Anisha

[Anisha @anishasometimes]

जेलमा.com 😂 को को भित्र गए? https://t.co/OmRoTk4zQy

Great job guys😂

[vx-underground @vxunderground]

Today Yaroslav Vasinskyi, the REvil ransomware operator responsible for the infamous Kaseya supply chain attack, was sentenced to 13 years in prison.

https://t.co/a9Pk9pTvW7

[Hackmanac @H4ckmanac]

🚨 #BREAKING 🚨

Dropbox reported a significant cybersecurity breach, revealing that a hacker accessed its Dropbox Sign environment (formerly HelloSign) on April 24.

The breach affected all users of Dropbox Sign, exposing data such as emails, usernames, phone numbers, hashed passwords, and various authentication details including API keys, OAuth tokens, and multi-factor authentication methods.

Importantly, there's no evidence that the hacker accessed the contents of users' Dropbox Sign accounts, like agreements or payment information.

Dropbox believes the breach is confined to the Dropbox Sign infrastructure, not affecting other Dropbox services.

The company has engaged forensic investigators and notified law enforcement and regulatory bodies, assuming personal information was compromised.

Form 8-K:
https://t.co/eEjHjFW8WU

#DataBreach #CyberAttack #Dropbox

[BleepingComputer @BleepinComputer]

UnitedHealth CEO confirms in US oversight hearing that they paid a $22 million ransom to Black/ALPHV ransomware operation.

Our previous coverage from yesterday:
https://t.co/v1fYznVqbl

[BleepingComputer @BleepinComputer]

Microsoft says the April 2024 Windows security updates break VPN connections on Windows 11, Windows 10, and Windows Server systems

https://t.co/GeDUktrtn7

[Security Trybe @SecurityTrybe]

Types of CyberAttacks

[BleepingComputer @BleepinComputer]

Okta: October data breach affects all customer support system users - @billtoulas
https://t.co/1uatabuwsf

https://t.co/1uatabuwsf

[Brett Callow @BrettCallow]

A #ransomware operation has listed a Christmas tree farm. 1/

[vx-underground @vxunderground]

Previously Okta reported a breach in October that resulted in approx. 1% of customer support users having their data stolen

November 29th Okta reports that they were wrong, 100% of customer support users had their data stolen.

https://t.co/57pscHtWyi

[Security Trybe @SecurityTrybe]

Cybersecurity Tools By Category

Information Gathering:
>Nmap
>Shodan
>Maltego
>TheHavester
>Recon-NG
>Amass
>Censys
>OSINT Framework
>Gobuster

Exploitation:
>Burp Suite
>Metasploit Framework
>SQL Map
>ZAP
>ExploitDB
>Core Impact
>Cobalt Strike

Password Cracking:
>John The Ripper
>Hydra
>Hashcat
>OPHCrack
>Medusa
>THC-Hydra
>Cain & Abel

Vulnerability Scanning:
>OpenVAS
>Nessus
>AppScan
>LYNIS
>Retina
>Nexpose

Software Engineering:
>GoPhish
>HiddenEye
>SocialFish
>EvilURL
>Evilginx

Forensics:
>SluethKit
>Autopsy
>Volatility
>Guymager
>Foremost
>Binwalk
>Wireshark

Wireless Hacking:
>Aircrack-NG
>Wifite
>Kismet
>TCPDump
>Airsnort
>Netstumbler
>Reaver

Web Application Assessment:
>OWASP ZAP
>Burp Suite
>Nikto
>ZAP
>WPScan
>Gobuster
>App Spider

[Anisha @anishasometimes]

Humans. But they are also the strongest sheild💪

[Security Trybe @SecurityTrybe]

What is the weakest link in cybersecurity?

1) Short Passwords
2) Humans
3) Weak Encryption
4) Outdated devices

[Dominic Alvieri @AlvieriD]

Clop Ransomware Secret File Sunday.

Clop releases major updates and data.

[BleepingComputer @BleepinComputer]

Ivanti patches new zero-day exploited in Norwegian govt attacks - @serghei
https://t.co/2i1kU6LUT6

[Hacking Articles @hackinarticles]

Pic of the Day

#infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness #informationsecurity

[Dark Web Intelligence @DailyDarkWeb]

Penetration-List

A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. Includes payloads, dorks, fuzzing materials, and offers in-depth theory sections.

https://t.co/B7eN8LOMFj

#cybersecurity #infosec #pentest

[vx-underground @vxunderground]

cl0p ransomware group has compromised 3 of the largest Cyber Threat Intelligence agencies on the planet.

They have extorted schools, healthcare facilities, and multimillion dollar organizations.

[Dark Web Intelligence @DailyDarkWeb]

1LLEGALITY, a free database search service, is detected

It returns all results from the database, which contains 30 million records.

#DarkWeb #database

[Dominic Alvieri @AlvieriD]

Chuck E. Cheese has been breached by Clop Ransomware. @ChuckECheese

[Dominic Alvieri @AlvieriD]

Clop ransomware has now posted 3 of the accounting big 4.

Deloitte has been breached by Clop.

@DeloitteUS

[BleepingComputer @BleepinComputer]

SEC now requires companies to disclose cyberattacks in 4 days - @serghei
https://t.co/FLg46YnLS8