hacker0x0

Not necessarily in that order?

MITRE Caldera security tool gets perfect 10 in insecurity Is a trivial remote-code execution hole in every version part of the training, or?

MITRE Caldera security suite scores perfect 10 for insecurity

Chris Hadnagy vs. DEF CON Lawsuit update
2025/02/24

It’s been a while since our last update - a lot has been going on behind the scenes - and with the discovery phase complete we have filed a motion for summary judgement asking the court to dismiss his lawsuit.

There is nothing illegal about naming inexperienced people currently accessing sensitive government data at the behest of Elon Musk.

They are:
Akash Bobba
Edward Coristine
Luke Farritor
Gautier Cole Killian
Gavin Kliger
Ethan Shaotran

This is a major security breach.

SPREAD

Nice! I've only been able to do that once ;)

Nicely done. No test case needed! Happy new year 🎉

Enjoy the snow and hope you have a great new year!

Firefox and Windows zero-days exploited by Russian RomCom hackers ​Russian-based RomCom cybercrime group chained two zero-day vulnerabilities in recent attacks targeting Firefox and Tor Browser users across Europe and North America.

Russian-based #RomCom cybercrime group chained two zero-day vulnerabilities in recent attacks targeting Firefox and Tor Browser users across Europe and North America. #cyberattacks #Russia #zeroday
www.bleepingcomputer.com/news/securit...

CISSP Study Group Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!

Please repost! We’ve got a great community at CISSPStudyGroup.com

Great graphic. Thanks for sharing!

Thanks for the welcome! Feeling pretty confident about taking the cert but my weakness is in those authorization mechanisms: RBAC, MAC, DAC, ABAC. Just seem to get those questions wrong.

Phishing emails increasingly use SVG attachments to evade detection Threat actors increasingly use Scalable Vector Graphics (SVG) attachments to display phishing forms or deploy malware while evading detection.

Threat actors increasingly use Scalable Vector Graphics (SVG) attachments to display phishing forms or deploy malware while evading detection.
www.bleepingcomputer.com/news/securit...

Ha! So true.

Apple’s iPhone Spyware Problem Is Getting Worse. Here’s What You Should Know Apple has detected iPhone spyware attacks against people in more than 150 countries. Knowing if your device is infected can be tricky—but there are a few steps you can take to protect yourself.

www.wired.com/story/apple-...
In the past, spyware was delivered via phishing,requiring the victim to click on a link or download an image.Today, it can be delivered in so-called”zeroclick attacks” via an iMessage or WhatsAppimage that will automatically plant spyware on your device.

Nice!

The Human Element: The Heart of Information Security In the realm of information security, we often focus on the latest technologies, sophisticated algorithms, and cutting-edge defences. Yet…

Never forget that humans are the biggest strength and the biggest weakness of your info sec strategy medium.com/@davenport.a... #infosec #informationsecurity #security