惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

M
MIT News - Artificial intelligence
雷峰网
雷峰网
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Last Week in AI
Last Week in AI
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
阮一峰的网络日志
阮一峰的网络日志
月光博客
月光博客
博客园 - Franky
腾讯CDC
T
Tailwind CSS Blog
Recent Announcements
Recent Announcements
V
V2EX
N
Netflix TechBlog - Medium
量子位
Jina AI
Jina AI
Y
Y Combinator Blog
The GitHub Blog
The GitHub Blog
G
Google Developers Blog
爱范儿
爱范儿
博客园 - 叶小钗
D
Docker
MongoDB | Blog
MongoDB | Blog
D
DataBreaches.Net
T
The Blog of Author Tim Ferriss

Black Hills Information Security, Inc.

Bad Habits: An ANTISOC Operation Same Problem, Different Angles: When Red Team and Blue Team Actually Talk to Each Other How to Identify and Exploit New Vulnerabilities Swapper – A Pure Regex Match/Replace Burp Extension A Practical Guide to BloodHound Data Collection Network Engineering Basics Signed, Trusted, and Abused: Proxy Execution via WebView2 Getting Started In Pentesting – Advice From The BHIS Pentest Lead Cloud Security: Tips and Resources for Securing the Cloud Lessons From A Chatbot Incident How to Lead Effective Tabletops Understanding GRC: How to Navigate Risks and Compliance Standards The “P” in PAM is for Persistence: Linux Persistence Technique Malware Analysis: How to Analyze and Understand Malware OSINT: How to Find, Use, and Control Open-Source Intelligence What to Do with Your First Home Lab When the SOC Goes to Deadwood: A Night to Remember Social Engineering and Microsoft SSPR: The Road to Pwnage is Paved with Good Intentions Common Cyber Threats Finding the Right Penetration Testing Company Deceptive-Auditing: An Active Directory Honeypots Tool The Curious Case of the Comburglar How to Set Smart Goals (That Actually Work For You) Inside the BHIS SOC: A Conversation with Hayden Covington Abusing Delegation with Impacket (Part 3): Resource-Based Constrained Delegation Why You Got Hacked – 2025 Super Edition Abusing Delegation with Impacket (Part 2): Constrained Delegation Abusing Delegation with Impacket (Part 1): Unconstrained Delegation GoSpoof – Turning Attacks into Intel Model Context Protocol (MCP)
Talkin’ About Infosec News – 2/17/2023
BHIS · 2023-02-18 · via Black Hills Information Security, Inc.

, , ,

00:00 – PreShow Banter™ — Scalping Valentine’s Day Reservations
04:13 – BHIS – Talkin’ Bout [infosec] News 2023-06-23
05:52 – Story # 1: 5 Chinese companies and a research institute blacklisted by U.S. over spy balloon program
https://www.cbsnews.com/news/us-blacklists-6-chinese-entities-over-spy-balloon-program/
12:00 – Story # 2: We had a security incident. Here’s what we know.
https://www.reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/
15:19 – Ean Reports Live!
21:44 – Story # 3: NameCheap’s email hacked to send Metamask, DHL phishing emails
https://www.bleepingcomputer.com/news/security/namecheaps-email-hacked-to-send-metamask-dhl-phishing-emails/
26:49 – Story # 4: Top mobile finance app Money Lover has some worrying security flaws
https://www.techradar.com/news/top-mobile-finance-app-money-lover-has-some-worrying-security-flaws
31:24 – Story # 5: Ukraine war: Elon Musk’s SpaceX firm bars Kyiv from using Starlink tech for drone control
https://www.bbc.com/news/world-europe-64579267
36:58 – Story # 6: NATO websites hacked, including that of the Headquarters of Special Operations Forces
https://euroweeklynews.com/2023/02/13/nato-websites-hacked-including-that-of-the-headquarters-of-special-operations-forces/
38:58 – Story # 7: Khinshtein said that hackers acting in the interests of the Russian Federation should be released from liability
https://tass-ru.translate.goog/obschestvo/17021313?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp
40:52 – Story # 8 NIST Standardizes Ascon Cryptographic Algorithm for IoT and Other Lightweight Devices
https://thehackernews.com/2023/02/nist-standardizes-ascon-cryptographic.html
43:29 – Story # 9: Americans don’t understand what companies can do with their personal data—and that’s a problem
https://techxplore.com/news/2023-02-americans-dont-companies-personal-dataand.html
45:15 – Story # 9b: AMERICANS CAN’T CONSENT TO COMPANIES’ USE OF THEIR DATA
https://www.asc.upenn.edu/sites/default/files/2023-02/Americans_Can%27t_Consent.pdf
54:33 – Story # 10: Pentagon Staffers Found Installing Dating Apps, Games on Government Phones
https://www.pcmag.com/news/pentagon-staffers-found-installing-dating-apps-games-on-government-phones
57:34 – Story # 10b: Management Advisory: The DoD’s Use of Mobile Applications (Report No. DODIG-2023-041)
https://www.dodig.mil/reports.html/Article/3294159/management-advisory-the-dods-use-of-mobile-applications-report-no-dodig-2023-041/
58:14 – Story # 11: When Facebook came for your battery, feudal security failed
https://doctorow.medium.com/when-facebook-came-for-your-battery-feudal-security-failed-c8c1e3beb279



We are self-publishing free Infosec Zines called PROMPT#.

PROMPT# will contain: 

  • Infosec articles 
  • Challenging puzzles 
  • Comic book based on real-life hacking adventures 
  • Coloring contests 
  • Bonus Backdoors & Breaches Consultant Cards (print version only) 
  • Other stuffs 

You can check out current and upcoming issues here: https://www.blackhillsinfosec.com/prompt-zine/