Cybersecurity

8637 readers
110 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
kid@sh.itjust.works
Lanky_Pomegranate530@midwest.social
listing: all - local
1
35
WhatsApp API flaw let researchers scrape 3.5 billion accounts (www.bleepingcomputer.com)
submitted 16 hours ago by KarnaSubarna@lemmy.ml to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

The researchers from the University of Vienna and SBA Research used WhatsApp's contact-discovery feature, which lets you submit a phone number to the platform's GetDeviceList API endpoint to determine whether a phone number is associated with an account and what devices were used.

Without strict rate limiting, APIs like this can be abused to perform large-scale enumeration across a platform.

The researchers found this to be the case with WhatsApp, as they were able to send a high volume of queries directly to WhatsApp's servers, checking more than 100 million numbers per hour.

They ran the entire operation from a single university server using just five authenticated sessions, initially expecting to get caught by WhatsApp. However, the platform never blocked the accounts, never throttled their traffic, never restricted their IP address, and never reached out despite all the abusive activity coming from one device.

The researchers then generated a global set of 63 billion potential mobile numbers and tested all of them against the API. Their queries returned 3.5 billion active WhatsApp accounts.

2
55
CrowdStrike catches insider feeding information to hackers (www.bleepingcomputer.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
2 comments fedilink
3
15
The Tsundere botnet uses the Ethereum blockchain to infect its targets (securelist.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
4
16
Hacker claims to steal 2.3TB data from Italian rail group, Almaviva (www.bleepingcomputer.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
5
18
TamperedChef Malware Spreads via Fake Software Installers in Ongoing Global Campaign (thehackernews.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
6
16
Salesforce flags another third-party security incident • The Register (www.theregister.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
7
13
New Sturnus Android Trojan Quietly Captures Encrypted Chats and Hijacks Devices (thehackernews.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
8
9
New SonicWall SonicOS flaw allows hackers to crash firewalls (www.bleepingcomputer.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
9
8
SolarWinds Patches Three Critical Serv-U Vulnerabilities - SecurityWeek (www.securityweek.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
10
23
Bonkers Bitcoin heist: 5-star hotels, cash-filled envelopes, vanishing funds - Ars Technica (arstechnica.com)
submitted 4 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
11
15
Alleged Data Breach of NVIDIA (x.com)
submitted 4 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
12
42
Cloudflare hit by outage affecting global network services (www.bleepingcomputer.com)
submitted 5 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
2 comments fedilink
 
 

Resolved now.

13
12
Half a Million Stolen FTSE 100 Credentials Found on Criminal Sites - Infosecurity Magazine (www.infosecurity-magazine.com)
submitted 4 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
14
9
Self-replicating botnet attacks Ray clusters • The Register (www.theregister.com)
submitted 4 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
15
15
If I wish to explore the world of hacking, where do l begin ? I mean, it has to be with my own machine, correct ??? (thebrainbin.org)
submitted 4 days ago by TheracAriane@thebrainbin.org to c/cybersecurity@sh.itjust.works
12 comments fedilink
 
 

If I wish to explore the world of hacking, where do l begin ? I mean, it has to be with my own machine, correct ???

16
19
Is there any other means of surfing the world wide web without the internet and services of companies like cloudflare ? (thebrainbin.org)
submitted 5 days ago by TheracAriane@thebrainbin.org to c/cybersecurity@sh.itjust.works
23 comments fedilink
 
 

Is there any other means of surfing the world wide web without the internet and services of companies like cloudflare ?

17
7
AI-Enhanced Tuoni Framework Targets Major US Real Estate Firm - Infosecurity Magazine (www.infosecurity-magazine.com)
submitted 4 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
18
7
Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild (thehackernews.com)
submitted 4 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
19
6
French agency Pajemploi reports data breach affecting 1.2M people (www.bleepingcomputer.com)
submitted 4 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
20
6
New ShadowRay attacks convert Ray clusters into crypto miners (www.bleepingcomputer.com)
submitted 4 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
21
14
DoorDash email spoofing vulnerability sparks messy disclosure dispute (www.bleepingcomputer.com)
submitted 6 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
22
18
Logitech confirms data breach after Clop extortion attack (www.bleepingcomputer.com)
submitted 6 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
2 comments fedilink
23
16
Amazon Detects 150,000 NPM Packages in Worm-Powered Campaign  - SecurityWeek (www.securityweek.com)
submitted 6 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
24
12
Checkout.com snubs hackers after data breach, to donate ransom instead (www.bleepingcomputer.com)
submitted 6 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
25
12
ASUS warns of critical auth bypass flaw in DSL series routers (www.bleepingcomputer.com)
submitted 6 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
view more: next ›