hackers are active on Twitter https://www.bleepingcomputer.com/news/security/netgear-hyundai-latest-x-accounts-hacked-to-push-crypto-drainers/____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Insane iPhone Exploit & Zombie Cookies Hijack Google Accounts - ThreatWire Hak5 2024-01-03 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliEverywhere else: https://links.ali.devIf you want to help Ali with her research project email her at endingwithaliresearch@gmail.com→ Please include (1️⃣) the size of your company (2️⃣) what your role title is and (3️⃣) a little summary of what your job entails. [❗] ThreatWire Patreon has moved to → https://patreon.com/threatwire00:00 Intro0:00 - Intro0:12 - Insane iPhone Exploit Revealed to the World1:42 - Zombie Cookies Hijack Google Accounts2:51 - Outro LINKS🔗 Story 1: Insane iPhone Exploit Revealed to the Worldhttps://arstechnica.com/security/2023/12/exploit-used-in-mass-iphone-infection-campaign-targeted-secret-hardware-feature/2/https://securelist.com/operation-triangulation-the-last-hardware-mystery/111669/https://www.youtube.com/watch?v=7VWNUUldBEE&ab_channel=auth🔗 Story 2: Zombie Cookies Hijack Google Accountshttps://www.cloudsek.com/blog/compromising-google-accounts-malwares-exploiting-undocumented-oauth2-functionality-for-session-hijackinghttps://www.hackread.com/malware-google-cookie-exploit-via-oauth2/https://www.bleepingcomputer.com/news/security/malware-abuses-google-oauth-endpoint-to-revive-cookies-hijack-accounts/https://darktrace.com/blog/the-rise-of-the-lumma-info-stealerhttps://www.youtube.com/watch?v=NzAtZzzFoOs&ab_channel=HudsonRock____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
GTA Hacker Sentenced - ThreatWire Hak5 2023-12-27 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliEverywhere else: https://links.ali.devIf you want to help Ali with her research project email her at endingwithaliresearch@gmail.com→ Please include (1️⃣) the size of your company (2️⃣) what your role title is and (3️⃣) a little summary of what your job entails. [❗] ThreatWire Patreon has moved to → https://patreon.com/threatwire00:00 Intro0 - PSA: SEC Regulations Are Live1 - GTA Hacker Sentenced2 - An Update to the MongoDB story3 - What is happening with AlphV?4 - Major Vulnerability Found in SSH5 - Outro LINKS🔗Story 1 - PSA: SEC Regulations Are Livehttps://www.sec.gov/news/press-release/2023-139https://cyberscoop.com/sec-cybersecurity-incidents-disclosure-rule/https://www.sec.gov/news/statement/gerding-cybersecurity-disclosure-20231214🔗Story 2 - GTA Hacker Sentencedhttps://www.bbc.com/news/technology-67663128https://insider-gaming.com/gta-6-hacker-vows-to-continue-to-commit-crimes-after-being-released-from-jail/https://en.wikipedia.org/wiki/Lapsus$https://www.youtube.com/watch?v=v_z2HkVfcEA&ab_channel=Crumb🔗Story 3 - MongoDB Updatehttps://www.mongodb.com/alerts🔗Story 4 - What is happening to AlphV https://www.justice.gov/opa/pr/justice-department-disrupts-prolific-alphvblackcat-ransomware-varianthttps://arstechnica.com/security/2023/12/alphv-ransomware-site-is-seized-by-the-fbi-then-its-unseized-and-so-on/🔗Story 5 - Major Vulnerability Found in SSHhttps://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/https://terrapin-attack.com/https://www.bleepingcomputer.com/news/security/terrapin-attacks-can-downgrade-security-of-openssh-connections/https://www.openssh.com/releasenotes.html#9.6p1____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Twitter/X Bug Bounty Blunder - ThreatWire Hak5 2023-12-21 | ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️Support