#hacknews

[mohamedjasir]

TryHackMe - Ice Writeup

Ice is a beginner-level windows machine on tryhackme. The machine runs an Icecast Media Server on one of the ports.

Read more : https://redteamacademy.com/blogs/ice-writeup/

[mohamedjasir]

Are you worried about your career? Interested in Cyber security and ethical hacking? Now you can learn ethical hacking in Ernakulam with RedTeam Hacker Academy.

[hacknews-org]

1 Milyon Ziyaret Hacknews.org Başarısı

1 Milyon Ziyaret Hacknews.org Başarısı

2016 Yılında online olduktan buyana aralıksız şekilde hersene dahada başarı elde eden Hacknews.org artık 1 milyon ziyaretçi sınırını geçmiş bulunuyor, bu başarıya ulaşmamız elbette kolay olmadı.

2016 yılında faal olarak bir tane bile hack forumu kalmamışken ve tüm hackerler artık hacki tamamen bırakmış vaziyetteyken biz bu hack haber sitesini açtık ! ilk açtığımız zamanlarda bize bunun yanlış…

View On WordPress

[iwanrj]

Paroki Katolik St. Ambrose Telah Kehilangan $ 1,75 juta dalam penipuan BEC Oleh Peretas  Diketahui sebelumnya, Peretas telah melakukan serangan Business Email Compromise (BEC) terhadap Paroki Katolik St. Ambrose dan berhasil menipu $ 1,75 juta. Itu merupakan nilai yang sangat fantastik. Gereja awalnya mengetahui kejadian itu pada 17 April 2019, setelah kontraktornya, Marous Brothers Construction, menanyakan tentang keterlambatan pembayaran ke-2 baru-baru ini sebesar $ 1,75 juta terkait dengan proyek Vision 2020 gereja. #hack #hacker #hackers #hacknews #vulnerability #news https://www.iwanrj.com/2019/05/paroki-katolik-st-ambrose-telah.html https://www.instagram.com/p/Bw8zI0xlBOg/?igshid=1xl3bs0cmc10l

[iwanrj]

Hacktivists Around The World Prepare for Massive Cyber Attacks Against The Government of Sudan. (Peretas di Seluruh Dunia Bersiap untuk Serangan Cyber Besar-besaran Terhadap Pemerintah Sudan) https://twitter.com/LorianSynaro/status/1114181873016745985 https://mobile.twitter.com/M1r0x__/status/1114262306421133312 https://twitter.com/GuyFromAfrica/status/1114206290908274689 #hacker #sudan #sudantarget #hacknews #anonymhack #iwanrj #news #vulnerability #topic More information, visit our site: https://www.iwanrj.com/search/?q=hacker https://www.instagram.com/p/BwB6HY3FcuA/?utm_source=ig_tumblr_share&igshid=18l1lj83buen1

[husnainhameez]

Reddit Got Hacked - Offical Announcement by Reddit

Everyday a new breach occurs in Social media channels. Now this time the target of hackers is Reddit. {As we all know reddit has a strict policy for account ban and bias moderators} Reddit officials report on their official Reddit Announcement: Here is what they say:

We had a security incident. Here's what you need to know.

TL;DR: A hacker broke into a few of Reddit’s systems and managed to access some user data, including some current email addresses and a 2007 database backup containing old salted and hashed passwords. Since then we’ve been conducting a painstaking investigation to figure out just what was accessed, and to improve our systems and processes to prevent this from happening again. What happened? On June 19, we learned that between June 14 and June 18, an attacker compromised a few of our employees’ accounts with our cloud and source code hosting providers. Already having our primary access points for code and infrastructure behind strong authentication requiring two factor authentication (2FA), we learned that SMS-based authentication is not nearly as secure as we would hope, and the main attack was via SMS intercept. We point this out to encourage everyone here to move to token-based 2FA. Although this was a serious attack, the attacker did not gain write access to Reddit systems; they gained read-only access to some systems that contained backup data, source code and other logs. They were not able to alter Reddit information, and we have taken steps since the event to further lock down and rotate all production secrets and API keys, and to enhance our logging and monitoring systems. Now that we've concluded our investigation sufficiently to understand the impact, we want to share what we know, how it may impact you, and what we've done to protect us and you from this kind of attack in the future. What information was involved? Since June 19, we’ve been working with cloud and source code hosting providers to get the best possible understanding of what data the attacker accessed. We want you to know about two key areas of user data that was accessed: All Reddit data from 2007 and before including account credentials and email addresses What was accessed: A complete copy of an old database backup containing very early Reddit user data -- from the site’s launch in 2005 through May 2007. In Reddit’s first years it had many fewer features, so the most significant data contained in this backup are account credentials (username + salted hashed passwords), email addresses, and all content (mostly public, but also private messages) from way back then. How to tell if your information was included: We are sending a message to affected users and resetting passwords on accounts where the credentials might still be valid. If you signed up for Reddit after 2007, you’re clear here. Check your PMs and/or email inbox: we will be notifying you soon if you’ve been affected. Email digests sent by Reddit in June 2018 What was accessed: Logs containing the email digests we sent between June 3 and June 17, 2018. The logs contain the digest emails themselves -- they look like this. The digests connect a username to the associated email address and contain suggested posts from select popular and safe-for-work subreddits you subscribe to. How to tell if your information was included: If you don’t have an email address associated with your account or your “email digests” user preference was unchecked during that period, you’re not affected. Otherwise, search your email inbox for emails from [email protected] between June 3-17, 2018. As the attacker had read access to our storage systems, other data was accessed such as Reddit source code, internal logs, configuration files and other employee workspace files, but these two areas are the most significant categories of user data. What is Reddit doing about it? Some highlights. We: Reported the issue to law enforcement and are cooperating with their investigation. Are messaging user accounts if there’s a chance the credentials taken reflect the account’s current password. Took measures to guarantee that additional points of privileged access to Reddit’s systems are more secure (e.g., enhanced logging, more encryption and requiring token-based 2FA to gain entry since we suspect weaknesses inherent to SMS-based 2FA to be the root cause of this incident.) What can you do? First, check whether your data was included in either of the categories called out above by following the instructions there. If your account credentials were affected and there’s a chance the credentials relate to the password you’re currently using on Reddit, we’ll make you reset your Reddit account password. Whether or not Reddit prompts you to change your password, think about whether you still use the password you used on Reddit 11 years ago on any other sites today. If your email address was affected, think about whether there’s anything on your Reddit account that you wouldn’t want associated back to that address. You can find instructions on how to remove information from your account on this help page. And, as in all things, a strong unique password and enabling 2FA (which we only provide via an authenticator app, not SMS) is recommended for all users, and be alert for potential phishing or scams. Read the full article

[b2hpc-blog]

Hacker arrested for ATM Skimming escaped from prison

Hacker arrested for ATM Skimming escaped from prison

Hacker arrested for ATM Skimming escaped from prison

A Romanian card skimmer arrested for being part of an international cybercrime group that used malware to plunder US$217,000 from ATMs has escaped from a Bucharest prison on Sunday morning (6th March). Renato Marius Tulli, 34, was being held at Police Precinct 19 in Bucharest, the capital of Romania, after being arrested together with 7…

View On WordPress