article thumbnail

Threat actors target the infoSec community with fake PoC exploits

Security Affairs

Researchers uncovered a malware campaign targeting the infoSec community with fake Proof Of Concept to deliver a Cobalt Strike beacon. Researchers from threat intelligence firm Cyble uncovered a malware campaign targeting the infoSec community. SecurityAffairs – hacking, fake PoC). To nominate, please visit:? Pierluigi Paganini.

InfoSec 145
article thumbnail

Hacking Grindr Accounts with Copy and Paste

Troy Hunt

Here's how they responded when approached by infosec journo Zack Whittaker : We are grateful for the researcher who identified a vulnerability. In fairness to Grindr, despite their triaging of security reports needing work, their response after I managed to get in touch with the right people was exemplary. The reported issue has been fixed.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CIA Dirty Laundry Aired

Schneier on Security

Joshua Schulte, the CIA employee standing trial for leaking the Wikileaks Vault 7 CIA hacking tools, maintains his innocence. The password for the Confluence virtual machine that held all the hacking tools that were stolen and leaked? And the answer is: absolutely terrible. And the answer is: absolutely terrible. That'll be 123ABCdef.

InfoSec 279
article thumbnail

US Helped Ukraine With Infosec—Story is ‘Dangerous Arrogance’

Security Boulevard

cleverly anticipated the Russian invasion of Ukraine and skilfully helped the country shore up its defences against Russian hacking. The post US Helped Ukraine With Infosec—Story is ‘Dangerous Arrogance’ appeared first on Security Boulevard. Mainstream media has been full of stories about how the U.S.

InfoSec 116
article thumbnail

Is India's Aadhaar System Really "Hack-Proof"? Assessing a Publicly Observable Security Posture

Troy Hunt

Which brings us back to Aadhaar and some rather unpleasant headlines of late, particularly the likes of The World's Largest Biometric ID System Keeps Getting Hacked. They claim that they're hack-proof. But claiming the service is "hack-proof", that's something I definitely have an issue with. Can you prove otherwise?

Hacking 279
article thumbnail

Inside the DemandScience by Pure Incubation Data Breach

Troy Hunt

But in all likelihood, there will be more than a handful of domain subscribers who take issue with that volume of people data sitting there in one corpus easily downloadable via a clear web hacking forum.

article thumbnail

Cryptocurrency exchange BuyUcoin hacked, data of 325K+ users leaked

Security Affairs

Story – [link] #InfoSec pic.twitter.com/1xFOtLcd8F — Rajshekhar Rajaharia (@rajaharia) January 21, 2021. InfoSec pic.twitter.com/dJGN5VesEH — Rajshekhar Rajaharia (@rajaharia) January 21, 2021. SecurityAffairs – hacking, data breach). Again didn't informed to affected users by company. Pierluigi Paganini.