3890 matches found
Hacker Selling Shanghai Police Database with Billions of Chinese Citizen Data
By Waqas As seen by Hackread.com, the database is currently being sold for 10 Bitcoin around $200,000 at the time… This is a post from HackRead.com Read the original post: Hacker Selling Shanghai Police Database with Billions of Chinese Citizen Data...
Gun Database Breach Leaks Details on Thousands of Owners
Plus: Indian hacker-for-hire groups, Chinese student espionage efforts, and more...
Malicious code in lucas_scocco_hacker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce1c3dcaf2439419dca35d651b2706d22138af8c386dd8a147997f36784748c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4422 Malicious code in lucas_scocco_hacker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce1c3dcaf2439419dca35d651b2706d22138af8c386dd8a147997f36784748c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
9 Years Jail for iCloud Phishing Scam Hacker Who Stole Nude Photos
By Deeba Ahmed The hacker was arrested in 2021 for breaching Apple iCloud accounts and stealing more than 620,000 private images… This is a post from HackRead.com Read the original post: 9 Years Jail for iCloud Phishing Scam Hacker Who Stole Nude Photos...
Feds Forced Travel Firms to Share Surveillance Data on Hacker
The U.S. government ordered two travel companies to provide information about the movement of a Russian citizen suspected of hacking. The surveillance data was used as part of an investigation by the U.S. Secret Service, according to court documents recently unsealed. The revelation of the extent...
Xepor - Web Routing Framework For Reverse Engineers And Security Researchers, Brings The Best Of Mitmproxy And Flask
Xepor pronounced /ˈzɛfə/ , zephyr, a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP request and/or HTTP response in a human-friendly coding style. This project is meant to be used with mitmproxy. User wri...
Researcher Spotlight: Hector Peralta’s Evolution from Popcorn Server to the MSRC Leaderboards
“The bug bounty literally changed my life. Before this, I had nothing.” Coolest thing he purchased : His first vehicle! Best gift to give: Buying his nephew gaming accessories. Favorite Hacking Companion : His two cats. They’re always by his side when he is working late. Origin of his Hacker name...
Researcher Spotlight: Hector Peralta’s Evolution from Popcorn Server to the MSRC Leaderboards
“The bug bounty literally changed my life. Before this, I had nothing.” Coolest thing he purchased : His first vehicle! Best gift to give: Buying his nephew gaming accessories. Favorite Hacking Companion : His two cats. They’re always by his side when he is working late. Origin of his Hacker name...
Ukrainian Hacker Jailed for 4-Years in U.S. for Selling Access to Hacked Servers
A 28-year-old Ukrainian national has been sentenced to four years in prison for siphoning thousands of server login credentials and selling them on the dark web for monetary gain as part of a credential theft scheme. Glib Oleksandr Ivanov-Tolpintsev, who pleaded guilty to his offenses earlier thi...
Russia continues digital onslaught against Ukrainian systems
According to Microsoft, at least six Kremlin-backed hacking groups have been attacking Ukraine in the digital space in an onslaught that began before the invasion in late February. The company counted more than 237 cyberattack operations against Ukrainian systems and critical infrastructure. Thes...
“Ethical Hacker” Stole Half a Million in Crypto Form Elderly Person
By Waqas The victim had hired the "ethical hacker" Aaron Daniel Motta to install a security system in their residence.… This is a post from HackRead.com Read the original post: "Ethical Hacker" Stole Half a Million in Crypto Form Elderly Person...
Critical LFI Vulnerability Reported in Hashnode Blogging Platform
Researchers have disclosed a previously undocumented local file inclusion LFI vulnerability in Hashnode, a developer-oriented blogging platform, that could be abused to access sensitive data such as SSH keys, server's IP address, and other network information. "The LFI originates in a Bulk Markdo...
The vulnerability of Adobe Premiere Elements’ video editing software, related to the manipulation of the null pointer, allows a hacker to trigger a service failure.
The vulnerability of Adobe Premiere Elements software-related video editing programs is related to the handling of the null pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures...
bomremote.hld.com Cross Site Scripting vulnerability OBB-2485824
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Ukrainian FIN7 Hacker Gets 5-Year Sentence in the United States
A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual's criminal work as a "high-level hacker" in the financially motivated group FIN7. Denys Iarmak, who worked as a penetration tester for the cartel from November 2016 through November 2018, ha...
Ethical Hacking and Penetration Testing. Where to Begin.
Looking at the employment landscape, it’s clear that prospects for landing cybersecurity positions are excellent and on the rise, but what about the commercial viability of that “grey side-gig”, ethical hacking and penetration testing? While the notion of “being bad to help the good people” is...
Microsoft CRSP shares the ways human behavior affects compromise recovery
The Microsoft Compromise Recover Security Practice CRSP is a worldwide team of cybersecurity experts operating in most countries, across all organizations public and private, with deep expertise to secure an environment post-security breach and to help you prevent a breach in the first place. As ...
Multiple Hacker Groups Capitalizing on Ukraine Conflict for Distributing Malware
At least three different advanced persistent threat APT groups from across the world have launched spear-phishing campaigns in mid-March 2022 using the ongoing Russo-Ukrainian war as a lure to distribute malware and steal sensitive information. The campaigns, undertaken by El Machete, Lyceum, and...