✉️ CyberWeekly 13' July | Issue #5
⁉️ Evernote RCE, Windows Remoting, CVE-2021-40444, MSHTML, Pentesting AD, Reverse engineering .NET, WGU, Global AppSec 2024 Lisbon, Universal RCE, False File Immutability, EvilnoVNC, STOK, Polyfill(.)io
🔗 https://hacklido.substack.com/p/cyberweekly-13-july-issue-5
⁉️ Evernote RCE, Windows Remoting, CVE-2021-40444, MSHTML, Pentesting AD, Reverse engineering .NET, WGU, Global AppSec 2024 Lisbon, Universal RCE, False File Immutability, EvilnoVNC, STOK, Polyfill(.)io
🔗 https://hacklido.substack.com/p/cyberweekly-13-july-issue-5
🔥2
💠 Pentesting Active Directory - Part 7 | Abusing Misconfigured Templates (ESC1)
🔗 https://hacklido.com/blog/882-pentesting-active-directory-part-7-abusing-misconfigured-templates-esc1
🔗 https://hacklido.com/blog/882-pentesting-active-directory-part-7-abusing-misconfigured-templates-esc1
HACKLIDO
Pentesting Active Directory - Part 7 | Abusing Misconfigured Templates (ESC1)
Active Directory Certificate Services ADCS is used for managing public key infrastructure in an Active Directory environment. It’s commonly used in enter...
💠 The Rise Of Ransomeware As A Service
🔗 https://hacklido.com/blog/879-the-rise-of-ransomeware-as-a-service
🔗 https://hacklido.com/blog/879-the-rise-of-ransomeware-as-a-service
HACKLIDO
The Rise Of Ransomeware As A Service
Ransomware as a Service (RaaS) platforms continue to emerge, causing a significant impact across industries and organisations. They’re enabling inexperien...
💠 Why You Should Implement Post-Quantum Security Now
🔗 https://hacklido.com/blog/878-why-you-should-implement-post-quantum-security-now
🔗 https://hacklido.com/blog/878-why-you-should-implement-post-quantum-security-now
HACKLIDO
Why You Should Implement Post-Quantum Security Now
For years, quantum computing has been a vision of the future. It’s a technology that has been far away – a distant promise of computing power far beyond ou...
✉️ CyberWeekly 20' July | Issue #6
⁉️ Crowdstrike outage, healthcare ransmoware, HIPPA, Oracle bulk patch updates, Snort IPS, Active Directory pentesting, CVE-2024-27956 - SQLi, CVE-2024-40626 - XSS (Stored), RAG manipulation attacks, etc
🔗 https://hacklido.substack.com/p/cyberweekly-20-july-issue-6
⁉️ Crowdstrike outage, healthcare ransmoware, HIPPA, Oracle bulk patch updates, Snort IPS, Active Directory pentesting, CVE-2024-27956 - SQLi, CVE-2024-40626 - XSS (Stored), RAG manipulation attacks, etc
🔗 https://hacklido.substack.com/p/cyberweekly-20-july-issue-6
❤1👍1🔥1👏1
💠 How Much Ransome Are Cybercriminals Asking For?
🔗 https://hacklido.com/blog/881-how-much-ransome-are-cybercriminals-asking-for
🔗 https://hacklido.com/blog/881-how-much-ransome-are-cybercriminals-asking-for
HACKLIDO
How Much Ransome Are Cybercriminals Asking For?
We’re focused on… How much money threat actors are asking for when they execute ransomware attacks. Ransom sums can vary wildly At time of writing, the...
💠 Getting started with SOC: Setting an Elastic Home SIEM lab
🔗 https://hacklido.com/blog/891-getting-started-with-soc-setting-an-elastic-home-siem-lab
🔗 https://hacklido.com/blog/891-getting-started-with-soc-setting-an-elastic-home-siem-lab
HACKLIDO
Getting started with SOC: Setting an Elastic Home SIEM lab
If you want to pursue your career as an SOC analyst, you can get hand- off experience for free by setting up your own SIEM labs. Here’s how I did it. What is...
👍3😁1
💠 The Unpatchable Exploit: How Checkra1n bypasses iCloud Activation Locks
🔗 https://hacklido.com/blog/899-the-unpatchable-exploit-how-checkra1n-bypasses-icloud-activation-locks
🔗 https://hacklido.com/blog/899-the-unpatchable-exploit-how-checkra1n-bypasses-icloud-activation-locks
HACKLIDO
The Unpatchable Exploit: How Checkra1n bypasses iCloud Activation Locks
The Checkra1n jailbreak has revolutionised the landscape of iOS jailbreaking and security research. Leveraging the powerful checkm8 bootrom exploit, Checkr...
