Discover Subdomains During A Penetration Testing Engagement
During an external penetration test, and especially if it is a black-box engagement, one of the most important steps is to find subdomains used by the target company.
Dimitris Gkoutzamanis
Published items (289)
More than Half of Organizations Are Not Effectively Defending Against Cyberattacks
According to a recent Accenture study, more than half of organizations are not effectively defending against cyberattacks.
Read moreResearcher Publishes Exploit Affecting All Windows Versions
A security researcher has published a public exploit on Github that allows a low privileged user on all client and server windows operating systems, to gain administrative rights.
Read moreGoDaddy Data Breach Affects 1.2 Million Customer Accounts
The company detected unauthorized access to its systems where customer's Wordpress servers are hosted and managed.
Read moreFind Out If Any of Your Accounts Has Been Hacked
A few ways to discover if any of your accounts has been hacked. Either with the help of Google Chrome or with the use of online tools.
Read more88% of Boards of Directors View Cybersecurity as a Business Risk
The influx of ransomware and supply chain attacks seen throughout 2021, many of which targeted operation- and mission-critical environments, should be a wake-up call that security is a business issue, and not just another problem for IT to solve
Read moreWatch Out Shoppers! Number of Malicious Shopping Websites Jumps 178% ahead of Black Friday Sales
Check Point Research spotted over 5300 malicious websites per week, marking it the highest since the beginning of 2021. The number of malicious websites made to trick you and obtaining your credit card and your login information, many times for well known websites as amazon.
Read moreThe King of Most Common Passwords Still Sits on its Throne
NordPass has published a study with the top 200 most common passwords for 2021. The study covered 50 countries.
Read moreFBI Email System Hacked and Sent out Fake Cyber Attack Alerts
FBI has confirmed that an unnamed actor was able to gain access to the FBI's Law Enforcement Enterprise Portal (LEEP) to send the emails to thousands of recipients about a fake cyberattack.
Read moreThe Rise Of Killware
The objective of the attacker is to cause harm to humans using killware in the Operational Technology environment. Many similar attacks have been identified since the year 2000, even though they were not called killware back then.
Read moreNew Azure AD Bug Allows Attackers Brute-Force Passwords
An unpatched security weakness in Azure Active Directory might be leveraged by attackers to conduct undetected brute-force attacks, according to security researchers.
Read moreCoinbase Users Hacked!
vulnerability in the SMS multi-factor authentication mechanism of Coinbase was used by hackers to steal funds from 6000 users
Read moreThe Biggest DDoS Attack in History
Russian tech company Yandex said that it suffered from the largest DDoS attack ever recorded in the history of the internet.
Read moreEnumerate and Capture Website Files Metadata
Many organizations are uploading files on their websites like pdf, word and excel without being aware that they are exposing sensitive information. You can enumerate and capture the files and its metadata.
Read moreSpreading Malware Using Old Techniques. It Still Works!
Operators of the malware known as SolarMarker, are using an old technique called SEO poisoning to trick users to follow links on PDF documents stuffed with many SEO keywords and redirect them to malware.
Read moreCool Nmap Tricks and Techniques
A list of not so commonly used but powerful Nmap commands to help you bring your enumeration skills to the next level.
Read moreTop Threats for WordPress Sites in 2020
Security firm Wordfence released a report identifying the top security vulnerabilities and threats and common attacks against wordpress websites.
Read moreWhat is a “Zero-Day” Exploit
Understand what a zero-day exploit is and how your organization can defend against such attacks which target unknown vulnerabilities of your systems and applications.
Read more