ThreatWire → https://patreon.com/threatwire@endingwithali →Twitch: https://twitch.tv/endingwithaliTwitter: https://twitter.com/endingwithaliEverywhere else: https://links.ali.devIf you want to help Ali with her research project email her at endingwithaliresearch@gmail.com → Please include (1️⃣) the size of your company (2️⃣) what your role title and (3️⃣) a little summary of what your job entails. [❗] ThreatWire Patreon has moved to → https://patreon.com/threatwire0:00 - Intro0:15 - Twitter Bug Bounty Program Flop2:11 - 16 Year Reverse Engineers the iMessage Protocol3:46 - Still Developing: MongoDB Breach4:59 - Ledger Supply Chain Attack and A Research Project6:00 - OutroLINKS🔗Story 1 - Twitter Bug Bounty Program Flophttps://twitter.com/shoucccc/status/1734802168723734764https://twitter.com/shoucccc/status/1734802177263313091https://twitter.com/shoucccc/status/1734684850173739412https://twitter.com/rabbit_2333/status/1734712416074879162https://twitter.com/rabbit_2333/status/1734881873099379189https://twitter.com/rabbit_2333/status/1735886436195529048🔗Story 2 - 16 Year Reverse Engineers the iMessage Protocolhttps://www.beeper.com/https://blog.beeper.com/p/introducing-beeper-mini-get-bluehttps://jjtech.dev/reverse-engineering/imessage-explained/https://github.com/JJTech0130/pypushhttps://www.theverge.com/2023/12/18/24006037/apple-beeper-doj-investigation-imessage-letter-androidhttps://www.techradar.com/phones/it-took-a-genius-teenager-to-break-imessage-code-but-itll-take-apple-to-wake-up-and-realize-its-time-for-an-android-version-of-imessage🔗Story 3 - Breaking: MongoDB Data Breach https://www.hackread.com/mongodb-data-breach-hackers-access-customer-info/https://twitter.com/vxunderground/status/1736134217321370109/photo/1https://www.mongodb.com/alerts🔗Story 4 - Ledger Supply Chain Attackhttps://securityaffairs.com/156029/hacking/ledger-supply-chain-attack.htmlhttps://www.ledger.com/blog/a-letter-from-ledger-chairman-ceo-pascal-gauthier-regarding-ledger-connect-kit-exploithttps://securityboulevard.com/2023/12/three-lessons-from-the-ledger-connect-kit-supply-chain-attack/https://techcrunch.com/2023/12/14/supply-chain-attack-targeting-ledger-crypto-wallet-leaves-users-hacked/____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
PAYLOAD: DuckyLogger 2.0 - Keylogger for USB Rubber Ducky [PAYLOAD MINUTE] Hak5 2023-12-19 | Exploring the DuckyLogger 2.0 keylogger payload by drapl0n for the USB Rubber Ducky, this time on [PAYLOAD MINUTE]Payloads → https://payloads.hak5.org____________________________________________Hak5: Cyber Security Education, Inspiration & Community since 2005.____________________________________________Shop → https://shop.hak5.org/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
PAYLOAD: ICMP Data Exfiltration - USB Rubber Ducky/Exfiltration [PAYLOAD MINUTE] Hak5 2023-12-14 | Delving into the ICMP Data Exfiltration payload by TW-D for the USB Rubber Ducky, this time on [PAYLOAD MINUTE]Payloads → https://payloads.hak5.org____________________________________________Hak5: Cyber Security Education, Inspiration & Community since 2005.