❤1👍1
💠 How To Talk About Cybersecurity To People Who Don't [YET] Care
🔗 https://hacklido.com/blog/898-how-to-talk-about-cybersecurity-to-people-who-dont-yet-care
🔗 https://hacklido.com/blog/898-how-to-talk-about-cybersecurity-to-people-who-dont-yet-care
HACKLIDO
How To Talk About Cybersecurity To People Who Don't [YET] Care
We’re focused on… How to talk to people who don’t care about cybersecurity. Why? Because we’re rolling out a new series of blog posts on the BHMEA cont...
💠 Machine Learning In Cybersecurity
🔗 https://hacklido.com/blog/888-machine-learning-in-cybersecurity
🔗 https://hacklido.com/blog/888-machine-learning-in-cybersecurity
HACKLIDO
Machine Learning In Cybersecurity
The emerging field of machine learning (ML) is driving transformations across industries. But while we’re still in these relatively early stages of the int...
👍1
💠 Strengths and weaknesses of the new UN cybercrime convention
🔗 https://hacklido.com/blog/902-strengths-and-weaknesses-of-the-new-un-cybercrime-convention
🔗 https://hacklido.com/blog/902-strengths-and-weaknesses-of-the-new-un-cybercrime-convention
HACKLIDO
Strengths and weaknesses of the new UN cybercrime convention
On 8 August 2024, the draft text of the UN Convention Against Cybercrime was finalised. This has real implications for cybersecurity standards and resilien...
💠 A basic overview of Hypervisor Implants
🔗 https://hacklido.com/blog/907-a-basic-overview-of-hypervisor-implants
🔗 https://hacklido.com/blog/907-a-basic-overview-of-hypervisor-implants
HACKLIDO
A basic overview of Hypervisor Implants
Hypervisors are pieces of software used to manage VMs (Virtual Machines) or Guest machines on a Host machine. The main difference between a hypervisor an...
💠 The UN convention on cybercrime: What does it mean for you?
🔗 https://hacklido.com/blog/904-the-un-convention-on-cybercrime-what-does-it-mean-for-you
🔗 https://hacklido.com/blog/904-the-un-convention-on-cybercrime-what-does-it-mean-for-you
HACKLIDO
The UN convention on cybercrime: What does it mean for you?
We’re focused on… The new UN convention on cybercrime. Why? Because the draft text of the UN Convention Against Cybercrime was finalised on 8 August 20...
💠 How do we measure the success of the UN cybercrime convention?
🔗 https://hacklido.com/blog/903-how-do-we-measure-the-success-of-the-un-cybercrime-convention
🔗 https://hacklido.com/blog/903-how-do-we-measure-the-success-of-the-un-cybercrime-convention
HACKLIDO
How do we measure the success of the UN cybercrime convention?
When we asked Betania Allo (Founder and Principal Consultant, BA Cyber Law & Policy) to share her perspective on the new UN Convention Against Cybercr...
💠 Why Cybersecurity Proffessionals Should Study Psychology
🔗 https://hacklido.com/blog/897-why-cybersecurity-proffessionals-should-study-psychology
🔗 https://hacklido.com/blog/897-why-cybersecurity-proffessionals-should-study-psychology
HACKLIDO
Why Cybersecurity Proffessionals Should Study Psychology
We’re focused on… Being OK with making mistakes and not having all the answers. Why? Because we interviewed BHMEA Advisory Board member Jason Lau (CIS...
❤1👍1
💠 The Way I Used to Find RCE (Remote Code Execution) via File Upload
🔗 https://hacklido.com/blog/914-the-way-i-used-to-find-rce-remote-code-execution-via-file-upload
🔗 https://hacklido.com/blog/914-the-way-i-used-to-find-rce-remote-code-execution-via-file-upload
HACKLIDO
The Way I Used to Find RCE (Remote Code Execution) via File Upload
Hello, Hacklido community! This is my first article, and I’m excited to share one of my most significant vulnerability discoveries: Remote Code Execution (RC...
❤1
💠 Why cyber poverty is a serious problem in 2024
🔗 https://hacklido.com/blog/916-why-cyber-poverty-is-a-serious-problem-in-2024
🔗 https://hacklido.com/blog/916-why-cyber-poverty-is-a-serious-problem-in-2024
HACKLIDO
Why cyber poverty is a serious problem in 2024
In 2023, upcoming Black Hat MEA speaker Ramy Houssaini (Chief Cyber & Technology Risk Officer, & Group Privacy Officer, at BNP Paribas) was one of...
💠 What can we learn from the Crowdstrike IT outage?
🔗 https://hacklido.com/blog/909-what-can-we-learn-from-the-crowdstrike-it-outage
🔗 https://hacklido.com/blog/909-what-can-we-learn-from-the-crowdstrike-it-outage
HACKLIDO
What can we learn from the Crowdstrike IT outage?
The Crowdstrike global IT outage caused widespread disruption, with critical industries put at risk as some of their services stalled. Now, we’re seeing la...