All the latest news on Cybersecurity

At Compass Security, we recently launched our managed bug bounty service. We openly invite hunters to probe our publicly exposed services for vulnerabilities. In return for their valuable feedback, we offer monetary bounties up to CHF 5000. This blog posts presents an interesting vulnerability found by a hunter on the bug bounty program of our subsidiary, Hacking-Lab.

Compass First-hand Experience

Alexander Vinnik, a Russian operator of virtual currency exchange BTC-e pleaded guilty to participating in a money laundering scheme. Alexander Vinnik, a Russian national, pleaded guilty to conspiracy to commit money laundering for his involvement in operating the cryptocurrency exchange BTC-e from 2011 to 2017. BTC-e processed over billion in transactions and served over […]

Alexander Vinnik Vinnik

How are you, hacker? 🪐Want to know what's trending right now?: The Techbeat by HackerNoon has got you covered with fresh content from our trending stories of the day! Set email preference here. ## Outlier Detection: What You Need to Know By @nataliaogneva [ 4 Min read ] Decisions are usually based on the sample mean, which is very sensitive to outliers and can dramatically change the value. So, it is crucial to manage outliers Read More. Using the Stratification Method for the Experiment Analysis By @nataliaogneva [ 8 Min read ] Learn how to improve experiment efficiency and metric sensitivity through stratified sampling in data analysis. Read More. Using T-tests for Abnormal Data in AB Testing By @nataliaogneva [ 5 Min read ] Discover the truth about using t-tests in AB testing for abnormal distributions in the IT industry. Read More. Mastering the Craft of Transforming Data into Engaging Visual Narratives in User Interfaces By @hacker329546 [ 7 Min read ] As data volumes grow, mastering the art of translating data into captivating visual narratives becomes even more important. Read More. How to Build an End-to-End ML Platform By @zangzhiya [ 6 Min read ] In this paper, readers will find an overview roadmap to generating a strong ML system that starts from data management to streamline operations efficiently. Read More. The Evolution of Data Center Cooling: From Air-Based Methods to Free Cooling By @egorkaritskii [ 9 Min read ] Explore the benefits, challenges, and industry trends shaping the future of data center cooling. Read More. Human-centric Crisis Management: Nurturing Resilient Teams in Hi-tech Environments By @dmitbagdasaryan [ 6 Min read ] Leaning back on the principles of this methodology, I suggest the following steps for taking precautionary care of your subordinates to foster their robustness Read More. Empowering AWS DevOps With Python and Machine Learning By @ribeiro00jd7jt [ 7 Min read ] This article is a direct result of the thoughts I shared at a recent talk with the same title, where I dissected Python and its extensive ecosystem Read More. Tech and Tradition in Established Universes: Goldie Returns to Riverdale By @sarahevans [ 5 Min read ] Archie Comics writer Goldie Chan's latest comic, "BETTY & VERONICA FRIENDS FOREVER: FAIRY TALES”: ‘The Frumpy Duckling," showcases this fusion. Read More. Software Regression Testing: Enhanced Regression Strategy and Zero Defects By @shad0wpuppet [ 6 Min read ] Learn about Zero Defects and advanced regression testing strategies to enhance software quality and testing efficiency Read More. The Genies Tool Kit: Everything You Need to Know By @genies [ 9 Min read ] The Genies Tool Kit is grounded in two core pillars: the Avatar Framework and the Traits Framework Read More. What's the Fate of the S&P 500 if Rate Cuts Don't Happen in 2024? By @dmytrospilka [ 5 Min read ] The change in sentiment surrounding Wall Street has been palpable as stubborn inflation continues in its refusal to subside. Read More. Read Code Like a Hacker With the SAST By @matejsmycka [ 4 Min read ] Static application security testing (SAST) is a subset of static code analysis used to increase the security and reliability of the code. Read More. Data Modeling in Elasticsearch: Using Nested Queries and Parent-Child Relationships By @rocksetcloud [ 10 Min read ] Managing relationships in Elasticsearch can be challenging, but we have nested queries and parent-child relationships to work around it, and more. Read More. Simple Wonders of RAG using Ollama, Langchain and ChromaDB By @arjunrao1987 [ 9 Min read ] Maximize your query outcomes with RAG. Learn how to leverage Retrieval Augmented Generation for domain-specific questions effectively. Read More. Obinna Odirionye: How This Founder Is Reimagining Cloud Computing in 2024 By @jonstojanmedia [ 4 Min read ] Obinna Odirionye, CEO and creator of Clouddley, wants to democratize the cloud. Read More. How to Create a CI/CD Pipeline Using GitHub and AWS EC2 By @wesleybaxterhuber [ 6 Min read ] Creating a CI / CD Pipeline for a webservice on github connected to an AWS Ec2 server Read More. Unicorns Crafting the Infrastructure for a Digital Nomad Nation By @raysvitla [ 3 Min read ] Explore how startups like Deel, SafetyWing and BubbleSwitch build the infrastructure for the thriving digital nomad nation. Read More. Dopple.ai Overtakes Mainstream Competitors With Unfiltered, Unbiased AI Chatbots By @jonstojanmedia [ 2 Min read ] Dopple.ai is a free AI chatbot that lets you interact with virtual characters based on real and fictional people. Read More. E Money Network Is a MiCA-Compliant Blockchain: Here's Why It's a Big Deal By @jonstojanmedia [ 4 Min read ] Market in Crypto Assets (MiCA) is a framework that came into force in June 2023 to regulate the crypto market across Europe. Read More. 🧑‍💻 What happened in your world this week? It's been said that writing can help consolidate technical knowledge, establish credibility, and contribute to emerging community standards. Feeling stuck? We got you covered ⬇️⬇️⬇️ ANSWER THESE GREATEST INTERVIEW QUESTIONS OF ALL TIME We hope you enjoy this worth of free reading material. Feel free to forward this email to a nerdy friend who'll love you for it. See you on Planet Internet! With love, The HackerNoon Team ✌️

