Information Security

by Josh Campbell from Cyborg Security Threat hunting is often referred to as a semi-scientific practice. This is because hunters will deploy hunts based on a hypothesis, collect evidence, and document their findings — all of which should stir (hopefully) fond memories of grade 9 science class. And just like…

InfoSecSherpa: Your Guide Up a Mountain of Information! — CISA and DoD Release 5G Security Evaluation Process Investigation Study (Cybersecurity and Infrastructure Security Agency, May 26th) Broadcom To Acquire Vmware In $61 Bln Cash And Stock Deal — Quick Facts (NASDAQ, May 26th) Cowbell launches cyber risk heatmap (Insurance Business, May 26th) See also Cowbell Security. New Jersey Town’s…

An introduction to the main components of the Metasploit Framework. Introduction to Metasploit Metaspoloit is a powerful tool that can support all phases of a penetration testing engagement, from information gathering to post-exploitation. The Metasploit Framework is a set of tools that allow information gathering, scanning, exploitation, exploit development, post-exploitation, and more. While…

Date: May 30th, Monday (Memorial Day) Time (IN PERSON): 6:00 PM EST — 10:00 PM EST Time (ONLINE): 7:30 PM EST — 9:00 PM EST Location: Helen’s Pizza(183 Newark Ave, Jersey City, NJ 07302) Meet-Up: https://www.meetup.com/DEFCON201/events/286195718/ Facebook: TBA Write.As [TOR]: TBA Hackaday: TBA ::DEFCON 201 — CODE OF CONDUCT:: Welcome…

what if I told you that: A black Hat hacker can steal your money from your bank account & credit card or PayPal balance with one click from you. It looks interesting, doesn’t it? in this write-up, I will show you how I Found Low vulnerability on PayPal, But impactful…

CyberHoot Vulnerability Alert Management Process Rating (VAMP): Critical/Red May 25th, 2022: CyberHoot has learned of multiple Google Chrome Web Browser vulnerabilities that could allow for arbitrary code execution. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code in the context of the browser. Depending on the…

A proof of concept (PoC) code for CVE-2022–22972, a critical vulnerability in some products such as Workspace ONE Access, Identity Manager, and vRealize Automation, has been publicly disclosed. This PoC was published by researchers at security firm Horizon3, in conjunction with technical analysis, after VMware released corresponding updates: “This script…

Begin learning Linux using a fun, online “wargame” — Introduction In the previous post (https://bit.ly/3qFZACp) we have continued our Linux journey with levels 10 through 15 of OverTheWire’s Bandit machine. If you haven’t read the third first posts yet, they are warmly recommended — you’ll have an even better intro. In essence, Bandit is the most basic machine the…