惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Hugging Face - Blog
Hugging Face - Blog
Vercel News
Vercel News
C
Check Point Blog
G
Google Developers Blog
博客园 - 司徒正美
量子位
Engineering at Meta
Engineering at Meta
S
SegmentFault 最新的问题
Google DeepMind News
Google DeepMind News
F
Fortinet All Blogs
A
About on SuperTechFans
美团技术团队
D
DataBreaches.Net
Stack Overflow Blog
Stack Overflow Blog
Jina AI
Jina AI
Y
Y Combinator Blog
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Apple Machine Learning Research
Apple Machine Learning Research
J
Java Code Geeks
MongoDB | Blog
MongoDB | Blog
人人都是产品经理
人人都是产品经理
H
Hackread – Cybersecurity News, Data Breaches, AI and More
The Cloudflare Blog
U
Unit 42

Black Hills Information Security, Inc.

Bad Habits: An ANTISOC Operation Same Problem, Different Angles: When Red Team and Blue Team Actually Talk to Each Other How to Identify and Exploit New Vulnerabilities Swapper – A Pure Regex Match/Replace Burp Extension A Practical Guide to BloodHound Data Collection Network Engineering Basics Signed, Trusted, and Abused: Proxy Execution via WebView2 Getting Started In Pentesting – Advice From The BHIS Pentest Lead Cloud Security: Tips and Resources for Securing the Cloud Lessons From A Chatbot Incident How to Lead Effective Tabletops Understanding GRC: How to Navigate Risks and Compliance Standards The “P” in PAM is for Persistence: Linux Persistence Technique Malware Analysis: How to Analyze and Understand Malware OSINT: How to Find, Use, and Control Open-Source Intelligence What to Do with Your First Home Lab When the SOC Goes to Deadwood: A Night to Remember Social Engineering and Microsoft SSPR: The Road to Pwnage is Paved with Good Intentions Common Cyber Threats Finding the Right Penetration Testing Company Deceptive-Auditing: An Active Directory Honeypots Tool The Curious Case of the Comburglar How to Set Smart Goals (That Actually Work For You) Inside the BHIS SOC: A Conversation with Hayden Covington Abusing Delegation with Impacket (Part 3): Resource-Based Constrained Delegation Why You Got Hacked – 2025 Super Edition Abusing Delegation with Impacket (Part 2): Constrained Delegation Abusing Delegation with Impacket (Part 1): Unconstrained Delegation GoSpoof – Turning Attacks into Intel Model Context Protocol (MCP)
Talkin’ About Infosec News – 12/6/2022
BHIS · 2022-12-07 · via Black Hills Information Security, Inc.

, , ,

00:00 – PreShow Banter™ — Florida Bobsledding Team
01:29 – PreShow Banter™ — Open AI Phishing Campaign
05:17 – BHIS – Talkin’ Bout [infosec] News 2022-12-05
07:53 – Story # 1: There are no episodes of Darknet Diaries scheduled Q1
https://twitter.com/JackRhysider/status/1599115984262270977
09:45 – Story # 2: Elon Musk Meets With Apple CEO Tim Cook Amid Claims of Twitter App Store Dispute
https://www.macrumors.com/2022/11/30/elon-musk-tim-cook-meeting-apple-park/
14:46 – Story # 3: Anker’s Eufy Cameras Caught Uploading Content to the Cloud Without User Consent
https://www.macrumors.com/2022/11/29/eufy-camera-cloud-uploads-no-user-consent/
23:20 – Story # 3b: Eufy caught lying about local-only security cameras with footage sent to cloud, accessible in unencrypted streams
https://9to5google.com/2022/12/01/eufy-camera-cloud-security-leak/
26:54 – Story # 4: FCC faces long road in stripping Chinese tech from US telecom networks
https://www.cyberscoop.com/fcc-huawei-zte-security-risks/
34:19 – Story # 5: TikTok NSFW if you work for the South Dakota government
https://www.theregister.com/2022/11/30/tiktok_nsfw_if_you_work/
37:40 – Story # 6: Never-before-seen malware is nuking data in Russia’s courts and mayors’ offices
https://arstechnica.com/information-technology/2022/12/never-before-seen-malware-is-nuking-data-in-russias-courts-and-mayors-offices/
41:56 – Story # 7: Lessons from Russia’s cyber-war in Ukraine
https://www.economist.com/science-and-technology/2022/11/30/lessons-from-russias-cyber-war-in-ukraine
44:15 – Story # 8: DHS Cyber Safety Review Board to focus on Lapsus$ hackers
https://www.cyberscoop.com/cybersecurity-review-board-lapsus/
49:49 – Story # 8b: Cyber Safety Review Board to Conduct Second Review on Lapsus$
https://www.dhs.gov/news/2022/12/02/cyber-safety-review-board-conduct-second-review-lapsus
50:42 – Story # 9: Rackspace rocked by ‘security incident’ that has taken out hosted Exchange services
https://www.theregister.com/2022/12/03/rackspace_security_incident_hosted_exchange/
57:05 – Story # 10: Red Alert: The SFPD Want the Power to Kill with Robots
https://www.eff.org/deeplinks/2022/11/red-alert-sfpd-want-power-kill-robots



We are self-publishing free Infosec Zines called PROMPT#.

PROMPT# will contain: 

  • Infosec articles 
  • Challenging puzzles 
  • Comic book based on real-life hacking adventures 
  • Coloring contests 
  • Bonus Backdoors & Breaches Consultant Cards (print version only) 
  • Other stuffs 

You can check out current and upcoming issues here: https://www.blackhillsinfosec.com/prompt-zine/