____________________________________________Shop → https://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Hax 4 BIOS, WordPress & Counter-Strike, oh my! - ThreatWire Hak5 2023-12-13 | Support ThreatWire → https://www.patreon.com/threatwire@endingwithali Twitch → https://twitch.tv/endingwithali [!!] ThreatWire Patreon has moved to https://www.patreon.com/threatwire0:00 - Intro0:27 - All your logos are belong to us2:08 - Just another Wordpress vulnerability2:55 - Counter-Strike 2 HTML Injection DOS attack?LINKSStory 1https://binarly.io/posts/finding_logofail_the_dangers_of_image_parsing_during_system_boot/index.htmlhttps://binarly.io/posts/The_Far_Reaching_Consequences_of_LogoFAIL/index.htmlhttps://arstechnica.com/security/2023/12/just-about-every-windows-and-linux-device-vulnerable-to-new-logofail-firmware-attack/https://cyberscoop.com/logofail-vulnerability-boot-process/https://www.scmagazine.com/news/logofail-vulnerabilities-may-affect-95-of-computers-researchers-sayStory 2https://www.bleepingcomputer.com/news/security/50k-wordpress-sites-exposed-to-rce-attacks-by-critical-bug-in-backup-plugin/https://www.wordfence.com/blog/2023/12/critical-unauthenticated-remote-code-execution-found-in-backup-migration-plugin/https://www.cve.org/CVERecord?id=CVE-2023-6553Story 3https://www.bleepingcomputer.com/news/security/counter-strike-2-html-injection-bug-exposes-players-ip-addresses/https://www.hackread.com/gamers-warned-of-cs2-exploit-reveal-ip-address/____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Windows Fingerprint Sensors Spoofable - ThreatWire Hak5 2023-12-06 | Support ThreatWire → https://www.patreon.com/threatwire@endingwithali Twitch → https://twitch.tv/endingwithali [!!] ThreatWire Patreon has moved to https://www.patreon.com/threatwire - thanks for your support!0:00 - Intro0:27 - Windows Fingerprint Sensors are Spoofable1:41 - Okta oopsie turns into a big mess2:59 - Citrix Netscaler causing issues across the board4:00 - OutroLINKShttps://blackwinghq.com/blog/posts/a-touch-of-pwn-part-i/https://arstechnica.com/gadgets/2023/11/researchers-beat-windows-hello-fingerprint-sensors-with-raspberry-pi-and-linux/https://www.computerworld.com/article/3244347/what-is-windows-hello-microsofts-biometrics-security-system-explained.htmlhttps://www.darkreading.com/application-security/otka-breach-widens-entire-customer-basehttps://sec.okta.com/harfileshttps://sec.okta.com/articles/2023/11/unauthorized-access-oktas-support-case-management-system-root-causehttps://www.reuters.com/technology/cybersecurity/okta-says-hackers-stole-data-all-customer-support-users-cyber-breach-2023-11-29/https://techcrunch.com/2023/11/29/okta-admits-hackers-accessed-data-on-all-customers-during-recent-breach/?guccounter=1&guce_referrer=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8&guce_referrer_sig=AQAAAAuidLSeCn9R8nNTjiKKHMgPEcnprYT0tAjYnx4iH7XP2IBiO4Th079erwec0SE5woM5Nl5kCukXt3j0V_GE2q6ty46bv6vUA3h8GcD8mT54hJfZvR1ikotQyAzzjS4bG61jkl8gKAghckJSn-N1tAoo2AJnuHlltxAUFcCGj3I1https://www.malwarebytes.com/blog/news/2023/11/okta-breach-happened-after-employee-logged-into-personal-google-accounthttps://www.assetnote.io/resources/research/citrix-bleed-leaking-session-tokens-with-cve-2023-4966https://www.bleepingcomputer.com/news/security/us-health-dept-urges-hospitals-to-patch-critical-citrix-bleed-bug/https://siliconangle.com/2023/12/04/new-citrix-bleed-ransomware-threat-hits-many-credit-unions/https://doublepulsar.com/what-it-means-citrixbleed-ransom-group-woes-grow-as-over-60-credit-unions-hospitals-47766a091d4fhttps://therecord.media/hhs-warns-of-citrix-bleed-bughttps://siliconangle.com/2023/12/04/new-citrix-bleed-ransomware-threat-hits-many-credit-unions/https://dashboard.shadowserver.org/statistics/combined/time-series/?date_range=7&source=http_vulnerable&source=http_vulnerable6&tag=cve-2023-4966%2B&group_by=geo&style=stacked____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Meet Ali Diamond - Hak5s new ThreatWire host Hak5 2023-12-01 | Meet Ali Diamond - @endingwithali - our new ThreatWire host! LIVE Q&A / Meet & Greet ____________________________________________ Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
