Shopify Shares How Hackers Help to Secure $40B+ in Transactions

Dark Reading’s Kelly Sheridan recently sat down with Andrew for a Q&A talking about Ecommerce security and their bug bounty program hosted on HackerOne.


https://www.hackerone.com/ethical-hacker...ansactions

451 Research Defines 7-Step Roadmap for Hacker-Powered Security Success

One of the top IT research and advisory companies, 451 Research, recently authored a new “pathfinder report” to help decision-makers better understand the value of bug bounties and a compliant vulnerability disclosure process in their overall software security apparatus.


https://www.hackerone.com/application-se...ty-success

Hak 5 Key Croc

https://shop.hak5.org/products/key-croc
$119.99

The Key Croc by Hak5 is a keylogger armed with pentest tools, remote access and payloads that trigger multi-vector attacks when chosen keywords are typed. It's the ultimate key-logging pentest implant.

More than just recording and streaming keystrokes online, it exploits the target with payloads that trigger when keywords of interest are typed.

By emulating trusted devices like serial, storage, HID and Ethernet, it opens multiple attack vectors – from keystroke injection to network hijacking.

Imagine capturing credentials and systematically using them to exfiltrate data. Or pentest from anywhere, live in a web browser with Cloud C2.

It's simple too. A hidden button turns it into a flash drive, where changing settings is just editing a text file. And with a root shell your favorite pentest tools like nmap, responder, impacket and metasploit are at the ready.



Hak 5 Key Croc + Screen Crab Combo Kit

https://shop.hak5.org/products/key-croc?...6744812657
$229.99

SANS Institute Partners With Google to Launch Cloud Diversity Academy



https://www.darkreading.com/cloud/sans-i...ty-academy

NIST's Quantum-Proof Algorithm Has a Bug, Analysts Say

A team has found that the Crystals-Kyber encryption algorithm is open to side-channel attacks, under certain implementations.

https://www.darkreading.com/threat-intel...g-analysts

Police Raid Rounds Up Core Members of DoppelPaymer Ransomware Gang

This is the latest in a line of law-enforcement actions busting up the ransomware scene.

https://www.darkreading.com/threat-intel...mware-gang

Shein Shopping App Glitch Copies Android Clipboard Contents

The Android app unnecessarily accessed clipboard device contents, which often includes passwords and other sensitive data.

https://www.darkreading.com/threat-intel...rd-context

Machine Learning Improves Prediction of Exploited Vulnerabilities

The third iteration of the Exploit Prediction Scoring System (EPSS) performs 82% better than previous versions, giving companies a better tool for evaluating vulnerabilities and prioritizing patching.

https://www.darkreading.com/emerging-tec...rabilities

Cyber Security Works to Rebrand As Securin Inc.

Securin Inc. will provide tech-enabled security solutions, vulnerability
intelligence and deep domain expertise.

https://www.darkreading.com/vulnerabilit...curin-inc-

Optiv Launches Full Suite of Operational Technology Services



https://www.darkreading.com/ics-ot/optiv...y-services