cybersecurity - CybAI news

17 Nov

Advanced Wi-Fi Hacking: Cracking WPA3 and Modern Wireless Security

stp2y0 CommentsNewscoding, community, cybersecurity, development, engineering, inclusive, programming, python, software, wifi

Author: Trix Cyrus Waymap Pentesting tool: Click HereTrixSec Github: Click HereTrixSec Telegram: Click Here Wireless networks are the backbone of modern connectivity, offering convenience but also exposing vulnerabilities. With WPA3 emerging as the successor to WPA2, it promises enhanced security features. However, no system is entirely impervious to attacks. This article explores advanced Wi-Fi hacking techniques and the security mechanisms of WPA3 while emphasizing the importance of ethical hacking to strengthen wireless security. Understanding Wi-Fi Security Protocols Wi-Fi networks have evolved to combat increasing threats. Here’s a quick breakdown of the major security protocols: WEP (Wired Equivalent Privacy): The earliest…

16 Nov

Bitfinex Hacker Gets 5 Years for $10 Billion Bitcoin Heist

stp2y0 CommentsAIartificial intelligence, bitcoin, cryptocurrency, cybersecurity, hacking, hacks, north korea, security, security roundup

In perhaps the most adorable hacker story of the year, a trio of technologists in India found an innovative way to circumvent Apple’s location restrictions on AirPod Pro 2s so they could enable the earbuds’ hearing aid feature for their grandmas. The hack involved a homemade Faraday cage, a microwave, and a lot of trial and error.On the other end of the tech-advancements spectrum, the US military is currently testing an AI-enabled machine gun that is capable of auto-targeting swarms of drones. The Bullfrog, built by Allen Control Systems, is one of several advanced weapons technologies in the works to…

14 Nov

Security Update on Google Chrome Extensions

stp2y0 CommentsNewscoding, community, cybersecurity, datasecurity, development, devops, engineering, inclusive, malware, software

In November 2024, a report on Google Chrome extensions indicated that the Manifest V3 update, intended to boost security, has yet to fully protect users from data theft and malware. Google introduced Manifest V3 to limit extensions' access to sensitive data and block harmful scripts, but it appears that V3 has not been entirely effective in countering these security threats. Malicious actors continue to exploit Chrome extensions, as many users install extensions without scrutinizing permissions or verifying sourcesDespite the improvements V3 offers, some harmful extensions bypass the security restrictions, accessing private user data or distributing malware. This ongoing issue underscores…

03 Nov

Security researchers found a serious zero-click bug in Synology’s Photos app

stp2y0 CommentsNewscybersecurity, gear, news, Synology

If you own a Synology NAS drive, you’ll want to update your device as soon as possible. As first reported by Wired, a group of Dutch security researchers recently identified a zero-click vulnerability within the Synology Photos app. For the uninitiated, such bugs allow hackers to compromise a system without a user needing to click something first. To make matters worse, the app comes pre-installed and enabled by default on Synology’s consumer line of Bee network storage devices. It’s also a popular download among those who use the company’s DiskStation systems.Midnight Blue, the cybersecurity firm that discovered the vulnerability, estimates…

02 Nov

Okta vulnerability allowed accounts with long usernames to log in without a password

stp2y0 CommentsNewscybersecurity, gear, news, Okta

In a new security advisory, Okta has revealed that its system had a vulnerability that allowed people to log into an account without having to provide the correct password. Okta bypassed password authentication if the account had a username that had 52 or more characters. Further, its system had to detect a "stored cache key" of a previous successful authentication, which means the account's owner had to have previous history of logging in using that browser. It also didn't affect organizations that require multi-factor authentication, according to the notice the company sent to its users.Still, a 52-character username is easier…

31 Oct

QPS for Beginners

stp2y0 CommentsNewsbeginners, coding, community, cybersecurity, development, engineering, inclusive, opensource, software, webdev

About the Author I'm Carrie, a cybersecurity engineer and writer, working for SafeLine Team. SafeLine is a free and open source web application firewall, self-hosted, very easy to use. Introduction In the world of web performance and scalability, the term QPS frequently comes up. But what exactly is QPS, and why is it important? This guide is designed to help beginners understand QPS and its significance in maintaining a robust and efficient web application. What is QPS? QPS stands for Queries Per Second. It is a metric that measures the number of queries (or requests) that a server or application…

30 Oct

BUILDING A CYBERSECURITY DETECTION AND MONITORING LAB BY LEVERAGING LOCAL VIRTUAL MACHINES (VMs) AND MICROSOFT AZURE

stp2y0 CommentsNewscoding, community, cybersecurity, development, engineering, homelab, inclusive, networking, security, software

Introduction Learning and implementing cybersecurity concepts can be challenging without access to practical and secure infrastructure. These challenges are further complicated by budget constraints that limit the acquisition of necessary hardware resources. To overcome this, this home lab guide provides instructions for provisioning, configuring, optimizing, and securing IT infrastructure using a combination of local virtual machines (VMs) and cloud resources for practical use cases. This approach enables deploying less resource-intensive tools on local VMs while leveraging the cloud for more demanding applications. It simulates both on-premises and cloud environments. The knowledge gained here can aid in production and large-scale, enterprise-level…

30 Oct

FBI suspects China-linked hackers accessed officials’ call logs and SMS messages, report says

stp2y0 CommentsNewscybersecurity, gear, news

Late last week, the FBI and Cybersecurity and Infrastructure Security Agency (CISA) they were investigating “the unauthorized access to commercial telecommunications infrastructure by actors affiliated with the People’s Republic of China.” At the same time, The New York Times that phones used by Donald Trump, JD Vance and Kamala Harris’ campaign staff were among the targets, though it was unclear what data the group may have been able to access.Now, The New York Times has about the extent of the hack, which is reportedly linked to a Chinese group known as “Salt Typhoon.” According to The Times, aides to President…

25 Oct

How to Encrypt JavaScript Code for Web Security

stp2y0 CommentsNewsbeginners, coding, community, cybersecurity, development, engineering, inclusive, opensource, software, webdev

JavaScript (JS) is a versatile language for creating interactive websites, but it’s also easily viewable, which can expose sensitive parts of your code to anyone. Encrypting or obfuscating JavaScript is a way to add a layer of protection to your website by making your code harder to understand or reverse-engineer. Here’s a step-by-step guide on why and how to encrypt JavaScript code effectively, and how tools like SafeLine WAF can help protect and secure your web assets. 1. Why Encrypt JavaScript Code? JavaScript encryption is primarily about protecting sensitive logic and securing data from unauthorized access. Some common reasons to…

22 Oct

Top 10 Web Application Security Threats

stp2y0 CommentsNewsbeginners, coding, community, cybersecurity, development, engineering, inclusive, opensource, software, webdev

OWASP is a non-profit organization dedicated to researching application security threats. By surveys and analysis of over 200,000 organizations, OWASP published the report, “Top 10 Web Application Security Risks” approximately every three years, which has become a crucial reference for global enterprises in their web application security efforts. However, a security research team from Kaspersky recently found that OWASP’s rankings differ significantly from the conclusions reached through practical black-box, gray-box, and white-box application risk assessment methods. Organizations should more flexibly evaluate their web application security posture based on the potential impact and exploitability of threats. In this assessment, Kaspersky’s security…