All the latest news on Cybersecurity

On November 21, 2023, ownCloud disclosed CVE-2023-49103, an unauthenticated information disclosure vulnerability affecting ownCloud, when a vulnerable extension called “Graph API” (graphapi) is present.

extension called Graph Graph API ownCloud Graph

Microsoft has started rolling out its Copilot AI assistant to Windows 10 with the KB5032278 November 2023 non-security preview update for systems running Windows 10, version 22H2. [...]

adds Copilot started rolling

https://j-h.io/christmas || Jump into the TryHackMe Advent of Cyber -- play for free and win prizes! https://j-h.io/aoc23 Free Cybersecurity Education and Ethical Hacking 🔥YOUTUBE ALGORITHM ➡ Like, Comment, & Subscribe! 🙏SUPPORT THE CHANNEL ➡ https://jh.live/patreon 🤝 SPONSOR THE CHANNEL ➡ https://jh.live/sponsor 🌎FOLLOW ME EVERYWHERE ➡ https://jh.live/discord ↔ https://jh.live/twitter ↔ https://jh.live/linkedin ↔ https://jh.live/instagram ↔ https://jh.live/tiktok 💥 SEND ME MALWARE ➡ https://jh.live/malware

By Deeba Ahmed Google will delete free Google accounts that have not been signed into for two years and do not have any active subscriptions. This is a post from HackRead.com Read the original post: Google to Delete Inactive Gmail Accounts From Today: What You Need to Know

Ahmed Google Delete Inactive Gmail Accounts Inactive Gmail

The US Department of the Treasury's Office of Foreign Assets Control (OFAC) announced sanctions against North Korea-linked APT group Kimsuky. The US Department of the Treasury's Office of Foreign Assets Control (OFAC) this week announced sanctions against the North Korea-linked APT group Kimsuky. Kimsuky cyberespionage group (aka ARCHIPELAGO, Black Banshee, Thallium, Velvet Chollima, APT43) was first spotted by Kaspersky researchers in […]

APT Kimsuky

We’ve all come across Amazon’s Alexa or Apple’s Siri and asked ChatGPT to answer a… Natural Language Processing (NLP) in AI: Top 9 Use Cases on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

Processing

Let's play a game. How long does it take you to learn something new in this video? // YouTube VIDEOS mentioned // Decrypting TLS HTTP/2 and QUIC with Wireshark: https://youtu.be/yodDbgoCnLM // YouTube PLAYLIST // Wireshark with Chris Greer: https://www.youtube.com/watch?v=rmFX1V49K8U&list=PLhfrWIlLOoKO8522T1OAhR5Bb2mD6Qy_l&pp=iAQB // David SOCIAL // Discord: https://discord.com/invite/usKSyzb Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: https://www.youtube.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // MENU // 00:00 - Introduction 00:28 - My Setup 00:43 - Do You Know? 01:26 - Start of Demonstration with Telnet 03:54 - Port Numbers Further Explained 04:55 - Using Apache2 06:29 - How Are Port Numbers Assigned? 08:39 - Ephemeral Ports 10:42 - Using Fing 11:34 - Restarting Apache2 and Denying TCP 15:54 - Which Port Numbers to Clients Actually Use? 17:46 - On Ubuntu 19:01 - Theory vs Reality 23:37 - Difference Between Port Number and Socket 26:07 - Demonstration Continued 29:04 - What You've Learned So Far 29:54 - One Last Demonstration 32:34 - Conclusion and Outro // Detailed MENU // 00:00:00 - Introduction to the Game - David introduces a game where viewers comment on the timestamp or topic where they learn something new. 00:00:11 - Importance of Port Numbers - Emphasis on understanding port numbers for those interested in cybersecurity, networking, or other fields. 00:00:24 - Network Setup - David describes the network setup involving Kali Linux, Cisco routers, a Windows computer, and mobile devices. 00:00:48- Understanding Ports and Sockets - Queries about the difference between port numbers and sockets, and their relevance in TCP/IP. 00:01:28 - Demonstration with PuTTY and Telnet - A practical demonstration using PuTTY and Telnet to connect to a specific port on a Cisco router. 00:03:04 - Character Generator Protocol (CHARGEN) Discussion - Explaining CHARGEN Protocol and its historical significance. 00:03:11 - Disabling TCP Small Services and Testing Connection Refusal - The process of disabling TCP small services on a router and testing the impact on connectivity. 00:04:01 - Kali Linux Server Setup and Apache Service Start - Setting up a server on Kali Linux and starting the Apache service. 00:05:09 - Analyzing Network Traffic with Wireshark - Using Wireshark to analyze traffic and understand port numbers in network communications. 00:06:39 - Understanding IANA Port Numbers and Ephemeral Ports - A look at IANA's list of port numbers and an explanation of ephemeral ports. 00:07:54 - FCs and Operating System Differences in Port Usage - Discussing RFCs and how different operating systems use various port ranges. 00:08:54 - Testing Port Accessibility with Mobile Devices - Using mobile devices to test the accessibility of ports on a network. 00:11:38 - Implementing Access Lists on Cisco Router - Creating and modifying access lists on a Cisco router to control network traffic. 00:14:06 - Difference Between Port Numbers and Sockets - Explaining the conceptual difference between port numbers and sockets. 00:16:00 - Demonstrating SSH Connections and Port Usage - Demonstrating SSH connections from different devices and analyzing the port usage. 00:18:03 - Blocking SSH Traffic with Access Lists - Blocking SSH traffic using access lists on a router and observing the effects. 00:21:37 - Discussion on DNS Protocol and Traffic Blocking - Discussion on DNS protocols and the impact of blocking DNS traffic with access lists. 00:27:41 - Exploring HTTPS and QUIC Protocols with Browser Examples - Exploring HTTPS and QUIC protocols using various web browsers and analyzing network traffic. 00:32:11 - Conclusion and Future Content Ideas - Concluding remarks and thoughts on future networking-related content. kali linux linux nmap ssl http https ssh telnet chargen port port numbers wireshark #kalilinux #cybersecurity #hacker

Access Lists Ephemeral Ports Port Usage

Explore key strategies for boosting InfoSec efficiency. Learn about risk assessment, proactive planning, and integrating a strong security culture.

Efficiency Explore Explore key Improving InfoSec InfoSec Efficiency

Founded in 2017 to support startups in their IT strategy, in France and abroad, SysWings has extended its activities to the cloud and managed services. The team is made up of heterogeneous profiles, mixing employees and consultants, scaled according to your projects.

In the ever-evolving realm of cybersecurity, Promon, a trailblazer in mobile security solutions, has brought to light a novel adversary—FjordPhantom.  This Android malware employs avant-garde techniques, notably virtualization, to elude detection and pilfer sensitive user information. FjordPhantom strategically zeroes in on users within the Southeast Asian enclave, casting its digital shadow predominantly over Indonesia, Thailand, […] The post New Android Malware FjordPhantom Spreads Covertly Via Email, SMS, & Messaging Apps appeared first on Cyber Security News.

FjordPhantom Spreads Messaging Apps Spreads Covertly

Domain fronting is a technique to hide the true origin of HTTPS requests by hiding the real domain name encrypted inside a legitimate TLS request.

Domain fronting legitimate TLS real domain TLS request true origin

Cybersecurity researchers have disclosed a new sophisticated Android malware called FjordPhantom that has been observed targeting users in Southeast Asian countries like Indonesia, Thailand, and Vietnam since early September 2023. "Spreading primarily through messaging services, it combines app-based malware with social engineering to defraud banking customers," Oslo-based mobile app

Asia Cybersecurity