⚠️ VULNERABILITY DISCLOSURE 1[−]
3 MarOnline bank One Finance removed my account's password in favor of _only_ phone/email OTP and a 4 digit pinsubmitted by Rexios to cybersecurity 0 points | 0 comments How is this legal? This has to be the most insecure login method I’ve ever seen. They removed the password from my account without consent and have no way to go back to requiring a password. Literally all an attacker has …INFOSEC.PUB
📢 SECURITY ADVISORIES 1[−]
3 MarWeekly Update 389Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite How on earth are we still here? You know, that place where breached companies stand up and go all Iraqi information minister on the inc…TROYHUNT.COM
🔥 INCIDENT REPORTING 2[−]
3 MarMr. Green Gaming - 27,176 breached accountsIn March 2024, the online games community Mr. Green Gaming suffered a data breach that exposed 27k user records. Acknowledged on their Discord server, the incident exposed email and IP addresses, usernames, geographic locations and dates of birth.HAVEIBEENPWNED.COM
3 MarGeorgia’s Largest County Is Still Repairing Damage From January CyberattackGeorgia’s largest county is still repairing damage inflicted on its government offices by a cyberattack in January 2024. The post Georgia’s Largest County Is Still Repairing Damage From January Cyberattack appeared first on SecurityWeek .SECURITYWEEK.COM
🕵️ THREAT INTELLIGENCE 4[−]
3 MarU.S. Judge ordered NSO Group to hand over the Pegasus spyware code to WhatsAppsubmitted by vikingqueef to cybersecurity 1 points | 0 comments https://securityaffairs.com/159847/security/nso-group-vs-meta-pegasus-hand-over.htmlSECURITYAFFAIRS.COM
3 MarSchmoocon 2024submitted by ashar to security_cpe 1 points | 0 comments https://infosec.pub/pictrs/image/03a67ce5-c662-4690-98eb-3d9d245ae598.png Schedule ShmooCon 2024 Day 1 One Track Mind ShmooCon 2024 Day 2 BELAY IT! Track ShmooCon 2024 Day 2 BUILD IT! Track ShmooCon 2024 Day 2 BRING IT ON! …INFOSEC.PUB
3 MarAn intro to automated evasion and compilation of .NET offensive toolssubmitted by L4s to secops 1 points | 0 comments https://tierzerosecurity.co.nz/2024/03/03/teamcity-sharpwmi-evasion.html An intro to automated evasion and compilation of .NET offensive tools::Information Security Services. Offensive Security, Penetration Testing, Mobile and Appl…TIERZEROSECURITY.CO.NZ
3 MarGhidra training classes from NSAsubmitted by L4s to secops 1 points | 0 comments https://github.com/NationalSecurityAgency/ghidra/tree/master/GhidraDocs/GhidraClass Ghidra training classes from NSA::undefinedGITHUB.COM
🌐 CYBER THREAT LANDSCAPE 1[−]
3 MarStealthy GTPDOOR Linux malware targets mobile operator networksSecurity researcher HaxRob discovered a previously unknown Linux backdoor named GTPDOOR, designed for covert operations within mobile carrier networks. [...]BLEEPINGCOMPUTER.COM
📡 INFOSEC NEWS 1[−]
3 MarMicrosoft: Windows 11 “invites” coming to more Windows 10 Pro PCsStarting next month, Microsoft nag screens pushing Windows 11 will also show up on non-managed enterprise devices running Windows 10 Pro and Pro Workstation. [...]BLEEPINGCOMPUTER.COM