Articles
468 articles, newest first.
A common method for malicious actors is to direct you to a phishing site in order to harvest your username and passwords and also to make you download malicious software (malware). Always safely check if a website is dangerous before you click.
A high impact privacy bug was found in Facebook's Android application by a young bug bounty hunter. The 19 year old hacker received a $4,500 bug bounty
DNS zone transfers use the AXFR protocol to replicate DNS records across DNS servers. If you do not protect your name servers, attackers can get information about all your hosts with AXFR.
Many news and articles keep on referring to words like vulnerability and exploits. But do you really know the difference?
Is your device behaving weirdly? Outgoing calls you did not make, your device is getting hot without reason? Maybe its time to check if your phone has been hacked.
The long awaited Marvel movie "Spider-Man: No Way Home" is out. People are trying to download an illegal copy are up for an unpleasant surprise.
Social media platforms can betray a considerable amount of information on a person or organization which can be useful during a pentest information gathering.
Ubisoft Entertainment a French video game company recently announced that they have identified an intrusion in their IT Infrastructure targeting Just Dance.
How can you detect the Log4j zero day vulnerability (known as Log4shell)? Here's a list of FREE Log4j vulnerability scanner tools.
The National Crime Agency of United Kingdom (NCA) shared a collection of more than 585 million compromised passwords that were found during an investigation with the infamous Have I Been Pwned website.
Russian hacking group "Clop" leaked confidential information held by the UK police onto the dark web. The data were stolen from Dacoll, an IT company which handles the Police National Computer.
Phishing campaigns that use COVID-19 as a hook are still on the rise. Hackers are increasingly using vaccine-related emails in their targeted spear-phishing attacks.
The data may be old, but it's still valuable to criminals and hackers, and the leak itself could have been much worse. It represents a massive oversight by a huge, multinational, well-known company.
We have gotten used to seeing news every day of sensitive data being exposed to unauthorized parties, but do you know why do data breaches happen?
You can build a pentest lab on a raspberry pi with DVWA to test your skills and also learn new tricks on how to attack and/or secure web applications.
Many users register themselves on websites using the same username. If you are performing an investigation on a person, and especially if you know a username or handle they are usually using online, you may hunt for usernames on social media platforms with Sherlock.
Facebook said it canceled 1,500 fake social media accounts used by seven surveillance-for-hire firms to conduct online attacks against government critics and members of civil society.
WebMap is a web dashboard for your nmap scans. This tool, which is free, can provide you with more management capabilities of your scan results.