Cybersecurity

6833 readers
53 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
kid@sh.itjust.works
Lanky_Pomegranate530@midwest.social
listing: all - local
1
8
Blasting Past WebP - An analysis of the NSO BLASTPASS iMessage exploit (googleprojectzero.blogspot.com)
submitted 7 hours ago by cantankerous_cashew@lemmy.world to c/cybersecurity@sh.itjust.works
0 comments fedilink
2
5
'Lucid' Phishing-as-a-Service Exploits Faults in iMessage, Android RCS (www.darkreading.com)
submitted 14 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
2 comments fedilink
3
12
Malicious npm Package Modifies Local 'ethers' Library to Launch Reverse Shell Attacks (thehackernews.com)
submitted 18 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
4
8
Oracle customers confirm data stolen in alleged cloud breach is valid (www.bleepingcomputer.com)
submitted 18 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
5
6
New Windows zero-day leaks NTLM hashes, gets unofficial patch (www.bleepingcomputer.com)
submitted 18 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
6
4
CrushFTP CEO flames VulnCheck for assigning critical CVE (go.theregister.com)
submitted 16 hours ago by PhilipTheBucket@ponder.cat to c/cybersecurity@sh.itjust.works
0 comments fedilink
7
2
Hackers Abuse COM Objects for Fileless Malware Lateral Movements (cybersecuritynews.com)
submitted 14 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
8
5
Browser-in-the-Browser attacks target CS2 players' Steam accounts (www.bleepingcomputer.com)
submitted 18 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
9
4
FacePass security lapse exposes users' identification data (cybernews.com)
submitted 18 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
10
3
UK fines software provider £3.07 million for 2022 ransomware breach (www.bleepingcomputer.com)
submitted 18 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
11
3
New Atlantis AIO platform automates credential stuffing on 140 services (www.bleepingcomputer.com)
submitted 18 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
12
2
China-linked FamousSparrow APT group resurfaces with enhanced capabilities - Help Net Security (www.helpnetsecurity.com)
submitted 18 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
13
2
New Ransomware Group Claims Attack on US Telecom Firm WideOpenWest (www.securityweek.com)
submitted 18 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
14
1
Inside Kimsuky’s Latest Cyberattack: Analyzing Malicious Scripts and Payloads (labs.k7computing.com)
submitted 18 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
15
1
RedCurl cyberspies create ransomware to encrypt Hyper-V servers (www.bleepingcomputer.com)
submitted 18 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
16
8
US defense contractor Morse settles infosec whistleblower suit for $4.6M (go.theregister.com)
submitted 1 day ago* (last edited 1 day ago) by PhilipTheBucket@ponder.cat to c/cybersecurity@sh.itjust.works
0 comments fedilink
17
17
A Sneaky Phish Just Grabbed my Mailchimp Mailing List (www.troyhunt.com)
submitted 2 days ago by BrikoX@lemmy.zip to c/cybersecurity@sh.itjust.works
2 comments fedilink
 
 

You know when you're really jet lagged and really tired and the cogs in your head are just moving that little bit too slow? That's me right now, and the penny has just dropped that a Mailchimp phish has grabbed my credentials, logged into my account and exported the mailing

18
8
Chinese Weaver Ant hackers spied on telco network for 4 years (www.bleepingcomputer.com)
submitted 2 days ago by cyrano@lemmy.dbzer0.com to c/cybersecurity@sh.itjust.works
1 comments fedilink
19
19
Public-facing Kubernetes clusters at risk of total takeover (go.theregister.com)
submitted 3 days ago by PhilipTheBucket@ponder.cat to c/cybersecurity@sh.itjust.works
7 comments fedilink
20
39
FBI warnings are true—fake file converters do push malware (www.bleepingcomputer.com)
submitted 3 days ago by neme@lemm.ee to c/cybersecurity@sh.itjust.works
5 comments fedilink
21
22
Cyberattack takes down Ukrainian state railway’s online services (www.bleepingcomputer.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
22
15
New Phishing Campaign Targets macOS Users with Fake Security Alerts (hackread.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
3 comments fedilink
23
15
VSCode Marketplace Removes Two Extensions Deploying Early-Stage Ransomware (thehackernews.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
24
19
Cloudflare now blocks all unencrypted traffic to its API endpoints (www.bleepingcomputer.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
2 comments fedilink
25
19
Microsoft Trusted Signing service abused to code-sign malware (www.bleepingcomputer.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
view more: next ›