Hacking News

WannaCry, the biggest ransomware attack in the history, gained prominence very rapidly in the media globally after the ransomware infected more than 300,000 computers in over 150 countries within just 72 hours. Governments, Intelligence agencies and law enforcement around the world have already started their investigations and are working closely with affected companies to track […]

The method—which was utilized in a recent spam campaign that tried to put in a bank-fraud backdoor alternately referred to as Zusy, OTLARD, and Gootkit—is notable as a result of it did not rely on macros, visual basic scripts, or JavaScript to deliver its payload. Those strategies are therefore wide used that several individuals are

Digging up information on a business or individual is an extremely important part of information gathering. There are many programs and tools that can provide you with detailed reports on desired networks/businesses. The one discussed in this article is a program called Maltego. By digging up data from all visibly available sectors of the internet,

SambaCry is using a vulnerability in Samba installations to compromise Linux machines and use them as victims in a large cryptocurrency (Bitcoin or Monero or any other currency) mining process, also enables a remote attacker to hack into affected Linux systems. Samba said in a security advisory: “All versions of Samba from 3.5.0 onwards are

Compromising the credentials of users in an Active Directory environment can assist in providing new possibilities for pivoting around the network. It allows for additional access to various network resources like shares, email and other systems. In this week’s episode of Tradecraft Security Weekly Beau Bullock (@dafthack) discusses how to perform password spraying attacks using

A unique and perhaps a very practical way of injecting malware into an entire network has been discovered in which the hacking group uses Intel’s Active Management Technology (AMT) to bypass Windows’ built-in firewall and as such go undetected. Read more

Password cracking tools are useful for an assortment of different things. Normally, a person’s first thought when hearing “password cracking tool” is malicious intent. What they don’t know is that password cracking tools are also used for recovering passwords, reviewing password security, bench-marking, and/or identifying data in a hash. Read more

VMware has released this week three security updates for a number of its products, including VMware Horizon, vSphere Products. Vmware has published an advisory to notify users that VDP versions (5.5.x, 5.8.x, 6.0.x and 6.1.x) are affected by two critical Java deserialization and credentials management flaws. Read more

That was just about the core of Pirate Bay’s co-founder, Peter Sunde‘s speak at tech pageant Brain Bar Budapest. Forget about the long run, the matter is now. In Sunde’s opinion, folks focus an excessive amount of on what would possibly happen, rather than what is happening. He usually gets questions on however a digitally

Out of all security scanners, w3af easily offers the best user-friendly interface with maximum amount of powerful execution. w3af’s official website explains their tool as: “[w3af] is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to help you secure your web applications by finding and exploiting all web