Multiple vulnerabilities have been discovered in libjpeg-turbo, the worst of which could lead to arbitrary code execution.

What is the vulnerability?A use-after-free vulnerability tagged as CVE-2023-49606 exists in Tinyproxy, a lightweight open-source HTTP proxy daemon. The threat actor may trigger this memory corruption and execute arbitrary code by sending a specially crafted HTTP header that triggers the reuse of previously freed memory. That can lead to remote code execution. As of May 3, 2024, Censys observed over 90,000 hosts running Tinyproxy service exposed in the Internet where 57% of which are potentially vulnerable to this CVE-2023-49606.What is the recommended Mitigation?FortiGuard Labs is not aware of any patches released by the vendor as of this report. To mitigate the risk, users are advised to make sure that Tinyproxy service is not exposed to the internet.What FortiGuard Coverage is available?FortiGuard Labs is currently investigating relevant protections and will update the threat signal as they are released. FortiGuard Incident Response team can be engaged to help with any suspected compromise.

lightweight open-source proxy daemon Tinyproxy vulnerability tagged

Multiple vulnerabilities have been discovered in Xpdf, the worst of which could possibly lead to arbitrary code execution.

Kapeka, also known as KnuckleTouch, is a sophisticated backdoor malware that has been making waves in the cybersecurity world.  Initially appearing in mid-2022, it wasn't until 2024 that Kapeka was formally tracked due to its involvement in limited-scope attacks, particularly in Eastern Europe. The Sandstorm Connection Kapeka is linked to the Sandstorm Group, operated by […] The post SandStorm Hackers Added New Kapeka Tool to it's Arsenal appeared first on Cyber Security News.

Arsenal Kapeka Kapeka Kapeka Tool SandStorm Hackers

With the advancement of scamming technology, determining the authenticity of a site solely based on appearance has become exceedingly difficult. In the past, it was possible to identify fakes by carefully observing discrepancies such as logo size, layout, wording, domain, etc., which scammers often overlooked when creating spoofed websites or emails. However, modern scammers now produce designs and content of such sophistication that they closely resemble genuine websites and emails. Website copying technology has advanced to the point where it is... The post Online Scams: Are These All Scams? Distinguishing the Legit from the Scam appeared first on ASEC BLOG.

According to Gitlin (1980, 7), frames are "persistent patterns of cognition, interpretation, and presentation of selection, emphasis and exclusion" used to organize discourse about specific issues. Frames are often utilized as a conceptual device for studying how important societal developments are presented and interpreted by mass media and how they shape public opinion (de Vreese, 2005).

organize discourse persistent patterns specific issues Theoretical Background

AhnLab SEcurity intelligence Center (ASEC) has confirmed the continuous distribution of shortcut files (*.LNK) of abnormal sizes that disseminate backdoor-type malware. The recently confirmed shortcut files (*.LNK) are found to be targeting South Korean users, particularly those related to North Korea. The confirmed LNK file names are as follows: The confirmed LNK files contain a command to execute PowerShell via CMD, and their type is similar to the type found in “RokRAT Malware Distributed Through LNK Files (*.lnk): RedEyes (ScarCruft)”... The post LNK File Disguised as Certificate Distributing RokRAT Malware appeared first on ASEC BLOG.

Certificate Distributing File Disguised

Join the Be.Cyber community! On the program: news and tools monitoring, mutual aid and knowledge sharing, event organization (workshops, CTF resolution), ... And it's all in good fun!

In today's high-choice media environment, search engines play an integral role in informing individuals and societies about the latest events. The importance of search algorithms is even higher at the time of crisis, when users search for information to understand the causes and the consequences of the current situation and decide on their course of action. In our paper, we conduct a comparative audit of how different search engines prioritize visual information related to COVID-19 and what consequences it has for the representation of the pande

high-choice media informing individuals integral role media environment