A New USB Worm On The Loose - ThreatWire Hak5 2023-11-29 | Support ThreatWire → https://www.patreon.com/threatwire@endingwithali Twitch → https://twitch.tv/endingwithali [!!] ThreatWire Patreon has moved to https://www.patreon.com/threatwire - thanks for your support!LINKShttps://www.forbes.com/sites/daveywinder/2023/11/27/law-enforcement-issues-ios-17-security-warning-over-namedrop-feature/?sh=1c0492ff4182https://www.cybertalk.org/police-departments-issue-ios-17-warning/https://www.facebook.com/OCSOMichigan/posts/pfbid02nCJYFLJfpu4GuDtfB2NoH4ZevCVE22WAd4ymoqEhF599Bp4krntoDQocsLCSV2oPl____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Hackers Reported Themselves to the SEC? - ThreatWire Hak5 2023-11-24 | Hackers Reported Themselves to the SEC, New Intel CPU CVE Discovered By Google, and a Promising Android iMessage Solution Turns out to Be Security Nightmare. All that and more, this time on ThreatWire!Support ThreatWire → https://www.patreon.com/threatwire@endingwithali Twitch → https://twitch.tv/endingwithali [!!] ThreatWire Patreon has moved to https://www.patreon.com/threatwire - thanks for your support!LINKShttps://www.bleepingcomputer.com/news/security/ransomware-gang-files-sec-complaint-over-victims-undisclosed-breach/https://www.bleepingcomputer.com/news/security/sec-now-requires-companies-to-disclose-cyberattacks-in-4-days/https://en.wikipedia.org/wiki/BlackCat_(cyber_gang)https://securityscorecard.com/research/deep-dive-into-alphv-blackcat-ransomware/https://www.databreaches.net/alphv-files-an-sec-complaint-against-meridianlink-for-not-disclosing-a-breach-to-the-sec/https://gridinsoft.com/blogs/alphv-blackcat-reports-to-sec/https://www.schneier.com/blog/archives/2023/11/ransomware-gang-files-sec-complaint.htmlhttps://www.hackread.com/google-reptar-vulnerability-intel-processors/https://cloud.google.com/blog/products/identity-security/google-researchers-discover-reptar-a-new-cpu-vulnerabilityhttps://lock.cmpxchg8b.com/reptar.htmlhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23583https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.htmlhttps://arstechnica.com/gadgets/2023/11/nothings-imessage-app-was-a-security-catastrophe-taken-down-in-24-hours/https://www.theverge.com/2023/11/18/23966781/nothing-chats-imessage-unencrypted-sunbird-plaintexthttps://texts.blog/2023/11/18/sunbird-security/https://www.sunbirdapp.com/https://twitter.com/nothing/status/1725902458189119690____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
17 Hacker Tools in 7 Minutes - ALL Hak5 Gear Hak5 2023-11-22 | Find all the Hak5 pentest gear, videos, payloads & an awesome community at https://hak5.org____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Python risks system takeover & Lockbit prompts USB trades - ThreatWire Hak5 2023-11-16 | Python obfuscation tools putting developers at risk for a total system take over. Lockbit Ransomware leads to USB drive being use to carry out bank trades. All that and more, this time on ThreatWire.Support ThreatWire → https://www.patreon.com/threatwire@endingwithali Twitch → https://twitch.tv/endingwithali [!!] ThreatWire Patreon has moved to https://www.patreon.com/threatwire - thanks for your