Last Call! Early Bird Pricing Ends TONIGHT
Today’s your final chance to grab discounted tickets for OWASP Global AppSec USA 2025—one of the year’s most anticipated cybersecurity conferences.
Don't wait, prices go up after midnight.
Recent searches
Search options
#cybersec
11 posts10 participants1 post today
https://github.com/brotheralameen1/Discordforschool/security/advisories/GHSA-63xr-98vc-whx5
Published Security Advisory for OneTrust SDK V6.33.0 Vulnerable to Prototype Pollution causing DoS in the system by editing Prototype Value. Currently, submitted this to MITRE CVE to request publication of my CVE to the National Vulnerability Database and awaiting their response. You can click the link above to learn more about the exploit.
GitHubOneTrust SDK V6.33.0 Vulnerable to Prototype Pollution causing DoS in the system by editing Prototype Value# OneTrust SDK v6.33.0 - Prototype Pollution Vulnerability via `Object.setPrototypeOf` and `Object.assign` (DoS Impact)
- **Exploit Title**: OneTrust SDK v6.33.0 - Prototype Pollution Vulnerabil...
News flash: La cybersecurity non si fa con i LED accesi!
Save big by purchasing Early Bird Tickets for OWASP Global AppSec USA 2025!
This event is built for everyone in the cyber security community and will provide networking opportunities among hundreds of professionals from across the country.
Early Bird Discounts: https://owasp.glueup.com/event/131624/register/
"Pillar Security researchers uncovered a dangerous new supply chain attack vector called ‘Rules File Backdoor.’ Threat actors could use the technique to silently compromise AI-generated code by injecting malicious code." securityaffairs.com/175593/hacki... AI #cybersec #tech #security
Rules File Backdoor: AI Code E...
Security Affairs · Rules File Backdoor: AI Code Editors exploited for silent supply chain attacksRules File Backdoor attack targets AI code editors like GitHub Copilot, making them inject malicious code via a supply chain vulnerability
"Cybercriminals are using fake search engine listings to hijack the results for people looking for tech support from brands like Apple, Bank of America, Facebook, HP, Microsoft, Netflix, and PayPal." www.darkreading.com/cloud-securi... #cybersec #data IT #tech support hack
Scammers Spread False Support ...
Cybersecurity negli ospedali non è (solo) un problema tecnico. È una questione di sopravvivenza.
Quando un ransomware blocca tutto, non si fermano solo i computer… si fermano TAC, ecografi, referti, sale operatorie e, soprattutto … vite umane.
Se proteggi i dati, devi proteggere ancora di più gli ospedali.
Free idea for a #cybersec conference, you can charge $2k for tickets.
ConCon
"Come get conned."
Pascal Steichen @LHCyber joins the #NGIForum tomorrow to speak on digital commons tools for digital sovereignty!
A leader in 
cybersecurity, he’s helped build LuxTrust, CASES & CIRCL. Don’t miss it!
#DigitalSovereignty #CyberSec #DigitalCommons #EUtech
@martelinnovate
@linuxfoundation
@cnrs
@openfuture
@OpenForumEurope
GIF
Quando un’azienda esclama con fierezza: “Tranquilli, abbiamo tutte le certificazioni!”
By Stefano Gazzella, Chief Meme Officer della Meme4cyber Unit di RHC
Siamo alla ricerca di nuovi #memengineer da inserire nella "meme4cyber Unit™". Per informazioni scrivi a meme4cyber@redhotcyber.com
In ein paar Wochen habe ich mal wieder die Ehre, einen Vortrag zu #DigitalerGewalt #Cyberstalking #Spionage halten zu dürfen. Die Basics zu Technik und Psychologie zzgl. Statistiken sind alle drin. Aber mich würde interessieren, welche #Fakten und Webseiten euch dazu besonders einfallen/ berühren, welche Hilfsangebote außer dem #WeißerRing und den #Haeksen ihr erwähnen würdet. Kurz: Was würdet ihr hören wollen?
Gerne #boost
#Schwarmintelligenz #ITSec #Cybersec #KI #hauslichegewalt
L’era delle password è finita.
Meet the Keynote Speakers for OWASP Global AppSec USA 2025!
We’re thrilled to welcome two industry legends to the main stage at OWASP Global AppSec USA in Washington, D.C., this November 6–7, 2025:
Daniel Miessler
Adam Shostack
Reserve your spot now! https://owasp.glueup.com/event/131624/register/
Quando il tuo lavoro è tenere in piedi tutta l’infrastruttura IT… ma ogni giorno ti svegli con un nuovo mini attacco di panico perché sai che il team Security ha preparato un’altra lista di “piccole cose da fare”…
Forschungsfrage:
Wenn ich alles mit KI ändern, generieren, anpassen, entfernen kann?
A) Wie sieht das mit #Beweismitteln bei z.B. #Behörden aus?
Ja, wir leben schon in Zeiten v. Photoshop, KI kann hier aber deutlich mehr. Die Tools müssen dann auch für Privatpersonen ohne IT-Skills verwendbar/validierbar sein und wenn ich eine Anzeige erstatten müsste, will ich nich erst n' #DAW lernen müssen, um z.B. 'ne Tonspur validieren zu können. Ebenfalls wird "mach ein Screenshot mit der Website v. d. Atomuhr" nich´ mehr lange halten/bestand haben.B) Wie kann "ich"/man ein "Selfmade-DIY" Foto noch als "echt" klassifizieren?
Klar könnte ich mit meinen #Openpgp key eine "Echtheit" beglaubigen, dass wäre aber allein von der Struktur falsch. Die PGP-Keys verifizieren nur, dass ich das Dokument signiert habe, nicht was ich signiert habe.-
#It #security #cybersec #forensic #polizei #research
Dedicato a tutti i dipartimenti IT in cui manca personale esperto in cybersecurity!
È finalmente arrivato il professionista che nessun SOC voleva, ma che tutti si meritano!
Addestrato in un gruppo Telegram.
Certificato da “CyberSecurity spiegata male S.r.l.” Specializzato in: “Non è colpa nostra, sarà mica l’IT esterno?”
"Il CDA ha approvato il budget!"
Quando arriva il momento della distribuzione dei budget IT, il reparto sicurezza riceve... applausi e pacche sulle spalle.
Ma poi ci si stupisce se gli attacchi informatici avvengono indisturbati senza che nessuno se ne accorga e ci si domanda: perché vendiamo meno? Come mai siamo in contro tendenza?
Microsoft e CrowdStrike hanno trovato una soluzione per il naming dei Threat Actors.
By MEMENGINEER Francesco Rotorato
Siamo alla ricerca di nuovi #memengineer da inserire nella "meme4cyber Unit™". Per informazioni scrivi a meme4cyber@redhotcyber.com
