Cybersecurity

6859 readers
92 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
kid@sh.itjust.works
Lanky_Pomegranate530@midwest.social
listing: all - local
1
49
Privacy disaster as LGBTQ+ and BDSM dating apps leak private photos. (cybernews.com)
submitted 18 hours ago by cyrano@lemmy.dbzer0.com to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

cross-posted from: https://programming.dev/post/27765876

BDSM, LGBTQ+, and sugar dating apps have been found exposing users' private images, with some of them even leaking photos shared in private messages.

2
6
New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials (thehackernews.com)
submitted 19 hours ago by AmbiguousProps@lemmy.today to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

Once installed and launched, the app requests permission to Android's accessibility services, after which contact is established with a remote server to receive further instructions, the list of financial applications to be targeted, and the HTML overlays to be used to steal credentials. Crocodilus is also capable of targeting cryptocurrency wallets with an overlay that, instead of serving a fake login page to capture login information, shows an alert message urging victims to backup their seed phrases within 12, or else risk losing access to their wallets.

Archive link: https://archive.is/idZEc

3
203
Twitter (X) Hit by Data Leak of 2.8 Billion Users; Allegedly an Insider Job (hackread.com)
submitted 1 day ago by cyrano@lemmy.dbzer0.com to c/cybersecurity@sh.itjust.works
5 comments fedilink
 
 

cross-posted from: https://lemmy.dbzer0.com/post/41036290

4
11
MAC Address Randomization in Mobile Devices and When it Fails (arxiv.org)
submitted 1 day ago* (last edited 1 day ago) by higgsboson@dubvee.org to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

I was annoyed by MAC Randomization on my own network and wondered whether there are any effective attacks to re-id devices.

Sure enough.

See also (van Hoef is also the brains behind several of the WPA attacks.)

https://papers.mathyvanhoef.com/wisec2016.pdf [PDF]

5
12
Blasting Past WebP - An analysis of the NSO BLASTPASS iMessage exploit (googleprojectzero.blogspot.com)
submitted 3 days ago by cantankerous_cashew@lemmy.world to c/cybersecurity@sh.itjust.works
1 comments fedilink
6
14
Malicious npm Package Modifies Local 'ethers' Library to Launch Reverse Shell Attacks (thehackernews.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
7
9
Oracle customers confirm data stolen in alleged cloud breach is valid (www.bleepingcomputer.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
8
7
'Lucid' Phishing-as-a-Service Exploits Faults in iMessage, Android RCS (www.darkreading.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
2 comments fedilink
9
7
New Windows zero-day leaks NTLM hashes, gets unofficial patch (www.bleepingcomputer.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
10
7
Browser-in-the-Browser attacks target CS2 players' Steam accounts (www.bleepingcomputer.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
11
4
CrushFTP CEO flames VulnCheck for assigning critical CVE (go.theregister.com)
submitted 3 days ago by PhilipTheBucket@ponder.cat to c/cybersecurity@sh.itjust.works
0 comments fedilink
12
4
FacePass security lapse exposes users' identification data (cybernews.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
13
3
Hackers Abuse COM Objects for Fileless Malware Lateral Movements (cybersecuritynews.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
14
8
US defense contractor Morse settles infosec whistleblower suit for $4.6M (go.theregister.com)
submitted 4 days ago* (last edited 4 days ago) by PhilipTheBucket@ponder.cat to c/cybersecurity@sh.itjust.works
0 comments fedilink
15
3
UK fines software provider £3.07 million for 2022 ransomware breach (www.bleepingcomputer.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
16
3
New Atlantis AIO platform automates credential stuffing on 140 services (www.bleepingcomputer.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
17
2
China-linked FamousSparrow APT group resurfaces with enhanced capabilities - Help Net Security (www.helpnetsecurity.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
18
2
New Ransomware Group Claims Attack on US Telecom Firm WideOpenWest (www.securityweek.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
19
39
FBI warnings are true—fake file converters do push malware (www.bleepingcomputer.com)
submitted 6 days ago by neme@lemm.ee to c/cybersecurity@sh.itjust.works
5 comments fedilink
20
17
A Sneaky Phish Just Grabbed my Mailchimp Mailing List (www.troyhunt.com)
submitted 5 days ago by BrikoX@lemmy.zip to c/cybersecurity@sh.itjust.works
2 comments fedilink
 
 

You know when you're really jet lagged and really tired and the cogs in your head are just moving that little bit too slow? That's me right now, and the penny has just dropped that a Mailchimp phish has grabbed my credentials, logged into my account and exported the mailing

21
19
Public-facing Kubernetes clusters at risk of total takeover (go.theregister.com)
submitted 6 days ago by PhilipTheBucket@ponder.cat to c/cybersecurity@sh.itjust.works
7 comments fedilink
22
22
Cyberattack takes down Ukrainian state railway’s online services (www.bleepingcomputer.com)
submitted 6 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
23
8
Chinese Weaver Ant hackers spied on telco network for 4 years (www.bleepingcomputer.com)
submitted 5 days ago by cyrano@lemmy.dbzer0.com to c/cybersecurity@sh.itjust.works
1 comments fedilink
24
1
Inside Kimsuky’s Latest Cyberattack: Analyzing Malicious Scripts and Payloads (labs.k7computing.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
25
1
RedCurl cyberspies create ransomware to encrypt Hyper-V servers (www.bleepingcomputer.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
view more: next ›