How To Find Domains Owned by a Company
During a black box, or grey box penetration testing engagement for a company, one of the main things you will need to find domains owned by the company.
Articles
Everything we have published
468 articles, newest first.
Cryptocurrency Exchange Hacked
On Sunday, AscendEX announced via Twitter that it had identified a number of unauthorized transactions from one of its hot wallets on Saturday.
HR Management Platform Hit by Ransomware
HR management platform Kronos has been hit by a ransomware attack and information from its customers may have been accessed.
Massive Internet Scans and Log4j Exploit Attempts
Many organizations have noticed a surge in internet scans to discover vulnerable systems and exploit attempts on them.
Top Malware for November 2021
Checkpoint Research through its global threat index revelas the top malware for November 2021.
What is a Botnet
Many cyber attacks are carried out by malicious actors with the use of "Botnets". But what is a botnet? Botnet is short for "robot-network".
More than 2,1 Million People Affected After DNA Testing Center Data Breach
An Ohio based DNA testing company has reported a data breach that lead to the leak of personal information including Social Security Numbers and banking information of 2,102,436 people.
Panasonic Network Has Been Hacked
The Japanese company Panasonic said that its network was illegally accessed by a third party on November 11 and that some data on a file server had been accessed during the intrusion.
Enhanced Automated Vulnerability Management for Cloud Workloads Announced by AWS
Newly added capabilities for the Amazon Inspector service will meet the "critical need to detect and remediate at speed" in order to secure cloud workloads. %
Find Web Server Vulnerabilities With Nikto
Nikto is an open source scanner capable of scanning for over 6700 items to detect any misconfigurations on web servers like Apache, Nginx, Litespeed etc. as well as discovery of exposed files, user enumeration and outdated components.
How to Secure Your Zoom Meetings
Zoom has around 300 million daily meeting participants! It also has security issues like "Zoom bombings" where uninvited guests may show up at meetings and another more "creepy" vulnerability which left millions of users exposed, which offered access to user's cameras and microphones.
Google Warns for Hacked Cloud Accounts Used for Crypto Mining
recently launched Google Cybersecurity Action Team (GCAT) provided specific insights, such as when malicious hackers exploit improperly-secured cloud instances to download cryptocurrency mining software to the system—sometimes within 22 seconds of being compromised.
Marine Services Provider Swire Pacific Offshore suffers data breach following cyber-attack
SPO has taken immediate actions to reinforce existing security measures and to mitigate the potential impact of the incident. SPO has reported the incident to the relevant authorities and will work closely with them in relation to the incident. SPO is contacting potentially affected parties to in…
Information Security Black Friday Deals You Should Grab Now
Many information security black friday deals you should grab right now, if you are a professional, a student, a researcher, or just a curious person who wants
Apple sues company known for hacking iPhones
Apple sues company known for hacking iPhones on behalf of governments. An Israeli firm called NSO Group, provided software to government agencies and law enforcement that enables them to hack iPhones and read the data on them, including messages and other communications.
Discover Subdomains During A Penetration Testing Engagement
During an external penetration test, and especially if it is a black-box engagement, one of the most important steps is to find subdomains used by the target company.
More than Half of Organizations Are Not Effectively Defending Against Cyberattacks
According to a recent Accenture study, more than half of organizations are not effectively defending against cyberattacks.
Researcher Publishes Exploit Affecting All Windows Versions
A security researcher has published a public exploit on Github that allows a low privileged user on all client and server windows operating systems, to gain administrative rights.