support!LINKShttps://www.reuters.com/technology/cybersecurity/icbc-ransomware-attack-triggers-global-regulator-trader-scrutiny-2023-11-10/https://www.infosecurity-magazine.com/news/icbc-and-allen-overy-hit-by/https://time.com/6333716/china-icbc-bank-hack-usb-stick-trading/https://www.reuters.com/world/china/chinas-largest-bank-icbc-hit-by-ransomware-software-ft-2023-11-09/https://www.bleepingcomputer.com/news/security/lockbit-ransomware-leaks-gigabytes-of-boeing-data/https://usa.kaspersky.com/resource-center/threats/lockbit-ransomwarehttps://checkmarx.com/blog/python-obfuscation-traps/https://security.snyk.io/vuln/SNYK-PYTHON-PYOBFGOOD-6052826https://www.csoonline.com/article/654560/why-open-source-software-supply-chain-attacks-have-tripled-in-a-year.html____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Stealth Payload Tips - Obfuscation & Lock key triggers - Hak5 Hak5 2023-11-08 | Enhancing our Canary payload for the USB Rubber Ducky and answers to your questions on SMB servers and lock key states.0:00 - Intro0:38 - Previous Payload Review3:44 - Upgrades to our Payload7:10 - Caps lock trigger as a function9:26 - Obfuscation as a payload option17:35 - Hiding the payload / only run once18:52 - DEPLOY THE PAYLOAD20:51 - Payload Q&A22:30 - Lock Key Demo24:37 - Setting up a SMB canary listenerOur Site → https://www.hak5.orgSubscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
DaaS Bypasses Android Security, and Farewell Shannon - ThreatWire Hak5 2023-11-07 | Support ThreatWire → https://www.patreon.com/threatwireA new dropper as a service bypasses android security, Okta has another breach, and yes, this is Shannon's last episode. All that coming up now on ThreatWire.[!!] ThreatWire Patreon has moved to https://www.patreon.com/threatwire - thanks for your support!LINKShttps://www.threatfabric.com/blogs/droppers-bypassing-android-13-restrictionshttps://www.bleepingcomputer.com/news/security/cybercrime-service-bypasses-android-security-to-install-malware/ https://thehackernews.com/2023/11/securidropper-new-android-dropper-as.htmlhttps://www.bleepingcomputer.com/news/security/spynote-android-malware-spreads-via-fake-volcano-eruption-alerts/https://www.bleepingcomputer.com/news/security/new-ermac-20-android-malware-steals-accounts-wallets-from-467-apps/https://www.bleepingcomputer.com/news/security/new-zombinder-platform-binds-android-malware-with-legitimate-apps/https://arstechnica.com/security/2023/11/okta-hit-by-another-breach-this-one-stealing-employee-data-from-3rd-party-vendor/https://www.documentcloud.org/documents/24110001-okta-individual-notice-general?responsive=1&title=1https://apps.web.maine.gov/online/aeviewer/ME/40/08edf96f-d599-4db9-9e1f-52453c0ba058.shtmlhttps://www.bleepingcomputer.com/news/security/okta-hit-by-third-party-data-breach-exposing-employee-information/https://sec.okta.com/articles/2023/10/tracking-unauthorized-access-oktas-support-systemhttps://sec.okta.com/harfiles#threatwire #hak5____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Quantum Cracks, Citrix & npm Risks - ThreatWire Hak5 2023-11-03 | Support ThreatWire → https://www.patreon.com/threatwirePotential advances in quantum crypto cracking, the ongoing challenges with Citrix Bleed, and npm packages riddled with malware.[!!] ThreatWire Patreon has moved to https://www.patreon.com/threatwire - thanks for your support!LINKSResearcher Claims to Crack RSA-2048 With Quantum Computerhttps://www.bankinfosecurity.com/blogs/researcher-claims-to-crack-rsa-2048-quantum-computer-p-3536https://www.researchgate.net/publication/373516233_QC_Algorithms_Faster_Calculation_of_Prime_Numbershttps://en.wikipedia.org/wiki/Shor%27s_algorithmCitrix Bleed Mass Exploitationhttps://arstechnica.com/security/2023/10/critical-citrix-bleed-vulnerability-allowing-mfa-bypass-comes-under-mass-exploitation/https://support.citrix.com/article/CTX579459/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20234966-and-cve20234967https://cyberplace.social/@GossiTheDog/111313594140810442https://viz.greynoise.io/query?gnql=tags%3A%22Citrix%20ADC%20Netscaler%20CVE-2023-4966%20Information%20Disclosure%20Attempt%22https://dashboard.shadowserver.org/statistics/combined/time-series/?date_range=30&source=http_vulnerable&source=http_vulnerable6&tag=cve-2023-4966%2B&group_by=geo&style=stackedhttps://services.google.com/fh/files/misc/citrix-netscaler-adc-gateway-cve-2023-4966-remediation.pdfDozens of npm Packages Caught Attempting to Deploy Reverse Shellhttps://blog.phylum.io/dozens-of-npm-packages-caught-attempting-to-deploy-reverse-shell/https://www.npmjs.com/~hktalenthttps://github.com/hktalent/rshNpm____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Cisco, VMware, Citrix Vulnerabilities - ThreatWire Hak5 2023-10-25 | Support ThreatWire → https://www.patreon.com/threatwireCisco's recent zero-day exploit takes an obfuscation turn, VMware alerts users of a significant auth bypass flaw, and Citrix grapples with session hijacking attacks that have CISA raising an eyebrow.[!!] ThreatWire Patreon has moved to https://www.patreon.com/threatwire - thanks for your support!LINKSCiscohttps://thehackernews.com/2023/10/backdoor-implant-on-hacked-cisco.htmlhttps://twitter.com/VulnCheckAI/status/1716541908489543725https://twitter.com/onyphe/status/1715633541264900217https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4zhttps://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-xe-dublin-17121/221128-software-fix-availability-for-cisco-ios.htmlhttps://www.cisa.gov/news-events/alerts/2023/10/23/cisa-updates-guidance-addressing-cisco-ios-xe-web-ui-vulnerabilitiesVMWarehttps://thehackernews.com/2023/10/alert-poc-exploits-released-for-citrix.htmlhttps://www.vmware.com/security/advisories/VMSA-2023-0021.htmlhttps://github.com/horizon3ai/CVE-2023-34051Citrixhttps://thehackernews.com/2023/10/critical-citrix-netscaler-flaw.htmlhttps://github.com/assetnote/exploits/tree/main/citrix/CVE-2023-4966https://support.citrix.com/article/CTX579459/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20234966-and-cve20234967https://www.cisa.gov/news-events/alerts/2023/10/19/cisa-adds-two-known-exploited-vulnerabilities-catalog____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Payload Triggering Tricks - USB Rubber Ducky Mods for Red Team Engagements - Hak5 Hak5 2023-10-24 | Can we trick our target into triggering a payload on their own computer, while logged in and working? We find out with some crafty payload tricks -- this time on Hak5!0:00 - Intro2:03 - Setup3:17 - Payload Writing4:22 - Cloning USB devices with ATTACKMODE5:51 - Passive Windows Detection Extension9:08 - Activity Detection with DuckyScript 312:08 - SMB Canary Keystroke Injection15:10 - Payload Arming15:45 - Testing the Payload17:22 - USB Rubber Ducky Mouse Implant Tips17:53 - Thank you Hak5 community18:21 - ReviewOur Site → https://www.hak5.orgSubscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Covertly Implanting a USB Rubber Ducky into a Mouse Hak5 2023-10-23 | Glytch is with us again, stuffing ducks into mice, this time on Hak5!...wait what? Products used in this video: USB Rubber Ducky: https://shop.hak5.org/products/usb-rubber-duckyMouse: https://amzn.to/3tE9KHDUSB Hub: https://amzn.to/3S9M48cGlytch's Soldering Kit Breakdown: https://www.youtube.com/watch?v=GI9eWmk54roHak5 Wrap: https://shop.hak5.org/products/hak5-e...Tweezers: https://amzn.to/3kvRRUUSide Cutters: https://amzn.to/3kxwpyIElectric Screwdriver: https://amzn.to/3kAo8dsThick Lead Mechanical Pencil: https://amzn.to/3kEp6FsSolder Flux Pen: https://amzn.to/3ikTLVSSolder: https://amzn.to/3xSr1KoTS80P Soldering Iron: https://amzn.to/3ezilRBAs an Amazon Associate, Glytch earns from qualifying purchases through the links above at no extra cost to you. Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Cisco Zero-Day Exploited In The Wild - ThreatWire Hak5 2023-10-18 | Support ThreatWire → https://www.patreon.com/threatwireDarren Kitchen → https://darren.kitchenLINKShttps://nvd.nist.gov/vuln/detail/CVE-2023-20198https://arstechnica.com/security/2023/10/actively-exploited-cisco-0-day-with-maximum-10-severity-gives-full-network-control/https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4zhttps://vulncheck.com/blog/cisco-implants
Signal Zero Day? - #threatwire #shorts #hak5 #informationsecurity #news Hak5 2023-10-16 | Ali discusses the Signal "Zero Day" rumors. #threatwire #hak5 #shorts • Ali → https://links.ali.dev• Support → https://www.patreon.com/threatwireLINKS:https://twitter.com/signalapp/status/1713789257599353084https://twitter.com/joernchen/status/1713495612266520884https://twitter.com/vxunderground/status/1713824495742447739https://www.bleepingcomputer.com/news/security/signal-says-there-is-no-evidence-rumored-zero-day-bug-is-real/+++Hak5 -- Cyber Security Education, Inspiration, News & Community. Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
High Severity Curl Vulnerability Announced - #threatwire #shorts Hak5 2023-10-11 | Ali discusses CVE-2023-38545 - a High Severity Vulnerability for Curl.#threatwire #hak5 • Ali → https://ali.dev/ || https://www.tiktok.com/@endingwithali || https://twitter.com/endingwithali || https://twitch.tv/endingwithali• Support → https://www.patreon.com/threatwire+++Hak5 -- Cyber Security Education, Inspiration, News & Community. Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Introducing HIDX StealthLink Hak5 2023-10-11 | Run a remote shell through a "keyboard" that looks like a normal USB cable. It's O.MG Cable's latest trick! Find all O.MG Devices for sale at https://hak5.org/omgGet started with several HIDX StealthLink examples: https://github.com/O-MG/O.MG-Firmware/wiki#features____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Curl Schedules Security Patch; Linux Hit With Buffer Overflow Flaw - ThreatWire Hak5 2023-10-10 | [!!] ThreatWire Patreon has moved to https://www.patreon.com/threatwire - thanks for your support!23andMe data was found being sold online, Linux was hit with a glibc vulnerability, and Curl schedules a security patch! All that coming up now on ThreatWire. #threatwire #hak5ThreatWire by Shannon Morse is a weekly news journalism show covering cybersecurity topics for network admins, information security professionals, and consumers. Watch this on youtube: https://youtu.be/HQ2ZwJCkqKcChapters:00:00 23andMe Data Sold Online02:27 Linux Hit With Glibc Vuln05:28 Curl To Release PatchLinks:Resources for stories are available on Patreon exclusively, to protect our channel from being inappropriately flagged as “malicious content”. All links included in my videos are news articles or sources related to each story and are both appropriate for the discussion and legitimate. Access source links at https://www.patreon.com/threatwireHak5 -- Cyber Security Education, Inspiration, News & Community since 2005:-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆____________________________________________Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
